Getting to Know the New Digital Information and Smart Data Bill
With the previous Data Protection and Digital Information Bill (DPDI) stalled, focus has turned to the Labour government’s new Digital Information and Smart Data Bill (DISD). As outlined in the King’s Speech, this bill aims to “harness the power of data” for growth, modernising digital governance, and enhancing lives.
While details are still unfolding, the DISD is expected to reshape how businesses manage data, engage customers, and meet legal standards. We’re here to help you achieve compliance and steer you through the details of this proposed new legislation.
What are the proposed changes in the DISD Bill?
- Boosting the ICO’s Role
The Information Commissioner’s Office (ICO) is set to be given new powers. Planned changes include a restructured leadership, with a CEO, board, and chair. However, it’s unclear how these changes will ensure the ICO’s independence, a key concern under previous proposals.
- Advancing Scientific Research
The bill intends to make data access easier for scientific researchers by allowing broad consent for research purposes. Similar provisions were included in the DPDI Bill to reduce restrictions on personal data processing for scientific research.
- Digital Verification Services
To simplify identity checks for everyday activities, the DISD Bill aims to promote secure digital identity products provided by certified providers. This will streamline processes like age verification, employment screening, and home buying, potentially making online transactions faster and safer.
- Increased fines
Increased maximum fines under the Privacy and Electronic Communications Regulations from £500k to £17.5 million or 4% of annual global turnover.
- Smart Data Schemes
The DISD Bill proposes a legal framework for “Smart Data,” enabling customers (both individuals and businesses) to share their data securely with authorised third-party providers. These providers could enhance customer data with additional context to support better decision-making.
- Simplifying cookies notice/banners requirements
The definition of “necessary” cookies will be made broader which means that cookies consent will not be required for analytics cookies.
- Privacy notice changes
Some of the legislation will impose more obligations. For example, privacy notices will have to include a new data subject right to complain. There is also the possibility of more types of special category data being introduced.
What should I do next?
As we await more details on the DISD Bill, it’s crucial for businesses to stay informed. Understanding the new regulations early on will help businesses adapt and prepare for changes in the data landscape.
We will continue to monitor the progress of the bill. Sign up to our mailing list or revisit the Devant blog and we’ll bring you more information and advice.