On the 17th June 2022, the government published its response to the DCMS consultation “Data: a new direction” and set out which proposals it plans to take forward into the upcoming Data Reform Bill.
From the wide range of reforms proposed to be taken forward, we have picked out the ones likely to be of most interest to businesses.
What next? What does my organisation need to do?
We keenly await the publication of the full text of the Data Reform Bill – the earliest this could take place is later on in the summer and inevitably the legislative process to pass the bill into a law will follow.
It should not be forgotten that the government will not want to cause the UK to lose the benefit of the EU adequacy decision, as that could result in significant barriers to data sharing across the Channel. In practical terms this places limits on how far UK can go in its reforms.
Whilst it is good to remain informed about the government’s proposals for data protection reform, there is nothing specific that organisations need to do at the moment in response to the government’s plans. Organisations that currently comply are likely to be in a good position - so carry on and ensure compliance with the current law. The Burness Paull team is on hand to help.
Sonja Hart
Director
Technology
Sonja is a director in the Technology and Commercial team.
Related News, Insights & Events
Error.
No results.
AI for HR: navigating opportunities, risks and governance
04/11/2026 - Online webinar
This webinar will explore how AI is already being used in HR, the common pitfalls organisations are encountering, and the steps employers can take to use AI effectively and responsibly.
AI in the workplace and Employment Tribunal litigation
09/10/2026
This article explores the ways in which generative AI is changing the volume, style and sophistication of workplace complaints and Employment Tribunal documents.
Cyber resilience for critical national infrastructure: legal and technical perspectives from Burness Paull and Quorum Cyber
28/09/2026
This article explores how geopolitical tension, legacy operational technology, AI-accelerated threats and evolving regulation are reshaping cyber resilience for operators of essential services.
{name}
{properties.pageSummary}
{properties.eventName}
{properties.pageDate|date:dd/MM/yyyy}{properties.shortDescription}
{properties.headline}
{properties.pageDate|date:dd/MM/yyyy}
{properties.shortDescription}
