A UK-Specific Data Protection Framework? The British government announced at the 2022 Conservative party conference at ICC Birmingham that it will replace the General Data Protection Regulation with a new British data protection system. Culture secretary Michelle Donelan said the change is being made as the current EU GDPR is “limiting the potential of our businesses” and that the system will be more “business and consumer friendly”. She went on to say:
The Need for Legislation Software vendors and technology manufacturers seem to be racing each other to include AI in their products. Service providers, social media platforms, and online shopping giants all use AI too. Amazon uses AI to suggest products to you based on your purchase, search, and viewing history. YouTube does something similar to compile video suggestions for you. AI also touches our lives in more subtle, behind-the-scenes, ways.
UK EU Adequacy Decision Accepted On the June 17, 2021 the EU countries voted on the adequacy decision for the UK. The item in question—the bit that’s either adequate or not—is the UK’s data protection framework. The data protection framework of a non-EU country has to be ratified by the EU before personally identifiable information is permitted to be sent from the EU to that country. Basically, the data protection framework in the non-EU country must be as thorough as the GDPR, and the personally identifying information must be protected and safeguarded just as comprehensively as if it were being processed in a EU country.
EU Parliament votes on UK Adequacy Decision Today This morning the European Parliament will debate the adequacy or otherwise of the protection of personal data provided by the United Kingdom’s data protection framework. This is the UK’s version of GDPR as contained within the Data Protection Act 2018 (DPA 2018). Two resolutions will then be put to the vote. Although we’ve come this far and we’re close, it isn’t a done deal.
Post-Brexit EU-UK Adequacy Decision Has Been Drafted Before you can transmit personal data from a European Union country to a country not within the EU or the European Economic Area—known as a third country—there has to be an adequacy decision made by the European Commission. The third country must have a framework in place that both provides data protection and upholds the rights of the data subjects as well as—or better than—the EU’s General Data Protection Regulation.
Copyright (c) 2020-22 McKay Consulting. All Rights Reserved.
Template by Bootstrapious. Ported to Hugo by DevCows.
