United Kingdom: Rejected Data Protection and Digital Information (No.2) Bill including cybersecurity regulation

On 30 May 2024, the UK Parliament rejected the Data Protection and Digital Information Bill, including cybersecurity regulation, after the Bill was not adopted or carried over to the next session of Parliament following its dissolution. The Bill would have amended the UK Data Protection Regulation provisions in regard to the obligations of entities to safeguard the personal data they store. In particular, the Bill would have required entities to adopt “appropriate measures, including technical and organisational measures”, to ensure the security of the data and comply with the data protection by design requirements.