The Data Protection and Digital Information Bill would amend existing data protection legislation in ways the government says would reduce burdens on organisations while maintaining high data protection standards. 

Among other things, the bill would also reform the governance structure and powers of the information commissioner. It would clarify rules on international data transfers, allowing the secretary of state to approve ‘data bridges’ with other countries. It would establish a regulatory framework for digital verification services providers. It would enable the government to require data holders to share customer data at the customer’s request to enable smart data schemes. It would enable law enforcement authorities to retain biometric data obtained from foreign partners for longer. It would allow Ofcom to require social media companies to retain information in connection with an investigation by a coroner into the death of a child who was suspected to have died by suicide. It would establish electronic, rather than paper-based, registers of births and deaths. It would also establish a national underground asset register. It would abolish the biometrics commissioner and surveillance camera commissioner, transferring some of their functions to other regulators. 

Hundreds of government amendments were made to the bill in the House of Commons. Labour argued at report stage that the bill should be recommitted to a public bill committee to allow further scrutiny, but this motion was defeated. Labour welcomed a government amendment at report stage removing the secretary of state’s power to veto codes of conduct drawn up by the information commissioner. MPs raised concerns about new provisions added at report stage to enable the government to require banks and financial institutions to provide data about accounts linked to benefit claimants, which the government argues is necessary to tackle benefit fraud. MPs questioned why state pension claimants were included. They also raised concerns about the Department for Work and Pensions (DWP) having powers to look at people’s bank accounts without grounds for suspicion. The provisions were added to the bill after a division. Non-government amendments on democratic engagement, high-risk processing of data and safeguards on automated decision-making were defeated at report stage.


Related posts

  • A new national policy statement for nuclear energy generation

    National policy statements (NPSs) inform decision-making for nationally significant infrastructure projects. The current NPS for nuclear power generation (EN-6) has effect for listed nuclear projects capable of being deployed by the end of 2025. Both the current and previous governments have consulted on a new NPS (EN-7) that would apply to nuclear power stations expected to be deployed after 2025. This briefing gives an overview of NPSs, the proposed new NPS for nuclear power generation and the reaction to it, as well as the current government’s policy on nuclear energy.

    A new national policy statement for nuclear energy generation
  • Public Authorities (Fraud, Error and Recovery) Bill: HL Bill 96 of 2024–25

    The government has committed to reducing and reclaiming public money lost to fraud and error. The Public Authorities (Fraud, Error and Recovery) Bill contains provisions to extend Cabinet Office and Public Sector Fraud Authority powers to tackle fraud and error outside the tax and benefits system, and also expands powers to tackle fraud within the benefits system. The bill is due to have its second reading in the House of Lords on 15 May 2025.

    Public Authorities (Fraud, Error and Recovery) Bill: HL Bill 96 of 2024–25