Offbeat

Legal

Coming soon to a Parliament near you – UK's Data Protection Bill

First reading to be squeezed into short September term


The UK's new legislation on data protection is to get its first airing in Parliament next month, the government has said.

The Data Protection Bill, announced in the Queen's Speech at the end of June, will replace existing data protection legislation on both corporate data and data processing by law enforcement agencies.

The Department for Digital, Culture, Media and Sport confirmed to The Reg that the aim was to introduce the Bill when the House returns from summer recess in September.

The Bill will also bring the UK's laws into line with the EU's General Data Protection Regulation, which comes into force in May 2018.

Although the UK is leaving the EU, it will have to adhere to the GDPR for about a year as a member state, and – if it wants to continue exchanging data with EU countries – will have to demonstrate compliance even after Brexit.

The House of Lords EU Home Affairs Sub-Committee recently called on the UK to seek an adequacy decision from the EU that certifies it provides the right standard of protection.

The peers said this would be "least burdensome" and offer more stability or smaller businesses, echoing advice from the UK's data protection watchdog, the Information Commissioner's Office.

An adequacy agreement would effectively mean the UK's legislation would need to mirror the EU's, even if changes are made after the UK leaves the bloc. As the committee's chairman Michael Jay told The Reg last month: "The European Court of Justice is going to continue to have an indirect effect on the way our own data protection rules evolve."

However, there are some areas in which EU countries have the flexibility to set their own rules around data protection, which are expected to be laid out in the Data Protection Bill when it pops up on Parliament's agenda.

Because party conference season kicks off at the end of that month – the House only sits for just under two weeks between September 5 and 14 – there isn't too big a window for it to slip into Parliament.

But the first reading is largely a formality, with the short title read out in the House. The second reading is the first chance lawmakers get to debate it, and a date is yet to be set for that. ®

Send us news
19 Comments

US government excoriates Microsoft for 'avoidable errors' but keeps paying for its products

In what other sphere does a bad supplier not feel pain for its foulups?

The UK Digital Information Bill: Brexit dividend or data disaster?

Move could 'weaken' Brits' personal data rights when info is transferred outside Europe

H-1B visa fraud alive and well amid efforts to crack down on abuse

It's the gold ticket favored by foreign techies – and IT giants suspected of gaming the system

IBM accused of cheating its own executive assistants out of overtime pay

Big Blue bosses retaliate against those seeking overtime, lawsuit claims

HPE sues China's Inspur Group over server patents

Middle Kingdom biz accused of IP theft and changing names to evade sanctions

OpenAI's GPT-4 can exploit real vulnerabilities by reading security advisories

While some other LLMs appear to flat-out suck

What's up with AI lately? Let's start with soaring costs, public anger, regulations...

'Obtaining genuine consent for training data collection is especially challenging' industry sages say

British watchdog has 'real concerns' about the staggering love-in between cloud giants and AI upstarts

Billions in investment? Yeeeah, right – looks more like ensuring only select few developers thrive

Netherlands arm of KPMG fined $25M for cheating in exams

Staff followed US lead and shared answers after move to online testing

CHIPS Act hangover sees most US science agency budgets cut for 2024

2025 unlikely to see more money flow as Congress turns off the tap

Lawsuit claims Meta hobbled Facebook Watch to help Netflix

Advertiser antitrust lawsuit says claimed deal with Netflix is anticompetitive

Rubrik files to go public following alliance with Microsoft

Cloud cyber resilience model could raise $700M despite $278M losses