Government invites views on data transfers, AI rules and public sector data re-use

DSIT examines whether data laws keep pace with AI

The government has launched three consultations examining how data protection rules affect international data transfers, AI and the re-use of public sector information.

The Department for Science, Innovation and Technology (DSIT) is seeking “practical evidence” from businesses, public bodies, researchers and other stakeholders on whether existing regulatory frameworks remain fit for purpose as data-driven technologies evolve.

The consultations remain open until early September.

Cross-border data transfers

One consultation examines how organisations manage international data flows under the UK's current data protection regime, with the government seeking practical legal and technical evidence from those involved in moving data across borders.

DSIT is asking stakeholders to provide examples of how they comply with UK General Data Protection Regulation (UK GDPR) requirements, how transfer decisions are governed within organisations and the operational challenges they encounter.

Among the issues under consideration is whether "partial" data adequacy arrangements could provide a practical alternative for countries unable to meet the requirements for full adequacy status.

Officials are also seeking feedback on which aspects of Transfer Risk Assessments prove most difficult for organisations.

International data transfers affect both businesses and individuals. While some regulatory questions are highly technical, DSIT wants to hear from a broad range of contributors to ensure future policy reflects different perspectives.

AI and data protection

A second consultation explores how existing regulations governing personal and non-personal data interact with AI and other data-intensive technologies.

Organisations are invited to explain how they apply data protection rules when developing or deploying AI systems, as well as identifying projects that have been delayed or abandoned because of concerns about compliance with legislation such as the UK GDPR and the Data Protection Act 2018.

The review also seeks information on governance arrangements, data-sharing agreements and sector-specific regulatory frameworks that affect access to data used in AI development.

DSIT wants to understand where current legal, technical and governance arrangements successfully enable data use while managing risks, and where uncertainty or regulatory friction remains.

The evidence should help determine whether clearer guidance, targeted legislative changes or broader reforms are needed to ensure data regulation keeps pace with advances in AI and other emerging technologies.

Charging model for public sector data

The third consultation considers whether public sector organisations should be allowed to charge for the re-use of more government-held data than current legislation permits.

Under existing Re-Use of Public Sector Information Regulations 2015, many public bodies are restricted to recovering only the marginal cost of making data available, representing the additional cost of supplying information each time it is requested.

The government is inviting views on whether removing that restriction could enable public bodies to invest more in improving data quality, expanding data availability and supporting better public services.

DSIT said it wanted public organisations to have access to a wider range of options for making their datasets available, including charging models alongside existing open data approaches, while considering what safeguards or limits should apply if changes to the current rules are introduced.