PLP is urging Parliamentarians to make key changes to the Data Protection and Digital Information Bill to improve transparency and accountability and to ensure data rights are not eroded.

Read our Second Reading briefing

ADM powered by big data can result in quicker and more consistent outcomes. It also carries the risk of discrimination and harm. Decisions made by automated processes can have life-altering consequences.

We’re calling for the following key changes to be made:

  • Clause 7 should be removed from the Bill: it significantly limits people’s ability to access information about how their personal data is being collected and used.
  • Clause 9 should be removed from the Bill: it curtails the right of the data subject to be informed of how their data is used.
  • Clause 11 should be removed and Article 22 (the requirement for human oversight) is retained to prohibit solely automated decision-making.
  • Clause 17: changes that lower the minimum requirements of an impact assessment should be removed from the Bill.
  • Members may wish to question why Clauses 5 and 6 of the Bill contain broad and unspecified powers for the Secretary of State to amend the UK GDPR via statutory instrument, without scrutiny by Parliament.
  • Clause 106 should be narrowed to limit ministerial powers. Ministers should only make provisions that are consequential on the Act only were necessary, as recommended by the Delegated Powers and Regulatory Reform Committee.

Read our Second Reading briefing