United Kingdom: Introduced Data (Use and Access) Bill including data protection regulation

On 23 October 2024, the Data (Use and Access) Bill was introduced to the United Kingdom’s parliament. The Bill introduces a framework to regulate the access, sharing, and protection of customer and business data across various sectors. The Bill empowers the Secretary of State and the Treasury to create regulations governing how businesses must handle customer data, including provisions for customers or authorised persons to request their data. Business data includes details about goods, services, and digital content, as well as feedback and usage information. The Bill establishes a framework for digital verification services (DVS), creates a register for identity verification providers, and mandates the maintenance of the National Underground Asset Register. It includes provisions on the processing of sensitive data, automated decision-making, and the rights of data subjects.