UK Data Protection Reform: CIPIL Contributions
Reform of the data protection framework has been a major preoccupation of the UK post-Brexit. It was given emphasis in the National Data Strategy in 2020, led to the Conservative Government’s Data: A New Direction paper and consultation in 2021 and spawned the Data Protection and Digital Information Bill (originally introduced in 2022). Although this initiative was not itself successful, this Government did reform UK data protection through the Retained EU Law (Revocation and Reform) Act (REULA) and its Data Protection (Fundamental Rights and Freedoms) Amendment Regulations 2023/1417 which inter alia definitively removed the fundamental right to data protection from UK law and confined the meaning of fundamental rights within the data protection framework to the European Convention on Human Rights alone.
The Labour Government elected in July 2024 introduced the Data (Use and Access) Bill in October 2024 which became law as the Data (Use and Access) Act on 19 June 2025.
This area is also a significant focus of CIPIL’s information law work. This page provides an ongoing summary of key output produced by individuals in this area whilst affiliated with CIPIL. A number of these have been written by Professor David Erdos who coordinates this strand of activity.
Data (Use and Access) Bill - Written Evidence and Briefing (David Erdos)
Data Protection and Digital Information Bill - Commentary
David Erdos, "A Bill for a Change? Analysing the UK Government’s Statutory Proposals on the Content of Data Protection and Electronic Privacy", Faculty of Law Research Paper 13/2022 – see also related Slideshare from 2022
Ann Kristin Glenster, "Attempting to Tackle Consent for Cookies: Clause 79 of the UK’s Data Protection and Digital Information Bill" Inforrm Blog 15 October 2022
Data: A New Direction - Commentary
David Erdos, "Assessing UK Data Protection Reform in Transnational Context: What New Direction?" Faculty of Law Research Paper 28/2021 – see also related Slideshare from 2021
General Analysis (including of UK-EU TCA)
David Erdos, "The UK and the EU Personal Data Framework After Brexit: Another Switzerland?", Faculty of Law Research Paper 15/2021 (leading to "The UK and the EU Personal Data Framework after Brexit: A New Trade and Cooperation Partnership based on Council of Europe Convention 108+?" (Vol. 44) Computer Law and Security Review (2022)) – See also related Slideshares from 2019 and 2021
David Erdos, "Retained EU Law Act and Regulations 2023/1417: Undercutting the UK's European Data Protection Rights Commitments?", Modern Law Review, pp. 1-21 (2025)