Data Protection and Digital Information Bill

The Data Protection and Digital Information Bill was a proposed <a href="/facts/Act_of_Parliament_(UK)/apqk8I13">act</a> of the <a href="/facts/Parliament_of_the_United_Kingdom/7bFbPI9g">Parliament of the United Kingdom</a> introduced by the <a href="/facts/Secretary_of_State_for_Science%2c_Innovation_and_Technology/ksLuzQsL">Secretary of State for Science, Innovation and Technology</a>, <a href="/facts/Michelle_Donelan/Qq465qhu">Michelle Donelan</a>, on 8 March 2023 in the 2022–23 Session and <a href="/facts/Carry-over_motion/6u1DvdQ9">carried over</a> to the 2023–24 Session.
The <a href="/facts/Bill_(law)/4l6xGHIh">bill</a> would have significantly amended the <a href="/facts/Data_Protection_Act_2018/PjWKsF2e">Data Protection Act 2018</a> and the <a href="/facts/UK_GDPR/RMLY6ohr">UK GDPR</a>.
The legislation proposed to replace EU-derived data protection laws with a new UK regime of such laws. The bill would have established an Information Commission and transferred the Information Commissioner's functions to the commission. It also mandated the removal of cookie pop ups and banned nuisance calls with the power for increased fines. 
The bill mandated the creation of a digital verification services trust framework, in consultation with the Information Commissioner. The trust framework would have been empowered to set rules and conditions for approval of DVS services, as well as specify commencement times and transitional provisions for these services. The bill also required the Secretary of State to keep a register of digital verification services and conferred powers to award a trust mark for use by persons providing registered digital services.
The bill passed the <a href="/facts/House_of_Commons_of_the_United_Kingdom/IyyztqLo">House of Commons</a> on 29 November 2023 and was introduced to the <a href="/facts/House_of_Lords/ycQphmgj">House of Lords</a> by the <a href="/facts/Department_for_Science%2c_Innovation_and_Technology/H4lbPY1P">Parliamentary Under-Secretary of State for Artificial Intelligence and Intellectual Property</a>, <a href="/facts/Jonathan_Berry%2c_5th_Viscount_Camrose/lXyJnpfW">Viscount Camrose</a>, on 6 December 2023. The bill passed <a href="/facts/Committee_stage/apqk8I13">Committee Stage</a> in the Lords on 24 April 2024 and was at <a href="/facts/Report_stage/apqk8I13">report stage</a> in the Lords when parliament was <a href="/facts/Prorogation_in_the_United_Kingdom/4Ma0FT76">prorogued</a> on 24 May 2024 for <a href="/facts/Dissolution_of_the_Parliament_of_the_United_Kingdom/26qm5w9g">dissolution</a> before the <a href="/facts/2024_United_Kingdom_general_election/MEpNJrYu">2024 United Kingdom general election</a>. The bill was not completed during the <a href="/facts/Wash-up_period/IpMqVL5e">wash-up period</a> and so it failed to become legislation. 
Certain parts of the bill were the subject of controversy, in particular the power of the Secretary of State to force banks to monitor benefits claimants bank accounts, which the government said was to root out benefit fraud. A subsequent legal opinion indicated that the powers would breach the <a href="/facts/European_Convention_on_Human_Rights/yEyFjz25">European Convention on Human Rights</a>. The controversial elements of the bill were amendments added by the <a href="/facts/Department_for_Work_and_Pensions/QyEt8U45">Department for Work and Pensions</a> at a very late stage with limited industry consultation.

Data Protection and Digital Information Bill open-in-new

Data Protection and Digital Information Bill