United Kingdom: Introduced Data Protection and Digital Information (No. 2) Bill including data protection authority governance

On 8 March 2023, the Data Protection and Digital Information (No. 2) Bill, including data protection authority governance, was introduced in the United Kingdom (UK) Parliament. The Bill would amend the UK Data Protection Regulation provisions in regard to the recognised legitimate interests for processing personal data. In particular, the Bill would give the Secretary of State the power to extend the list of the recognised legitimate interests when it considers that it is necessary to uphold the interests, rights and freedoms of data subjects and provide special protection to children's data. Furthermore, the Bill would abolish the office of the Information Commissioner and establish a statutory board, the Information Commissioner.