Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, with reference to the Online Safety Act 2023, what assessment he has made on the adequacy of the security of personal data shared with third parties.

The Online Safety Act has cross-cutting duties to ensure that users’ rights to privacy are protected. All providers are required to give particular regard to the importance of protecting users’ privacy rights when implementing measures to comply with their new safety duties, including age assurance technologies. Where Ofcom has concerns that a provider has not complied with its obligations under data protection law, it may refer the matter to the ICO.