Data Protection Bill

26 September 2017

The Data Protection Bill 2017 has now been published to modernise laws in line with the increasing digital world.

The bill introduces new UK legislation to introduce the content of the new European data protection legislation, the GDPR (General Data Protection Regulation), across all general data processing in the UK.

The bill will govern the general data requirements that are stipulated within GDPR but will also extend to other general data, law enforcement data and national security data.  It introduces some facility for derogation from the UK law in aspects such as child protection, financial services and academic research.    

The new legislation will replace the Data Protection Act 1998.  The huge advances in technology in the intervening 20-year period present everyday challenges to UK business and this will provide a timely opportunity to review and refresh out processes for the protection of our personal data.

To read the Government documentation, click here.

Aspire Comment

It is essential that businesses conduct a complete review of their data protection practices.  This is a substantial project and it needs to be started now!  We recommend that, as a starting point, you conduct an audit to review;

  •  What personal data you obtain
  •  The basis upon which you hold the data
  •  How you retain and protect personal data within your rights       
  •  What are the risks and how can you mitigate them
  •  What process do you need to adopt to meet your legislative obligations

If you would like Aspire to help with your Data Protection project please contact us by calling 0121 445 6178 or email us at enquire@aspirepartnership.co.uk