UK’s New Data Bill: A Threat to GDPR Compliance?
Concerns have been raised by Paul Tang, a member of the European Parliament, regarding the UK’s new Data Protection and Digital Information Bill and its potential implications for the European Union’s General Data Protection Regulation (GDPR). The bill, which aims to replace the current GDPR framework within the UK, is seen as a move that could weaken the stringent data protection measures established by the GDPR, particularly in terms of biometric data protection and data sharing with third parties who may not meet the EU’s data protection standards. This has sparked a debate about the future of EU-UK data adequacy agreement, a key component that facilitates seamless data transfers between the two regions.
Tang’s letter to the European Commission highlights his concerns, specifically pointing out the bill’s provisions that could undermine the safeguards set by the European Court of Human Rights, and potentially jeopardize important law enforcement cooperation frameworks like Prüm II and the Law Enforcement Directive. These frameworks are crucial for automated data exchange and police cooperation across borders, and any disruption could have significant implications for both EU and UK citizens’ rights and security.
The letter also questions the compatibility of the UK’s bill with the European Court of Human Rights’ ruling in the case of S and Marper vs. UK, which emphasizes the right to privacy in the context of retaining DNA samples. This aspect is particularly worrying for the protection of biometric data of European citizens under the GDPR. Furthermore, there is growing concern among UK parliament members, businesses, and researchers about the bill’s potential to jeopardize the data adequacy agreement with the EU, which is vital for maintaining the current level of data exchange and cooperation.
As the European Commission has yet to receive the official letter, the future actions regarding the adequacy decision and the broader implications of the UK’s Data Protection and Digital Information Bill remain uncertain. However, the concerns raised indicate a potential shift in the landscape of data protection and privacy, highlighting the need for careful consideration of the bill’s impact on EU-UK relations and the protection of individual rights.
Source: Concerns raised over UK Data Protection Bill’s impact on EU’s GDPR