Hawktalk

Summary introduction The DCMS propose to change the duties of the Information Commissioner (ICO) in such a way that they decrease the prospect of enforcement on data protection grounds; in this way the changes reduce the protection afforded to data subjects. This prospect arises as the Commissioner will have a duty to consider factors relating to the economy, public safety or the Government’s international agenda prior, for example, to exercising the ICO’s powers of enforcement against a controller. The Secretary

The Government intend to change the accountability arrangements in the UK_GDPR in such a way that it will become harder to hold controllers to account.  In summary, Chapter 2 of the DCMS Consultation document (“Data: a new direction”) makes two main proposals in relation to accountability: to reduce or remove the requirement to undertake DPIAs (A.35 and A.36); to reduce or remove the requirement to have a Data Protection Officer (A.37-A.39); to remove the need to create a register of

The Government proposes that the “Legitimate Interests” balancing test between controller and data subject in A.6(1)(f) is changed so that the controller’s legitimate interests always prevails in a limited number of pre-defined circumstances. As far as I can see, this proposal is based on a false data protection analysis and illustrated by examples that show that no change is needed. If the controller’s legitimate interests always prevails, it follows that the data subject’s right to object to the processing and

This blog is limited to commentary on the Government’s proposals for the Further Processing of personal data found in section 1.3 of the DCMS Consultation document (“Data: a new direction”). In summary, the Consultation proposes to exempt the application of the Purpose Limitation (or Finality) Principle whenever there is an important public interest in the further processing; this further processing could be undertaken by a controller different to the one that collected the personal data.  As this blog shows, the

This blog concerns the Government’s proposals for the processing of personal data for research purposes; they are unreliable, untrustworthy and unethical.  For instance, I show how the proposals are so “flexible” they can allow for secret research, using of special category of personal data or criminal offence personal data, similar to the “research” that gave rise to the Cambridge Analytica scandal. The proposals relating to research The commentary is limited to the proposals in Section 1.2 (paragraphs 34-50) of the