The “Data (Use and Access) Bill” (DUA), which was introduced by the U.K. Department for Science, Innovation, and Technology (DSIT), aims to adapt post-Brexit data reforms and revive previously abandoned legislation. By increasing public sector efficiency through streamlined data sharing across sectors including healthcare and law enforcement, the measure is expected to boost the UK economy by £10 billion.
Digital identity verification, the expansion of open banking-style smart data initiatives, and the modernization of birth and death registers are among the main provisions. Additionally, it gives academics access to platform data and aims to address concerns about online safety by keeping track of small fatalities on social media.
In order to comply with the EU’s impending adequacy review in 2025, the bill also amends previous recommendations pertaining to the General Data Protection Regulation (GDPR) in the United Kingdom. In order to keep the UK in line with EU requirements for ongoing data flow, this entails reversing earlier measures that would have compromised data protection standards.
The measure, however, is criticized by proponents of digital rights like Open Rights Group (ORG) for possibly weakening protections, especially with regard to automated decision-making in fields like welfare, immigration, and employment. Additionally, ORG alerts people to potential vulnerabilities that could restrict their control over their data.
Changes to cookie consent laws and privacy warnings are among the other updates. While the measure tightens regulations on pixel monitoring and device fingerprinting used in internet marketing, it also suggests relaxing the requirements for publishing privacy disclosures where doing so is judged necessary.
The measure raises worries among privacy advocates due to its consequences for data privacy and rights, even though it includes mechanisms to better public services and streamline processes.