Question to the Department for Education:

To ask the Secretary of State for Education, what steps her Department has taken to prepare for the implementation of the proposed General Data Protection Regulation; which non-departmental public bodies (NDPBs) and agencies overseen by her Department will be affected by that regulation; and what estimate she has made of the potential liability of her Department, its agencies and NDPBs in connection with that proposed regulation.

Negotiations on the proposed General Data Protection Regulation are still continuing and our negotiating position has taken into account the likely impact on Government Departments, NDPBs and agencies. Once the outcome of negotiations between the Council of the European Union, the European Parliament and the Commission are complete, and the Regulation has been adopted, the liabilities will be further assessed. There will then follow a maximum implementation period of two years. Between now and then, Government departments which will be affected by the Regulation will be closely involved in work led by the Department for Culture, Media & Sport to consider the implications of the text as it develops through the negotiating process.