In my final column, I seemed again at 2020 from a knowledge regulation standpoint. It’s protected to mention that nobody would have predicted a 12 months like 2020. And so it’s with some trepidation that I stay up for what we would possibly be expecting within the 12 months to come back.
Inevitably, one of the vital traits that we noticed in 2020 will proceed. In spite of sure information concerning the building of a number of vaccines, COVID shall be with us for the foreseeable long term. And as vaccines are rolled out, and checking out improves, we might see novel knowledge demanding situations. Will companies get started asking consumers to supply evidence of vaccination as a situation of carrier? Will the Govt select to factor the fortunate ones with vaccination certificate? Those situations will proceed to check our knowledge regulations in 2021.
But when 2020 used to be all about COVID, we will’t sit up for 2021 with out speaking about Brexit. For the second one time in a bit underneath 3 years, the United Kingdom’s knowledge coverage regulations are being re-written. From 1 January 2021, the United Kingdom will not be required to apply EU regulation. The GDPR, as a Eu legislation, will not routinely follow in the United Kingdom. As a substitute, we’ll all want to get used to speaking about its successor, the United Kingdom GDPR. This shall be particularly difficult for UK-based companies which give items or services and products without delay to shoppers within the EU, as they are going to want to proceed complying with the EU GDPR for his or her EU-based consumers whilst adapting to the brand new UK GDPR for UK consumers.
The excellent news is that the United Kingdom GDPR seems to be so much just like the EU GDPR. In truth, it’s in large part a cut-and-paste activity, with minor adjustments to exchange references to the EU with the United Kingdom and to take away the necessities round global co-operation and the ICO’s global function. The only exception to that is round global knowledge transfers. In my final column, I discussed the judgment within the Schrems II case, revealed final July, which ended in the death of the EU-US Privateness Protect. Sadly, issues are going to get much more difficult in 2021. UK-based companies that experience consumers within the EU, or which use carrier suppliers founded throughout the EU, will want to familiarize yourself with the brand new regulations on global transfers. As the United Kingdom will not be a part of the EU, knowledge transfers from the United Kingdom to the EU, and from the EU to the United Kingdom shall be topic to new restrictions, the previous contained inside of the United Kingdom GDPR and the latter within the EU’s GDPR. And this might be topic to last-minute adjustments must there be a industry deal between the United Kingdom and the EU.
Taking a look a bit additional forward, the 2 units of regulations will inevitably waft aside. We had a small style of ways that would possibly paintings in December when the United Kingdom Govt introduced its On-line Harms Invoice after which an afternoon later the Eu Fee introduced plans for a Virtual Services and products Act. Those two very other legislative plans percentage a equivalent goal of regulating america large tech giants. Be expecting to look extra of this kind of duplication.
As well as, we now have a Brexit executive. One of the most mentioned functions of Brexit, if you’ll consider again to 2016, used to be to take again keep an eye on of our regulations. And lots of of our knowledge regulations are closely influenced by means of Eu regulation – now not most effective knowledge coverage but additionally the Environmental Knowledge Laws and the Re-use of Public Sector Knowledge Laws. So what would possibly the United Kingdom Govt do when it’s not constrained by means of EU regulation? We don’t know however don’t be expecting to look a vital shakeup, a minimum of within the quick time period. I don’t sense any large urge for food for exchange, and there shall be a large number of competing priorities in 2021.
Nonetheless, as a knowledge coverage attorney, I will be the first to welcome enhancements to our knowledge coverage regulations. As they stand, they’re overly complicated, tricky to interpret and in large part impenetrable for almost all of folks. Companies battle to use them to on a regular basis eventualities and are ceaselessly on the mercy of dangerous recommendation, which does not anything to support compliance however can break the bank. There’s a large number of room for development, with out essentially lowering the rights for people or safety of information. However possibly that’s an issue for any other column.
Finally, we will be able to see a metamorphosis of Knowledge Commissioner in 2021. Elizabeth Denham’s five-year time period within the publish involves an result in July 2021. The ICO is now a large and robust regulator, but it surely stays on one stage the non-public place of business of the post-holder, with the ICO’s priorities and approaches a mirrored image of the incumbent Commissioner. Whilst we don’t know exactly during which path the brand new Commissioner might select to take his or her place of business, we will be expecting a metamorphosis of emphasis as the brand new appointee seeks to make their private mark in 2021.
In fact, if it’s the rest like 2020, you must be expecting the surprising in 2021!