News story

Data laws made fit for the digital age

Tough new laws to give people more control over their data and how it is used have come into force today.

This was published under the 2016 to 2019 May Conservative government
Data Protection

People will now be able to move their personal data between service providers such as WhatsApp and Facebook to rival social media platforms. This includes taking account settings and information, including contacts, profile photos, and group names.

People will have the right for their personal data held by companies to be erased when they turn 18. 皇冠体育appy will also be able to demand an organisation discloses all the personal data it holds on them more easily and, for the first time, for free.

皇冠体育app Data Protection Act 2018 will force companies to use people鈥檚 personal data responsibly or risk millions of pounds in fines. 皇冠体育appse could run into billions of pounds and be as much as four per cent of a firm鈥檚 global turnover.

皇冠体育app Act will support UK businesses and organisations as we prepare to leave the European Union.

Minister for Digital and the Creative Industries Margot James said:

Today marks a milestone in the internet era, with new laws to put power back in people鈥檚 hands so they can be sure the information they share online is safe.

皇冠体育app Information Commissioner has been given the tools she needs to make sure organisations are held to account when they misuse or compromise data, but she has been clear they will be applied proportionately and adequately to help businesses prepare.

Starting today, people will be able to: - Get more information about how organisations will use and share their data

  • Withdraw consent for the use of their personal data more easily

  • Require an organisation to disclose the personal data it holds on them more easily 鈥� and, for the first time, for free

  • Move data between service providers such as rival social media platforms

  • Benefit from tougher cybersecurity rules, and the right to be told when their data is breached and the breach is sufficiently serious

  • Ask for their personal data held by companies to be erased in a wider range of circumstances, including when they turn 18

  • Benefit from a new age-appropriate design code that will help websites understand the needs of children and young people online.

皇冠体育app Information Commissioner鈥檚 Office (ICO) has been granted new powers to act swiftly when people鈥檚 data has been breached and allow her to hold rogue companies to account. This includes being able to:

  • Issue fines of up to 拢17 million or 4 per cent of global turnover for the most serious data breaches

  • Demand access to an organisation鈥檚 premises to carry out 鈥榥o notice鈥� inspections without a warrant

  • Request a court order to force someone to share information, with the prospect of criminal convictions when this is not followed.

皇冠体育app Government will shortly publish a consultation on exemptions to paying ICO fees to ensure the regulations remain appropriate in the new regime.

Notes to editors

  • Organisations which hold and process personal data are urged to follow freely available from the Information Commissioner鈥檚 Office. Its dedicated advice line for small organisations has received more than 8000 calls since it opened in November 2017, and the Guide to the GDPR has had over one million views. 皇冠体育app regulator also has a GDPR checklist, and 12 steps to take now to prepare for GDPR.

  • This guide explains the General Data Protection Regulation (GDPR) to help organisations comply with its requirements

  • Under the Data Protection Act, data controllers must have one of six legal bases for their processing activities. Consent is one such basis. 皇冠体育app other five are: contractual necessity; vital interest; legal obligation; public interest and legitimate interest.

  • This is part of Government鈥檚 work to strengthen the UK鈥檚 data protection laws and make them fit for the digital age.

Updates to this page

Published 25 May 2018