The U.K. government Monday introduced a pair of post-Brexit data reform initiatives aimed at guiding responsible use of data while promoting innovation in the economy, according to two government releases.
In the House of Commons, the government released the Data Protection and Digital Information Bill. In a separate statement, Minister for Media, Data and Digital Infrastructure Matt Warman said the data protection reform bill will help "transform the UK's independent data laws."
In parallel with the new legislation, the government is also unveiling a set of proposals to regulate the use of artificial intelligence. "The Bill will seize the benefits of Brexit to keep a high standard of protection for people's privacy and personal data while delivering around (1 billion pounds) in savings for businesses," the U.K. Department for Digital, Culture, Media & Sport press release stated.
Data protection reform
Warman detailed some of the high-level reforms in the proposal, which, he said, will lead to "around 1 billion (pounds) in business savings over ten years." The bill would increase fines for non-compliant nuisance calls and texts and require telecommunications providers to notify the U.K. Information Commissioner's Office if there are unsolicited communications taking place on their networks.
The reform would also ease requirements for cookie banner popups, notably those for "low risk activities, such as audience measurement," and "pave the way for the removal of irritating banners for other types of cookies when browser-based or similar solutions are sufficiently developed," Warman said.
Digital identity reform is also included in the proposal, which would "give people more choice and greater security when they want to prove things about themselves online of via apps instead of with physical documents."
The bill would also relax some of the rules around the use of personal data in scientific research. Warman said, "We will simplify the legal requirements around research, which will provide scientists the clarity and confidence they need to get on with life enhancing and life saving research."
Reform of the ICO has been a concern among privacy advocacy organizations, such as the Open Rights Group, which, last month, warned the moves could alter the independence of the regulator, potentially exposing it to "political direction."
In his statement Monday, Warman said the reform would modernize the ICO "so that it remains an internationally renowned regulator, including increased investigatory powers to help it keep pace with changing practices," adding, "The ICO will remain operationally independent while enabling the public and parliament to more effectively hold it to account through key performance indicators."
The bill would address the use of data by politicians and elected representatives and, separately, the sharing of data with law enforcement and national security agencies. "They will provide agencies with clarity on their obligations, boosting the confidence of the public on how their data is being used," Warman said.
AI rulebook
Though the proposed data protection bill includes a section on automated decision-making, the U.K. government is proposing a second set of rules and regulations for AI and machine learning. Part of its national strategy on AI, the new AI proposals are meant to live alongside the data protection bill and involve regulators like Ofcom and the Competition and Markets Authority.
Included with the release is a new AI paper, which "outlines the government's approach to regulating the technology in the UK, with proposed rules addressing future risks and opportunities so businesses are clear how they can develop and use AI systems and consumers are confident they are safe and robust," the DCMS press release states.
Digital Minister Damian Collins said, "It is vital that our rules offer clarity to businesses, confidence to investors and boost public trust. Our flexible approach will help us shape the future of AI and cement our global position as a science and tech superpower."
Monday's AI proposal features six core principles: ensure AI is used safely, that it's technically secure as designed, transparent and explainable, considers fairness, identifies "a legal person to be responsible for AI," and clarifies avenues for redress.
Several regulators — including Ofcom, the CMA, the ICO, the Financial Conduct Authority, and the Medicine and Healthcare Products Regulatory Authority — would interpret and implement the principles, according to the statement. The regulators "will be encouraged to consider lighter touch options," including regulatory sandboxes and guidance.
For interested stakeholders, the U.K. government has opened a call for evidence (more information can be found under the "Next Steps" portion of the policy paper). Stakeholders can send views to evidence@officeforai.gov.uk. The 10-week call for evidence runs until Sept. 26.
Separately, the Alan Turing Institute published an independent report, citing the "need for greater coordination between regulators to meet the challenge of regulating the use of AI."
