Source · Select Committees · Culture, Media and Sport Committee
Recommendation 1
1
Accepted
Paragraph: 35
Significant barriers prevent individuals from effectively exercising data rights with connected tech.
Conclusion
Data rights are an important tool for empowering data subjects and balancing data processing against users’ rights and freedoms. However, there are many barriers to individuals being able to exercise these rights when using or interacting with connected tech, ranging from product design to digital literacy and resources. Users must be given clear information about, and a fair chance to understand, the basis on which their data is used, the implications for their digital rights, the benefits and risks, and how to consent, object and how to exercise these rights.
Government Response Summary
The government agrees with the conclusion, stating that existing data protection legislation, including the UK GDPR, already addresses these issues by requiring transparent data processing and empowering individuals to report non-compliance to the ICO. It welcomes the ICO's existing recommendations to technology providers.
Paragraph Reference:
35
Government Response
Accepted
HM Government
Accepted
We agree with this conclusion and are addressing these issues through the UK’s data protection regime. All those responsible for technology which collects and uses personal data must comply with the data protection legislation, including the principle that personal data must be processed not only lawfully and fairly, but also transparently. If people using connected technology are given clear information from the outset about how devices will use their data, it is much easier for those people to exercise their data rights, including rights to seek access to their data or to object to its further use, and also builds confidence that their data will be used appropriately. Individuals are also able to directly report organisations that fail to comply with the data protection legislation to the UK’s independent data protection regulator, the Information Commissioner’s Office (ICO). The government welcomes the conclusions and recommendations the ICO made for technology providers in its Tech Horizons Report in December 20221. These recommendations included, for example, ensuring high standards of privacy by default, with user-centred design of connected devices; continuing to explore approaches to transparency and data minimisation in smart spaces, and further exploring the potential of privacy enhancing technologies in the context of connected devices.