The UK government wants to reform its data protection regulations. They claim this will help small businesses flourish online, but critics are worried that the changes could threaten the privacy of UK citizens. Are these fears justified?
UK GDPR is the current data legislation in the UK. It came into effect at the start of 2021, when the UK left the European Union. Originally, the UK followed the EU’s General Data Protection Regulation (just referred to as GDPR).
The EU’s GDPR was introduced in 2018 and has been widely welcomed by data protection groups and privacy advocates. It replaced the 1998 Data Protection Act, and raised the penalties that companies could pay for mishandling user data.
UK GDPR aligns closely with the original GDPR, but a recent proposal by the UK government has now outlined a number of reforms they want to make to these laws.
The new proposals, titled “Data: a new direction”, are currently under consultation, so nothing is finalized yet. But what is the government proposing, exactly?
According to their own documents, the UK government wants to “create an ambitious, pro-growth and innovation-friendly data protection regime that underpins the trustworthy use of data.”
This appears to involve a push for deregulation, something data privacy advocates are vocally opposed to. According to digital rights campaigners at Open Rights Group, the government’s changes will reduce “transparency and accountability requirements for data controllers”.
The question is, are these fears credible?
The UK government claims that it can generate billions of pounds for the UK economy “by removing barriers to responsible data use and reducing business burdens”.
According to their proposals, they want to make it easier for companies to comply with data regulations, which would (in theory) benefit smaller businesses rather than large corporations.
It’s hard to see how deregulation wouldn’t also help tech giants and big data-driven companies, however, even if that’s not the intention behind the reforms.
Again, we are still in the early stages of the reform process. Consultations on the proposed reforms aren’t even closed yet.
However, the UK government’s desire to deregulate the data market should raise some concerns. Tech giants and online advertisers have been growing in influence for decades, and relaxing data restrictions now can only consolidate their power.
It’s also concerning to see that the writers of the proposals have included statistics (from Deloitte and the ONS) that seem to suggest a drop in public concerns around corporate data usage.
These statistics are presented as a justification for deregulation, but it only points to the worrying fact that many people in the UK aren’t aware of the risks posed by companies mishandling their data.
If UK GDPR is reformed in this way, making it easier for companies to collect and store user data, individual internet users could lose even more control of their private information.
Here are three key reasons why weakening UK GDPR rules could be problematic.
Want to read more like this?
Get the latest news and tips from NordVPN.