General Data Protection Regulation

Lord Evans of Weardale Excerpts

Tuesday 5th June 2018 Lords Chamber

[Lord Ashton of Hyde]

I believe that when that happens, that is the end of it. If they ask, they obviously want to know why the noble Lord no longer wants to be in touch with them—I do not blame them for that. Of course, I accept that those emails have a benefit. One of the principal features of the GDPR and the Data Protection Act 2018 is that there is a much stronger measure of consent. People have to give active consent to have their personal data processed.

[Lord Evans of Weardale (CB)]

My Lords, are there proposals to review the impact of this measure on small organisations? Irrespective of the fact that there is continuity from the previous Data Protection Act, there is concern that small organisations, such as charities et cetera, will be disproportionately affected. It is important that we should know whether that is the case. I declare an interest as the chairman of the charity Kent Search and Rescue.

[Lord Ashton of Hyde]

Of course, we have to comply with the GDPR while we are members of the EU. We want to continue to have a data protection regime that is in accord with the EU’s when we leave. I believe that all new legislation is reviewed after a period of time, so we will obviously keep an eye on whether there is a disproportionate effect on small organisations. Charities are obviously important but, for the reasons I set out before, individual data subjects’ rights are important so there has to be a balance.