Data protection in post-Brexit Britain: A response to the Government of the United Kingdom’s public consultation on reforms to the data protection regime (“Data: A new direction”)
Ever since the United Kingdom’s exit from the European Union, the UK government has made it clear that they see opportunities for enacting new legislation. One of these opportunities is to legislate how new technologies are to be used, and how citizens’ personal data is handled where it is used as a necessary component of such technologies. On September 10th 2021, the Department for Digital, Culture, Media & Sport (DCMS) launched its public consultation for proposed reforms to the UK’s data protection regime. We believe that it is appropriate that careful eyes are kept on the UK’s data protection regime in order to ensure that existing legal frameworks are appropriately future proofed, especially when we consider that the overall UK regulatory environment is in-flux, as UK law and policy begins to diverge from that of the European Union. This appropriate future proofing of a new data protection laws includes both the public and private sector use of technologies requiring the processing of high-volumes of personal data – in many cases making use of machine learning techniques – that can expose data subjects to considerable harms to their fundamental rights and personal interests. In this response we set out some of the concerns we are having about this legislative proposal, and why a change of course is called for.