Question

To ask the Secretary of State for Business, Innovation and Skills, what steps his Department has taken to prepare for the implementation of the proposed General Data Protection Regulation; which non-departmental public bodies (NDPBs) and agencies overseen by his Department will be affected by that regulation; and what estimate he has made of the potential liability of his Department, its agencies and NDPBs in connection with that proposed regulation.

Negotiations on the proposed General Data Protection Regulation are still continuing and our negotiating position has taken into account the likely impact on Government Departments, NDPBs and agencies. Once the outcome of trilogue negotiations between the Council of the European Union, the European Parliament and the Commission are complete, and the Regulation has been adopted, there will be a maximum implementation period of two years. Between now and then, Government departments who will be affected by the Regulation are closely involved in work led by the Department for Culture, Media & Sport to consider the implications of the text as it develops through the negotiating process.