Recommendations & Conclusions
13 items
1
Conclusion
Tenth Report - Connected tech: smart or…
Accepted
Data rights are an important tool for empowering data subjects and balancing data processing against users’ rights and freedoms. However, there are many barriers to individuals being able to exercise these rights when using or interacting with connected tech, ranging from product design to digital literacy and resources. Users must …
Read more
Data rights are an important tool for empowering data subjects and balancing data processing against users’ rights and freedoms. However, there are many barriers to individuals being able to exercise these rights when using or interacting with connected tech, ranging from product design to digital literacy and resources. Users must be given clear information about, and a fair chance to understand, the basis on which their data is used, the implications for their digital rights, the benefits and risks, and how to consent, object and how to exercise these rights.
Show less
Government response AI summary
The government agrees with the conclusion, stating that existing data protection legislation, including the UK GDPR, already addresses these issues by requiring transparent data processing and empowering individuals to report non-compliance to the ICO. It welcomes the ICO's existing recommendations to technology providers.
Read full response →
Department for Culture, Media and Sport
3
Recommendation
Tenth Report - Connected tech: smart or…
Accepted
The Government should clarify the obligations in the Online Safety Bill for voice assistants, connected devices (like smart speakers) and other emerging technologies that can surface harmful content, to ensure that those that integrate search services in particular fall in-scope of the duties. It should also set out in its …
Read more
The Government should clarify the obligations in the Online Safety Bill for voice assistants, connected devices (like smart speakers) and other emerging technologies that can surface harmful content, to ensure that those that integrate search services in particular fall in-scope of the duties. It should also set out in its response to this report how the online safety regime will categorise voice assistants and connected devices that integrate internet search so that they do not service harmful content like hate speech and other harms.
Show less
Government response AI summary
The government partially accepts the recommendation, clarifying that the Online Safety Act's broad scope covers voice assistants and connected devices integrating internet search, subjecting them to duties to conduct risk assessments and mitigate illegal content and harm to children.
Read full response →
Department for Culture, Media and Sport
5
Recommendation
Tenth Report - Connected tech: smart or…
Accepted
The Government should commit to ensuring that the Age-Appropriate Design Code is strengthened rather than undermined by data protection reform and to laying the revised code as soon as is practicable.
Government response AI summary
The government agrees with the recommendation, committing to ensure that forthcoming data protection reforms will not undermine the Age-Appropriate Design Code. The ICO will update its guidance, including the code, as soon as practicable once the Data Protection and Digital Information (No.2) Bill receives Royal …
Read full response →
Department for Culture, Media and Sport
7
Recommendation
Tenth Report - Connected tech: smart or…
Accepted
The monitoring of employees in smart workplaces should be done only in consultation with, and with the consent of, those being monitored. The Government should commission research to improve the evidence base regarding the deployment of automated and data collection systems at work. It should also clarify whether proposals for …
Read more
The monitoring of employees in smart workplaces should be done only in consultation with, and with the consent of, those being monitored. The Government should commission research to improve the evidence base regarding the deployment of automated and data collection systems at work. It should also clarify whether proposals for the regulation of AI will extend to the Health and Safety Executive (HSE) and detail in its response to this report how HSE can be supported in fulfilling this remit.
Show less
Government response AI summary
The government partially accepts the recommendation, stating that workplace monitoring must comply with existing data protection law. It highlights safeguards in the Data Protection and Digital Information (No.2) Bill for automated decision-making and refers to its previously published AI Regulation White Paper and ongoing work …
Read full response →
Department for Culture, Media and Sport
8
Conclusion
Tenth Report - Connected tech: smart or…
Accepted
The Information Commissioner’s Office should develop its existing draft guidance on “Employment practices: monitoring at work” into a principles-based code for designers and operators of workplace connected tech.
Government response AI summary
The ICO plans to publish final guidance for employers on employee monitoring in October, which will replace parts of the 2011 Employers Code of Practice, following a public consultation that closed in January.
Read full response →
Department for Culture, Media and Sport
12
Conclusion
Tenth Report - Connected tech: smart or…
Accepted
As the guidelines set out in the 2018 Code of Practice for Consumer IoT Security imply, cybersecurity and data protection are mutually reinforcing. Without cybersecurity, data cannot be meaningfully protected, while data protection can manage the risk and impact of cyberattack. The Information Commissioner’s Office, either bilaterally or through the …
Read more
As the guidelines set out in the 2018 Code of Practice for Consumer IoT Security imply, cybersecurity and data protection are mutually reinforcing. Without cybersecurity, data cannot be meaningfully protected, while data protection can manage the risk and impact of cyberattack. The Information Commissioner’s Office, either bilaterally or through the Digital Regulation Co-operation Forum, which helps co-ordinate regulation of digital platforms and services, should work with the Office for Product Safety and Standards as it promotes the guidelines pertaining to data protection and data security in the 2018 Code of Practice.
Show less
Government response AI summary
The government commits that the Information Commissioner’s Office (ICO) will work with the Office for Product Safety Standards (OPSS), bilaterally or via the Digital Regulation Co-operation Forum, to support industry and ensure effective enforcement of new regulations.
Read full response →
Department for Culture, Media and Sport
13
Recommendation
Tenth Report - Connected tech: smart or…
Accepted
Improving cybersecurity of consumer connected devices is an important and positive step, but the proliferation of connected tech in enterprise settings and the gap in the regime regarding network, storage and cloud security still present likely attack vectors that will continue to allow devices to be compromised. The Government should …
Read more
Improving cybersecurity of consumer connected devices is an important and positive step, but the proliferation of connected tech in enterprise settings and the gap in the regime regarding network, storage and cloud security still present likely attack vectors that will continue to allow devices to be compromised. The Government should close the gaps for both consumer and enterprise connected tech in the product security regime by requiring that providers adopt network-level, storage and cloud-based security to the same standards as it requires for connected devices.
Show less
Government response AI summary
The government claims existing security requirements already apply to relevant software, including off-device elements, and highlights current initiatives like NCSC principles and ongoing work to understand risks in enterprise devices.
Read full response →
Department for Culture, Media and Sport
14
Recommendation
Tenth Report - Connected tech: smart or…
Accepted
We are concerned about the ongoing skills shortage, as recognised in both the Government and industry’s regular reporting on cybersecurity skills in the labour market, and believe that the shortage will be exacerbated further as the product safety regime comes into force. We support industry’s calls for the Government to …
Read more
We are concerned about the ongoing skills shortage, as recognised in both the Government and industry’s regular reporting on cybersecurity skills in the labour market, and believe that the shortage will be exacerbated further as the product safety regime comes into force. We support industry’s calls for the Government to do more to address this issue. The Government should also take steps to support the availability of free courses across the country, encourage more professionals to become cybersecurity educators, improve the provision of core professional skills among the existing workforce and incentivise industry to improve hiring practices and retention rates.
Show less
Government response AI summary
The government acknowledges an ongoing cyber skills shortage and states it already funds free cyber bootcamps across the UK through the DfE and National Cyber Strategy Programme. It also commits to continuing engagement with industry on improving hiring and retention.
Read full response →
Department for Culture, Media and Sport
15
Recommendation
Tenth Report - Connected tech: smart or…
Accepted
We are particularly concerned that, despite the shortage of cyber skills in the UK, there are stubborn and significant disparities in the cyber workforce based on gender and race and ethnicity. The Government should reflect on the significant disparities in gender and race/ethnicity in the cyber workforce and take steps …
Read more
We are particularly concerned that, despite the shortage of cyber skills in the UK, there are stubborn and significant disparities in the cyber workforce based on gender and race and ethnicity. The Government should reflect on the significant disparities in gender and race/ethnicity in the cyber workforce and take steps to improve these divides, such as by introducing additional schemes and funding to widen the talent pool, improving the culture of and attitudes to the cyber profession both in education and work, and considering how to provide professional support for people during their career.
Show less
Government response AI summary
The government agrees to address diversity in the cyber workforce, highlighting ongoing initiatives like funding the National Centre for Computing Education, DSIT's 'Upskill in Cyber' programme, and funding the UK Cyber Security Council to develop professional recognition processes.
Read full response →
Department for Culture, Media and Sport
19
Recommendation
Tenth Report - Connected tech: smart or…
Accepted
The Government’s response to tech abuse should involve upskilling law enforcement to improve the criminal justice response and increasing law enforcement’s and victims’ and survivors’ awareness of specialist services tackling violence against women and girls. The Government should also reflect on how official crime data on tech abuse can be …
Read more
The Government’s response to tech abuse should involve upskilling law enforcement to improve the criminal justice response and increasing law enforcement’s and victims’ and survivors’ awareness of specialist services tackling violence against women and girls. The Government should also reflect on how official crime data on tech abuse can be improved to expand the evidence base for specialists, academics and policymakers in order to develop a more comprehensive, co-ordinated response.
Show less
Government response AI summary
The government partially agrees, committing to provide up to £8.3 million over two years for frontline support, including training on tech-facilitated abuse, and £150k for the Revenge Porn Helpline. It also commits to continuing to work with policing partners on developing skills and with police …
Read full response →
Department for Culture, Media and Sport
1
Recommendation
Eleventh Report - Connected tech: AI an…
Accepted
We welcome the Government’s sensible proposals for regulating AI, including taking a sectoral approach underpinned by six cross-sector principles. However, there are outstanding weaknesses with this approach that the Government should clarify, including ensuring that sector regulators who do not currently regulate in the tech sector will build up technical …
Read more
We welcome the Government’s sensible proposals for regulating AI, including taking a sectoral approach underpinned by six cross-sector principles. However, there are outstanding weaknesses with this approach that the Government should clarify, including ensuring that sector regulators who do not currently regulate in the tech sector will build up technical expertise and are working in a joined-up manner.
Show less
Government response AI summary
The government recognises the need for central coordination for AI regulation and has already established a central risk function and is implementing a coordination function across government departments, with further details to be provided in their response to the white paper consultation.
Read full response →
Department for Culture, Media and Sport
7
Recommendation
Eleventh Report - Connected tech: AI an…
Accepted
The Government’s initial handing of the text and data mining exemption to copyright for AI development, though eventually correct, shows a clear lack of understanding of the needs of the UK’s creative industries. All branches of Government need to better understand the impact of AI, and technology more broadly, on …
Read more
The Government’s initial handing of the text and data mining exemption to copyright for AI development, though eventually correct, shows a clear lack of understanding of the needs of the UK’s creative industries. All branches of Government need to better understand the impact of AI, and technology more broadly, on the creative Connected tech: AI and creative technology 35 industries and be able to defend their interests consistently. We will continue to look on the Government’s progress with interest. The Government should provide a substantive update on its direction in managing the impact of AI on the creative industries and any discussions on these matters by the end of 2023. (Paragraph 33) Creative technology
Show less
Government response AI summary
The government highlights its existing Creative Industries Sector Vision and significant investments, including over £300 million in growth support and £75 million for the CoSTAR programme, to drive innovation and technology in the creative industries. It also mentions ongoing assessments and being informed by a …
Read full response →
Department for Culture, Media and Sport
10
Recommendation
Eleventh Report - Connected tech: AI an…
Accepted
The Government’s Cultural Education Plan Expert Advisory Panel has only recently been appointed, almost a year after the appointment of its chair and well over six months after Government said it would appoint its members. We have serious misgivings about the Government’s insistence that it will publish the Plan in …
Read more
The Government’s Cultural Education Plan Expert Advisory Panel has only recently been appointed, almost a year after the appointment of its chair and well over six months after Government said it would appoint its members. We have serious misgivings about the Government’s insistence that it will publish the Plan in 2023 as promised, which we believe will now either be rushed or late. Neither of these outcomes will serve the needs and interests of our creative industries. The Government must urgently clarify the scope and timescale for the Cultural Education Plan, to ensure it will deliver on its aims for the creative industries.
Show less
Government response AI summary
The government clarified the scope and five objectives of the Cultural Education Plan, outlining the types of organisations it will cover. It committed to publishing the Plan "in the coming months."
Read full response →
Department for Culture, Media and Sport