WIREDGOV

What do new EU data rules mean for tech businesses and consumer trust

This week, techUK is exploring the current and future importance of data to driving forward the UK’s digital economy and society. 

We live in an online and connected society. Digital enabled technologies and Innovations such the Internet of Things, health apps, wearables and data analytics are poised to unleash a wave of new goods, services and opportunities. They promise new solutions to both new and age old problems from public services such as healthcare to buying household products. Data lies at the heart of this budding revolution. However, the speed and depth of these innovations is also raising thorny challenges. Issues such the transparency and trust in organisations gathering and using data are coming to the fore in the public debate around the data-drive economy. High profile data breaches and the inherent complexities of data gathering are increasing citizen concern and decreasing trust in data use.

Responding to these challenges European policymakers sought to overhaul Europe’s data protection regime. Over the last four years the EU Member States and institutions have been negotiating a new set of rules for data protection in the EU.

Changes to Europe’s data protection framework will have far-reaching consequences for both businesses and citizens. The new General Data Protection Regulations (GDPR), which is set to come into force in 2018, will determine how tech business does business, and particularly how they manage, protect and use data in the future. The new rules will apply not only to businesses located inside the EU but to any business which processes European citizens’ data and offer them goods or services. Citizens will also have new rights and powers in how they manage and control their data.

The EU’s objectives in the GDPR was to create a global ‘gold standard’ of protection for citizens and deliver a consistent regulatory framework for industry to help deliver the promise of a Digital Single Market. So what does the GDPR mean in practice?

The draft GDPR will make significant changes to the existing provisions regarding consent. It will require consent to be specific, informed, unambiguous and freely given in order to be acceptable. Explicit consent will be necessary where sensitive data is involved.

>>>What are the big issues in the Regulation?

The GDPR will also mean citizens will have the right to withdraw their consent as easily as they provided it. Businesses will need to keep detailed internal records of processing and policies in order to demonstrate compliance with the draft GDPR. Businesses will be required to report serious data breaches as soon as possible and in any event within 72 hours of the breach occurring.

Additionally, Citizens will have greater rights including the right to request the deletion of personal data and the right to request a copy of their data in a portable and useable format.

As the global economy becomes ever more data driven the significance of these new EU rules cannot be overstated.

There is no doubt that in the short term innovative data driven businesses of all sizes will face a challenging time in implementing these new rules. However, the big test will be whether Europe's consumers and citizens really do feel better informed and protected as a result of the new rules and whether Europe's businesses are able to stay at the forefront of digital innovation. To help address the crux of this challenge techUK is hosting The Great Data Frontier: Unleashing a new wave of growth and trust in the digital economy on Tuesday 26 April. This conference will discuss how industry, government, citizens and regulators can come together to help build a culture of data confidence.

Tell us what you think on #DataMatters, will new EU data rules help restores trust or is it just the first step on the data highway?

techUK is interested in hearing how these issues will affect your company. For more information on techUK's work on Data Protection or to join techUK's Data Protection Group please contact Shane Murphy, Policy Manager.

T 020 7331 2169
E shane.murphy@techUK.org