We at @OpenRightsGroup made an analysis on what to expect today. Thread below
2) This Govt want the UK digital sector to be as dirty and dishonest as them, and they wrote a law for no one but the law-breakers. Everyone else will have less rights, less choices, and less access to recourse if something goes wrong. openrightsgroup.org/publications/d…
3) On top of that, mass data sharing to law enforcement agencies will cement the UK digital police state. The UK Govt will authorise any data seizure or use on their whims and with secondary legislation, undermining lawfulness and purpose limitation.
4) Individuals seeking to exercise their right of access to their data will be questioned about the motives of their requests, and accused of being vexatious. This extends to public authorities as well: those who dare to question the Government will be investigated instead.
5) At the same time, the UK Data Reform Bill would scrap robust accountability requirements and replace them with empty, box-ticking exercises where public and private organisations will be allowed to choose what homework to do and give themselves a good mark.
6) The ICO will have to report directly to the Govt as to how they are implementing the Secretary of State’s agenda, and the Commissioner could see their salary curtailed if they don’t follow orders. In essence, the ICO new job will be to please their political masters.
7) Finally, the Govt is introducing loopholes in the UK international data transfers framework. This is all about turning the UK into a data laundering hub, and allowing data oligarchs to evade the rules by transferring your data oversea.
8) Smaller UK businesses will suffer from the shredding of the UK adequacy decision instead, and will have to bear the cost and implementation of additional safeguards to make up for the unsafe regulatory environment the UK Data Reform Bill will establish.
2) First things first, you will hear “Secretary of State” often. In the UK “Data Protection Bill”, the Secretary of State rules by decrees like an absolute monarch. There is very little that the Secretary cannot derogate, amend or bend with secondary legislation…
3) …Starting from lawfulness and purpose limitation. Data processing is always considered lawful and compatible with the original purpose personal data was collected, if the Secretary of State included such processing in Annex 1 and Annex 2 (this is their name in the bill)
2) This is what you get when you carry out rigged consultation processes, as the DCMS were taking care of ignoring the critical voices with arbitrary cherry-picking and a smokescreen of wishful thinking. What could possibly go wrong? techmonitor.ai/policy/privacy…
3.1) New UK data laws will remove the balancing test for data uses based on (a list of) legitimate interests. That is to say, an interest will be considered legitimate even if it’s harmful. The Govt will have the power to amend this list of as soon as we are looking the other way
1) The UK Government published their plans to water down GDPR. It is bad, incredibly bad. My first reaction on @OpenRightsGroup blog, but if you scratch under the surface it gets even worse. You won't believe how bad it is.
Thread below
2) First things first, Government purports the new framework as intended to ‘maintain high data protection standards’. Except that, in their consultation they NEVER, EVER touch upon or seek views on how to strengthen protection for individuals.
3) Moving to funnier stuff, the UK new framework manages to scrap data protection in its entirety with one, single blow. It introduces a legal ground to ‘improve services for customers’