Internet: Privacy

The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA) apply to all online services that use personal data and require organisations to process personal data lawfully, fairly, transparently and securely, unless certain limited exemptions apply. The legislation already gives consumers important rights in relation to their personal data, such as the right to seek access to it, object to its processing or seek its erasure. Consumers can also bring complaints about the handling of their personal data to the independent regulator for data protection, the Information Commissioner’s Office (ICO).

Measures in the Data (Use and Access) Bill include revamping the ICO with a new governance structure and powers of enforcement – ensuring people’s personal data will continue to be protected to high standards. Under the new digital markets regime, the Competition and Markets Authority could also introduce targeted remedies that strengthen consumer choice and control.