The U.K. has amended its data protection rules with a sweeping law that aims to simplify compliance with existing privacy legislation, including the General Data Protection Regulation (GDPR). However, compliance officers should be aware that the need to protect personal data remains paramount.
The U.K. Data (Use and Access) Act (DUAA) changes the country’s existing data protection regime to help promote innovation and economic growth while still affording people the same level of data protection. The Information Commissioner’s Office (ICO), the national data protection authority, says most of the changes offer companies “an opportunity to do things differently, rather than needing them to make specific changes to comply with the law.”
