UK data protection reform, take 2.
The UK Government introduced the Data Protection and Digital Information (no. 2) Bill to Parliament on 8 March 2023 ("DPDI No.2"), withdrawing its previous Data Protection and Digital Information Bill ("DPDI No.1"). In October 2022, Michelle Donelan, now Secretary of State for the Department of Science, Innovation and Technology (DSIT), had trailered "a truly bespoke, British system of data protection", leaving us wondering (for a time) if we were to wave "goodbye" to the UK GDPR. As it transpires, DPDI No.2 is a modest uplift to DPDI No.1 and, overall, the package of reforms is not a dramatic departure from the UK GDPR, the framework of which is also to be retained. This briefing looks at the recent changes.