United Kingdom: Announced Data Reform Bill

On 17 June 2022, the UK Government Department for Digital, Culture, Media & Sport published an outline of the planned Data Reform Bill, including descriptions of the major planned changes to the national data protection regime. The Bill will make changes to how businesses are required to manage data risks, including by removing the requirement for small businesses to have Data Protection Officers and undertake impact assessments. The Bill will also increase the maximum fines for nuisance calls, texts, and serious data breaches. Further, it aims to change online cookie consent practices by adopting an in-browser opt-out model which will reduce the number of opt-in boxes shown to users. The Bill also envisions reforms of the Information Commissioner's Office and cross-border data transfers.