The Queen's Speech 2022 (the "Speech"), given on 10 May 2022 (available here), details the UK Government's priorities for the year. Although its focus was primarily on the cost of living crisis and proposed economic measures, the Speech confirmed that the UK's data protection regime will be reformed by way of the 'Data Reform Bill'.
Businesses can expect the Data Reform Bill to have a large impact on their data protection practices and data governance.
This announcement follows the "Data: a new direction" consultation published by the UK Government in September 2021, which included proposals in five broad categories:
- Boosting trade and reducing barriers to data flows;
- Reduction of administrative burdens on businesses;
- Reduction of barriers to responsible innovation;
- Delivery of better public services; and
- Reform of the Information Commissioner's Office.
Some key proposals detailed in the consultation, which may be included in the Data Reform Bill include:
- An ambitious programme of risk based adequacy assessments to expand the list of countries that are designated by the UK as offering adequate data protection to include countries such as the United States of America, Singapore, Brazil and Australia;
- Removing or reducing documentation and governance requirements for businesses such as the need to appoint a Data Protection Officer, undertake data protection impact assessments, keep records of processing activities and remove the need to consult with the ICO before undertaking high risk processing activities;
- Allowing businesses to use analytics cookies and other similar technologies without requiring the consent of users to reduce excessive cookie pop-ups on devices; and
- Providing clarification as to the 'legitimate interests' ground used for lawful processing of personal data though the use of an exhaustive list of pre-approved legitimate interests for which businesses can process data without undertaking further testing.
For further information on the proposed measures consulted on, please see our previous legal update available here. The outcome of the consultation has not yet been published, following its closure to responses in November 2021.
Originally published 12th May 2022.
Visit us at mayerbrown.com
Mayer Brown is a global legal services provider comprising legal practices that are separate entities (the "Mayer Brown Practices"). The Mayer Brown Practices are: Mayer Brown LLP and Mayer Brown Europe - Brussels LLP, both limited liability partnerships established in Illinois USA; Mayer Brown International LLP, a limited liability partnership incorporated in England and Wales (authorized and regulated by the Solicitors Regulation Authority and registered in England and Wales number OC 303359); Mayer Brown, a SELAS established in France; Mayer Brown JSM, a Hong Kong partnership and its associated entities in Asia; and Tauil & Chequer Advogados, a Brazilian law partnership with which Mayer Brown is associated. "Mayer Brown" and the Mayer Brown logo are the trademarks of the Mayer Brown Practices in their respective jurisdictions.
© Copyright 2021. The Mayer Brown Practices. All rights reserved.
This Mayer Brown article provides information and comments on legal issues and developments of interest. The foregoing is not a comprehensive treatment of the subject matter covered and is not intended to provide legal advice. Readers should seek specific legal advice before taking any action with respect to the matters discussed herein.