DMA launches 10-point election manifesto following demise of DPDI

The DMA today is calling on the new government to make data, technology, and AI the foundation for innovation, growth, and improved productivity in the UK economy. The new government must improve economic productivity by enabling organisations to attract new customers and retain existing customers, while making the UK a more attractive place for the research, development, and deployment of AI technology. The DMA today calls on the new government to reform data protection legislation and skills development with a 10-point manifesto to drive growth and innovation across the economy and in public services:

Reforming data protection legislation

1. Maintain high standards of data protection to build trust and confidence in the future of the economy and government services.
2. Provide certainty to legitimate interests as a lawful basis for data processing to ensure the right to conduct a business is balanced with the right to privacy
3. Take a principles-based, ethical approach to AI regulation.
4. Give legal certainty to the recitals in GDPR to ensure the legislation is correctly interpreted by the ICO, lawyers and data protection officers.
5. Maintain adequacy with the EU to ensure free flow of trade.
6. Promote scientific research in academic and commercial settings.
7. Enhance the role of the Department of Science innovation and technology, making it faster to respond to the opportunities and challenges of emerging technology.
8. Reform the organisation structure and governance of the ICO

Skills

9. Develop skills in data, AI and digital marketing that are essential to growth and productivity.
10. Transfer responsibility for in career reskilling, lifelong learning and apprenticeships from the DfE to the Department for Business and Trade

Many of our members will be frustrated at the failure of the DPDI Bill to pass before the election, particularly given the extensive consultation on the Bill that took place with DMA members over the past three years. The DPDI Bill was an important evolution of the UK’s data protection framework and held a wide range of opportunities for our members. Whichever Political Party wins the election, they should build on the general principles of DPDI which had received cross party support. In particular, the DMA calls for the following general legislative amendments to be included in a new bill:

• Definition of Direct Marketing: ensure definition of Direct Marketing in DPA2018 is consistent across all UK data protection legislation as follows: “The communication (by whatever means) of advertising or marketing material which is directed to particular individuals”
• Lawful basis: greater certainty for Legitimate Interests by ensuring recital 47 forms part of main text GDPR article 6.1.f and that Recital 4 is given legal certainty. Ensure that legitimate interest impact assessments reflect the economic benefits of the processing to customers, donors and organisations while mitigating harms to privacy.
• Soft opt-in for email extended to non-commercial organisations, enabling charities to communicate to donors in the same way as businesses.
• Cookies: remove consent requirements for cookies and other identifiers which interrupt customer journeys and don’t achieve meaningful consent.
• Research provisions: provide greater clarity to enable scientific research in academic and commercial setting.
• ICO Objectives and organisation: change from corporation sole to a corporate body called Information Commission. Chair and non-executive members appoint and scrutinise CEO and executive members. Ensure ICO follows the principles of Recital 4 by considering the desirability of promoting innovation and the desirability of promoting competition when reaching decisions.
• Industry Codes of Conduct in PECR: build on co-regulation established in Articles 40 and 41 of GDPR by establishing Codes of Conduct and Industry Monitoring Bodies for GDPR.
• Accountability Framework: reinforce the key principles of data protecting impact assessments, data protection officers and records of processing activity while creating exemptions for micro and small business not engaged in high-risk processing.
• Publicly available data sources: establish certainty around the use of publicly available data sources such as the Open Electoral Register, Companies House Data and others.

The DMA will continue to fight for the essential reforms in data protection legislation and skills that are important to our members, their customers, their teams, and the economy. We call on all political parties to adopt the DMA’s 10-point election manifesto in their own party manifestos.