Data Protection and Digital Information Bill
For those who avoid breaking out in a cold sweat at the prospect of personal data being processed under a contract, confident in the knowledge that they finally have a good grasp of the current data protection legal framework, the bad news is that changes are afoot.
The good news is that the Bill is intended to update and simplify the current legal framework, taking a more risk-based approach so that lower-risk situations can be more easily navigated; with organisations being given “greater flexibility on how to comply with certain aspects of the legislation and providing more certainty and stability for cross-border flows of personal data”.
Acknowledging that there are some who have treated the regime as a box-ticking exercise, the Government’s intention is for the Bill to move practice away from that approach and adopt one which encourages a proactive and systemic approach. The Bill is expected to become law during 2024.
