On 8 March 2023,  the Data Protection and Digital Information (No.2) Bill (“DPDI No.2 Bill”) was laid before Parliament. The aim of the Bill remains the same as the now-withdrawn Data Protection and Digital Information Bill (“DPDI Bill”), the updating and simplification of the UK’s data protection framework.

As before, rather than replacing existing UK data protection legislation, the DPDI No.2 Bill amends the UK’s existing and retained version of the EU General Data Protection Regulation (“UK GDPR”) and Data Protection Act 2018 (“DPA 2018”), meaning that readers need to cross refer between the relevant content.

The scope and content of DPDI No.2 Bill remains much the same as the DPDI Bill, with some targeted clarifications and changes made.

The second reading is scheduled for 17 April 2023, and it is expected that the Bill will proceed further than its predecessor.

In this attached document, the DAC Beachcroft Data, Privacy & Cyber team provides analysis of the key features of the DPDI No.2 Bill, including those clarifications from the original DPDI Bill. We will update this analysis at regular intervals as the DPDI No.2 Bill progresses through Parliament over the coming months.

Click here to view our analysis of the key features of the DPDI No.2 Bill.