What UK Businesses Must Know
In the recent King’s Speech, the new Labour government unveiled groundbreaking legislation aimed at tackling data sharing and cyber security. The introduction of the Digital Information and Smart Data Bill (DISDB) and the Cyber Security and Resilience Bill (CSRB) signifies a shift in approach from the previous Conservative government’s proposals, focusing on fostering economic growth while safeguarding the digital landscape.
Digital Information and Smart Data Bill (DISDB)
Harnessing Data for Secure Economic Growth
Although the full scope of the DISDB remains unclear at this early stage, it is evident that this Bill diverges from the previous Data Protection and Digital Information Bill (DPDIB). The emphasis now lies on leveraging data sharing to drive secure economic growth.
The government aims to harness the potential of data to stimulate economic development, modernise digital government, and improve the lives of individuals.
Several proposals within the new Bill mirror those of the DPDIB, including:
Digital Verification Services: Supporting the creation of secure and trusted digital identity products and services to assist individuals with tasks such as moving house, undergoing pre-employment checks, and purchasing age-restricted products.
Smart Data Schemes: Facilitating the secure sharing of customer data with authorised third-party providers.
Electronic Registration of Births and Deaths: Transitioning to an electronic system for the registration of vital events.
Strengthening the Information Commissioner’s Office: Enhancing the powers and resources of the ICO.
In addition, the Bill introduces novel proposals, such as:
National Underground Asset Register: A digital map revolutionising the installation, maintenance, operation, and repair of underground cables and pipes by providing planners and excavators with secure, instant access to necessary data.
Data Preservation Process: Allowing access to data critical for investigating the death of a child.
Broader Consent for Scientific Research: Potentially permitting scientists to seek broader consent for the use of data in research.
Notably, the absence of any mention of individual rights suggests that the data subject rights under the UK GDPR will remain unaltered. The primary beneficiaries of these proposals appear to be businesses.
Cyber Security and Resilience Bill (CSRB)
Bolstering the UK’s Cybersecurity Infrastructure
The CSRB is part of the government’s commitment to strengthening the UK’s cybersecurity infrastructure and protecting the digital economy. The current UK regulations, derived from EU law, are undergoing significant reforms in the EU with the introduction of the NIS2 Directive, which will establish a more rigorous framework across the EU from 17th October 2024.
While the previous government had indicated that NIS2 would not be replicated in the UK, proposing only limited changes to existing legislation, the Labour government’s approach to the CSRB remains to be seen. UK businesses must stay informed about the potential implications of this new legislation on their operations and compliance requirements.
As these Bills progress through Parliament, it is important for UK businesses to closely monitor developments and engage with policymakers to ensure their interests are represented. By staying proactive and prepared, businesses can navigate the evolving landscape of data sharing and cyber security regulations, seizing opportunities for growth while maintaining a robust security posture.
Important Note: Understand that the information provided is based on the limited details available at this early stage and may be subject to change as the Bills progress through the legislative process.
