UK Government sets out its approach to UK data adequacy decisions
As the UK awaits the final decision from Brussels on its data adequacy decision - enabling the continued free flow of personal data between the European Economic Area and the UK - the UK government is already making its own preparations to strike new adequacy arrangements with other countries around the globe.
The Memorandum of Understanding, which was signed between the Secretary of State for the Department for Digital, Culture, Media and Sport and the Information Commissioner and published on 19 March, provides details on the UK’s approach to new adequacy arrangements.
The objectives of the Memorandum of Understanding (MoU) include setting out how DCMS and the ICO will share expertise and maintain a working-level of cooperation and consultation and the respective roles and responsibilities of DCMS and the ICO in the context of future decision-making by the Secretary of State in relation to UK Adequacy Regulations.
This transparency is welcome and something techUK has called for.
The MoU outlines the UK Adequacy Assessment Work, which will unfold in four broad phases:
(1) Gatekeeping – the decision as to whether to commence an assessment in respect of the specific country, territory, business sector or competent international organisation.
(2) Assessment - collecting and analysing information relating to the level of data protection within the specific country, territory, sector or international organisation.
(3) Recommendation - DCMS UK Adequacy Assessment team making a recommendation to the Secretary of State who will then decide whether to make a finding of adequacy and make UK Adequacy Regulations in respect of another country, territory, sector or international organisation being assessed.
(4) Procedural - formalising the relevant UK Adequacy Regulations, laying these in Parliament, and any subsequent publication of the ICO’s opinion.
Despite a close working-level engagement between DCMS and the ICO throughout all the four stages of this process, the UK Government will undertake UK Adequacy Assessment Work and the DCMS Secretary of State alone retains the decision-making power as to the adequacy of another country. The Secretary of State will consult the ICO before making UK Adequacy Regulations and will take into account, but is not bound by, the ICO’s views.
This Memorandum of Understanding will be reviewed between 1 July 2021 and 31 December 2021 and annually thereafter, unless a review is mutually agreed to be required sooner.
Complimenting this development is Minister for Media and Data, Rt. Hon John Whittingdale OBE MP’s blog published by Privacy Laws & Business where he confirms the UK’s intention to expand the list of adequate destinations “in line with the UK’s commitment to high standards of data protection” and remove unnecessary barriers to transfers of data to the UK, from international partners beyond the EU.
The Minister also stated that the UK government will be developing a toolkit based around the data rights and approaches in UK law, which will be focused on removing the unnecessary bureaucracy in the system and on getting the right outcomes for data protection.
techUK has recently published a discussion paper on the future of data governance which provides an number of suggestions to create a success international transfers regime for the UK and we look forward to working with DCMS ahead of the release of the National Data Strategy.
Alessandra is techUK’s Policy Manager for Data. She leads techUK’s working groups on Data Protection and Open Data and supports members on key issues such as the UK’s National Data Strategy.
Prior to working for techUK, Alessandra was a Consultant for a Public Policy firm based in London where she helped international technology companies navigate the risks and opportunities of digital policy. Alessandra has experience working for the European Asylum Support Office, the Malta High Commission in London during Malta’s first rotating presidency of the Council of the EU, and the European Parliament Information Office in Valletta. She holds an MSc in Public Policy and a B.A in European Studies.
As Head of Policy Neil leads techUK's domestic policy development. He regularly engages with UK and Devolved Government Ministers, senior civil servants and Members of the UK’s Parliaments with the aim of supporting government and industry to work together to make the UK the best place to start, scale and develop technology companies.
Neil joined techUK in 2019 to lead on techUK’s engagement in the UK-EU Brexit trade deal negotiations, as well as leading on economic policy.
He has a background in the UK Parliament and in social research. Neil holds a masters degree in Comparative Public Policy from the University of Edinburgh and an undergraduate degree in International Politics from City, University of London.