GDPR: The Road to Reduce Paperwork and Consent Pop-ups

The UK government has introduced the Data Protection and Digital Information Bill to Parliament, which aims to replace the GDPR. The bill was first introduced last summer and was paused in September 2022 so ministers could engage with business leaders and data experts to ensure the new regime embodies the UK’s high standards for data protection and privacy. However, the process to introduce the bill has now resumed its passage in Parliament.

Key Points

The updated bill aims to introduce a simple, transparent, and business-friendly framework that takes the best elements of the GDPR and provides businesses with more flexibility on how they comply with new data laws. The latest data laws will reduce paperwork for businesses and reduce consent pop-ups.  It seeks to ensure data adequacy while moving away from the ‘one-size-fits-all’ approach of the European Union’s GDPR.

Additionally, the new bill is expected to save £4.7 billion for the UK economy over the next 10 years while maintaining high data protection standards. Furthermore, the bill also aims to increase public and business confidence in AI technologies by clarifying the circumstances when robust safeguards apply to automated decision-making.

Key Differences

The current data laws are unclear on how scientists can process personal data for research purposes, which holds them back from completing vital research. The bill has updated the definition of scientific research to clarify that commercial organizations will benefit from the same freedoms as academics to carry out innovative scientific research.

The updated bill aims to further reduce the amount of paperwork organisations need to complete to show compliance, and now only organizations whose processing activities are likely to pose high risks to individuals’ rights and freedoms will need to keep processing records. The new rules will give organizations more clarity about when they can process personal data without needing consent or weighing up their interests in processing the data against an individual’s rights for certain public interest activities.

The bill also ensures that organisations can use automated decision-making with more confidence and that the right safeguards are in place for the people about whom those decisions are taken. This means people will be made aware when such decisions are made and can challenge and seek human review when those decisions may be inaccurate or harmful. The updated bill also ensures businesses can continue to use their existing international data transfer mechanisms to share personal data overseas if they are already compliant with current UK data laws.

Summary

To summarise, the Data Protection and Digital Information Bill is a positive development for businesses and consumers alike. It seeks to reduce unnecessary paperwork, increase public and business confidence in AI technologies, and support international data sharing while maintaining high data protection standards.

Get in Touch

If you have any GDPR-related queries, then please don’t hesitate to get in touch by filling in our online contact form.