The Data Protection and Digital Information Bill was first introduced last summer but paused in September 2022 so ministers could engage in a co-design process with business leaders and data experts. It seeks to move away from the ‘one-size-fits-all’ approach of GDPR and maintain Britain’s data protection standards – so businesses can continue to trade freely with global partners, including the EU.

Science, Innovation and Technology Secretary, Michelle Donelan said: “This new Bill ensures that a vitally important data protection regime is tailored to the UK’s own needs. Our system will be easier to understand and easier to comply with. This Bill will unlock new discoveries, drive forward next-generation technologies, create jobs, and boost our economy.”

The Bill aims to: 

• Introduce a simple and clear framework that will not be costly to implement – taking the best elements of GDPR and providing businesses with more flexibility about how they comply with the new data laws

• Ensure our new regime maintains data adequacy with the EU, and wider international confidence in Britain’s comprehensive data protection standards

• Further reduce the amount of paperwork organisations need to complete to demonstrate compliance

• Support international trade without creating extra costs for businesses if they’re already compliant with current data regulation

• Provide organisations with greater confidence about when they can process personal data without consent

• Increase public and business confidence in AI technologies by clarifying the circumstances when robust safeguards apply to automated decision-making

The PPA is analysing what the Bill means for PPA members, particularly in relation to ensuring a new system will not be too different from GDPR that it will disrupt business.