Advertisement · 728 × 90
#
Hashtag
#DUAAct
Advertisement · 728 × 90
Owen Boswarva
Owen Boswarva
@owenboswarva.bsky.social
3 months ago
A research project to evaluate the Data (Use and Access) Act 2025 (DUAA) and the Privacy and Electronic Communications Regulations 2003 (PECR). The project involves both compiling existing evidence, (literature reviews, and quantitative analysis) and novel research (interviews) to baseline the impact of DUAA's data protection reforms, and to conduct a post-implementation review of PECR. Outputs will be evaluation reports, Post Implementation Review, interview summaries, metrics for ongoing monitoring, and recommendations for future research.

A research project to evaluate the Data (Use and Access) Act 2025 (DUAA) and the Privacy and Electronic Communications Regulations 2003 (PECR). The project involves both compiling existing evidence, (literature reviews, and quantitative analysis) and novel research (interviews) to baseline the impact of DUAA's data protection reforms, and to conduct a post-implementation review of PECR. Outputs will be evaluation reports, Post Implementation Review, interview summaries, metrics for ongoing monitoring, and recommendations for future research.

Data Use and Access Research www.contractsfinder.service.gov.uk/Notice/ee2db... notice of £149,050 DSIT contract awarded to Ipsos Market Research

Specification is redacted of course

#DUAAct #PECR #dataprotection #opengov

0 0 0 0
Owen Boswarva
Owen Boswarva
@owenboswarva.bsky.social
3 months ago
Cerys Wyn Davies of Pinsent Masons said: "The government is trying to tread a very fine line with its attempts to balance the respective interests of the creative industries and AI developers. It has put a great deal of onus on the two different sides not only reaching a form of consensus on issues that have to-date been highly polarising, but on them finding new solutions to technical problems that might constrain how any new policy on AI and copyright in the UK is implemented in practice." "I understand there has been some progress made on technical solutions that would enable content creators to exercise an effective opt-out of their works from AI training, but there are remaining questions over the cost and administrative burdens associated. On licensing too, the UK's Copyright Licensing Agency claims to have developed a ready-made solution – if the government were to insist on its use. In relation to transparency, it remains to be seen how granular any new UK duties are made. In the EU, policymakers have suggested that AI developers do not need to disclose 'the details for the specific data and works used to train the model' to meet copyright-related disclosure obligations arising under the EU AI Act," she said.

Cerys Wyn Davies of Pinsent Masons said: "The government is trying to tread a very fine line with its attempts to balance the respective interests of the creative industries and AI developers. It has put a great deal of onus on the two different sides not only reaching a form of consensus on issues that have to-date been highly polarising, but on them finding new solutions to technical problems that might constrain how any new policy on AI and copyright in the UK is implemented in practice." "I understand there has been some progress made on technical solutions that would enable content creators to exercise an effective opt-out of their works from AI training, but there are remaining questions over the cost and administrative burdens associated. On licensing too, the UK's Copyright Licensing Agency claims to have developed a ready-made solution – if the government were to insist on its use. In relation to transparency, it remains to be seen how granular any new UK duties are made. In the EU, policymakers have suggested that AI developers do not need to disclose 'the details for the specific data and works used to train the model' to meet copyright-related disclosure obligations arising under the EU AI Act," she said.

UK AI copyright report reveals little progress www.pinsentmasons.com/out-law/news...

The Guardian burble version:

Boost for artists in AI copyright battle as only 3% back UK active opt-out plan www.theguardian.com/technology/2...

#DUAAct #genAI #IPlaw #openweb #techpolicy

1 1 0 0
Advent IM
Advent IM
@adventim.bsky.social
7 months ago
Preview
PRESS RELEASE: Advent IM Expands Training Academy with New Data and Security Courses | Advent IM Advent IM launches new training in AI, data governance, FOIA, SAL, and SAR to boost compliance and security.

PRESS RELEASE: Advent IM Expands Training Academy with New Data and Security Courses 📝

www.advent-im.co.uk/press-releas...

#AISecurity #DataProtection #DUAAct #DataUse #FOI #SARs #InformationSecurity

0 0 0 0
Owen Boswarva
Owen Boswarva
@owenboswarva.bsky.social
8 months ago
The initial tranche of NUAR regulations, as covered in Parts 1-3 of this consultation, will update existing duties and introduce new requirements on undertakers who own and maintain apparatus in the street to keep records of specified information about their apparatus. The regulations will implement a new minimum information specification to ensure that a comprehensive baseline of the necessary information to inform street works is collected moving forwards. The regulations will establish requirements for undertakers to upload information about their apparatus to NUAR and ensure that this remains up to date whenever changes occur, for example during installation or maintenance. To ensure this information is made available for the purposes of street works excavation, the regulations would grant access to information held in NUAR for undertakers and authorised contractors working on their behalf in England, Wales, and Northern Ireland. These regulations are necessary to ensure NUAR has comprehensive and up to date information to support those undertaking street works to carry out their work safely and efficiently.

The initial tranche of NUAR regulations, as covered in Parts 1-3 of this consultation, will update existing duties and introduce new requirements on undertakers who own and maintain apparatus in the street to keep records of specified information about their apparatus. The regulations will implement a new minimum information specification to ensure that a comprehensive baseline of the necessary information to inform street works is collected moving forwards. The regulations will establish requirements for undertakers to upload information about their apparatus to NUAR and ensure that this remains up to date whenever changes occur, for example during installation or maintenance. To ensure this information is made available for the purposes of street works excavation, the regulations would grant access to information held in NUAR for undertakers and authorised contractors working on their behalf in England, Wales, and Northern Ireland. These regulations are necessary to ensure NUAR has comprehensive and up to date information to support those undertaking street works to carry out their work safely and efficiently.

Consultation on regulations to require the recording and uploading of asset information to the National Underground Asset Register (NUAR) www.gov.uk/government/c... (England, Northern Ireland, Wales)

Consultation from GDS, building out OS's geospatial empire.

#DUAAct #datasharing not- #opendata

1 0 0 0
Owen Boswarva
Owen Boswarva
@owenboswarva.bsky.social
8 months ago
Hall is despairing of the British government's approach to regulating AI companies, and what she sees as its failure to protect the rights of authors. The UK's Data (Use and Access) Bill — which was finally passed in June after months of parliamentary wrangling — proposes that AI companies should have access to all creative content unless the creator opts out.

Hall is despairing of the British government's approach to regulating AI companies, and what she sees as its failure to protect the rights of authors. The UK's Data (Use and Access) Bill — which was finally passed in June after months of parliamentary wrangling — proposes that AI companies should have access to all creative content unless the creator opts out.

I can't believe this nonsense is still going around. The Data Bill proposes nothing of the kind; it makes no changes to UK law on AI or copyright.

Will AI put fiction writers out of work? www.ft.com/content/7ce8... (£) in the @financialtimes.com

#DUAAct #genAI #IPlaw #techpolicy

1 0 0 0
Owen Boswarva
Owen Boswarva
@owenboswarva.bsky.social
8 months ago
Smart Data enables the secure, consent-based sharing of customer and business data with authorised third parties. This will allow for the creation of innovative services that benefit consumers and support competition. Digital markets are central to how individuals and businesses access goods, services, and content online. However, barriers to data portability, limited consumer control, and market concentration can reduce competition and limit innovation. A Smart Data scheme could help address these issues by enabling consumers and businesses to make better use of their data and supporting the development of new data-driven products and services. This call for evidence will help the government assess whether there is a case for action in this area, and if so, how a scheme might be designed to deliver meaningful outcomes.

Smart Data enables the secure, consent-based sharing of customer and business data with authorised third parties. This will allow for the creation of innovative services that benefit consumers and support competition. Digital markets are central to how individuals and businesses access goods, services, and content online. However, barriers to data portability, limited consumer control, and market concentration can reduce competition and limit innovation. A Smart Data scheme could help address these issues by enabling consumers and businesses to make better use of their data and supporting the development of new data-driven products and services. This call for evidence will help the government assess whether there is a case for action in this area, and if so, how a scheme might be designed to deliver meaningful outcomes.

Smart Data opportunities in digital markets www.gov.uk/government/c... call for evidence from the UK's Department for Science, Innovation and Technology (DSIT), rather vaguely seeking views on "whether and how to introduce a #SmartData scheme in #digitalmarkets"

#DUAAct #datasharing #dataprotection

1 0 0 0
Owen Boswarva
Owen Boswarva
@owenboswarva.bsky.social
8 months ago

DSIT summary of the UK Government's plans for bringing into force provisions in the Data (Use and Access) Act 2025 www.gov.uk/guidance/dat...

Initial commencement regulations www.legislation.gov.uk/uksi/2025/90...

#DUAAct #dataprotection #smartdata #digitalID etc.

0 0 0 0
Owen Boswarva
Owen Boswarva
@owenboswarva.bsky.social
8 months ago
Commencement 2. The following provisions of the Act, so far as not already in force (see section 142(2)(h) of the Act), come into force on 20th August 2025— (a)Part 1 (access to customer data and business data); (b)section 72 (processing in reliance on relevant international law), except— (i)subsection (3), and (ii)subsection (7), to the extent that it refers to Article 8A(3)(e) in the insertion of section 9A (processing in reliance on relevant international law) in the Data Protection Act 2018; (c)section 74 (processing of special categories of personal data); (d)section 84 (law enforcement processing and codes of conduct); (e)section 91 (duties of the Commissioner in carrying out functions); (f)section 92 (codes of practice for the processing of personal data); (g)section 93 (codes of practice: panels and impact assessments); (h)section 95 (analysis of performance); (i)section 102 (annual report on regulatory action); (j)section 104 (court procedure in connection with subject access requests); (k)section 106 (protection of prohibitions, restrictions and data subject’s rights); (l)section 107 (regulations under the UK GDPR); (m)section 108 (further minor provision about data protection); (n)section 109 (the PEC Regulations); (o)section 110 (interpretation of the PEC Regulations), except subsection (2)(a) and (b) and subsection (3); (p)section 111 (duty to notify the Commissioner of personal data breach: time periods); (q)section 113 (emergency alerts: interpretation of time periods); (r)section 117 (the Information Commission), except subsection (4)(a); (s)section 125 (information for research about online safety matters); (t)section 129 (the eIDAS Regulation); (u)section 134 (time periods: the eIDAS Regulation and the EITSET Regulations); (v)section 135 (economic impact assessment); (w)section 136 (report on the use of copyright works in the development of AI systems); (x)section 137 (progress statement); …

Commencement 2. The following provisions of the Act, so far as not already in force (see section 142(2)(h) of the Act), come into force on 20th August 2025— (a)Part 1 (access to customer data and business data); (b)section 72 (processing in reliance on relevant international law), except— (i)subsection (3), and (ii)subsection (7), to the extent that it refers to Article 8A(3)(e) in the insertion of section 9A (processing in reliance on relevant international law) in the Data Protection Act 2018; (c)section 74 (processing of special categories of personal data); (d)section 84 (law enforcement processing and codes of conduct); (e)section 91 (duties of the Commissioner in carrying out functions); (f)section 92 (codes of practice for the processing of personal data); (g)section 93 (codes of practice: panels and impact assessments); (h)section 95 (analysis of performance); (i)section 102 (annual report on regulatory action); (j)section 104 (court procedure in connection with subject access requests); (k)section 106 (protection of prohibitions, restrictions and data subject’s rights); (l)section 107 (regulations under the UK GDPR); (m)section 108 (further minor provision about data protection); (n)section 109 (the PEC Regulations); (o)section 110 (interpretation of the PEC Regulations), except subsection (2)(a) and (b) and subsection (3); (p)section 111 (duty to notify the Commissioner of personal data breach: time periods); (q)section 113 (emergency alerts: interpretation of time periods); (r)section 117 (the Information Commission), except subsection (4)(a); (s)section 125 (information for research about online safety matters); (t)section 129 (the eIDAS Regulation); (u)section 134 (time periods: the eIDAS Regulation and the EITSET Regulations); (v)section 135 (economic impact assessment); (w)section 136 (report on the use of copyright works in the development of AI systems); (x)section 137 (progress statement); …

The UK Government has published regs that will bring various sections of the Data (Use and Access) Act into force on 20 August 2025:

The Data (Use and Access) Act 2025 (Commencement No. 1) Regulations 2025 www.legislation.gov.uk/uksi/2025/90...

#DUAAct #dataprotection #smartdata

0 1 1 0
Owen Boswarva
Owen Boswarva
@owenboswarva.bsky.social
8 months ago

Post from Bird & Bird with unofficial Keeling Schedules showing changes to UK GDPR, DPA 2018 and PECR in the Data (Use and Access) Act 2025 www.twobirds.com/en/insights/... 👏

(The UK Government has so far failed to publish official Keeling Schedules.)

#DUAAct #DataBill #dataprotection etc.

1 1 0 0
Owen Boswarva
Owen Boswarva
@owenboswarva.bsky.social
8 months ago
We plan to commence the Act's provisions in four main stages: ● Stage 1, approximately two months after Royal Assent, will include the commencement of technical provisions which clarify aspects of the legal framework; and measures requiring the government to publish an impact assessment, a report and a progress update on AI and copyright issues. ● Stage 2, three to four months after Royal Assent, will include the commencement of the majority of the measures on Digital Verification Services in Part 2 of the Act; and the measures in Part 7 on the retention of information by providers of internet services in connection with the death of a child. ● Stage 3, approximately 6 months after Royal Assent, will include the commencement of the main changes to data protection legislation in Part 5 of the Act; and the provisions on information standards for health and adult social care in England in Part 7. ● Stage 4, more than 6 months after Royal Assent, will include the commencement of provisions that require a longer lead-in time. Examples include measures on the National Underground Register in Part 3; and the electronic system of registering births and deaths in Part 4 which rely on the appropriate technology being in place. Changes to ICO governance structures in Part 6 will take place once members of the new Board have been appointed. This is expected in early 2026. This is not a complete list of measures in the Act but is intended to illustrate our staged approach to commencement in the months ahead. Section 141 of the Act explains which provisions apply throughout the UK and which are limited to certain parts of the UK.

We plan to commence the Act's provisions in four main stages: ● Stage 1, approximately two months after Royal Assent, will include the commencement of technical provisions which clarify aspects of the legal framework; and measures requiring the government to publish an impact assessment, a report and a progress update on AI and copyright issues. ● Stage 2, three to four months after Royal Assent, will include the commencement of the majority of the measures on Digital Verification Services in Part 2 of the Act; and the measures in Part 7 on the retention of information by providers of internet services in connection with the death of a child. ● Stage 3, approximately 6 months after Royal Assent, will include the commencement of the main changes to data protection legislation in Part 5 of the Act; and the provisions on information standards for health and adult social care in England in Part 7. ● Stage 4, more than 6 months after Royal Assent, will include the commencement of provisions that require a longer lead-in time. Examples include measures on the National Underground Register in Part 3; and the electronic system of registering births and deaths in Part 4 which rely on the appropriate technology being in place. Changes to ICO governance structures in Part 6 will take place once members of the new Board have been appointed. This is expected in early 2026. This is not a complete list of measures in the Act but is intended to illustrate our staged approach to commencement in the months ahead. Section 141 of the Act explains which provisions apply throughout the UK and which are limited to certain parts of the UK.

Letter from DSIT minister Chris Bryant MP setting out UK Government's plan for implementing the Data (Use and Access) Act 2025 committees.parliament.uk/publications...

Royal Assent was 19 June.

The Act www.legislation.gov.uk/ukpga/2025/1...

#DUAAct #DataBill #dataprotection #digitalID #smartdata

0 1 0 0
Anthony ♾️🌏💡❤️🏳️‍🌈
Anthony ♾️🌏💡❤️🏳️‍🌈
@magee.bsky.social
9 months ago
Preview
Beyond compliance: how new data laws might redraw the digital map for charities, businesses and tech giants On 19 June 2025, the Data (Use and Access) Act 2025 (the “DUA Act”) received Royal Assent. The UK Government’s ambition is clear: To enhance the UK’s digital strategy and unlock the use of data, harne...

🇬🇧 New UK data law shifts from “privacy at any cost” → “responsible enablement.”

🤝 But trust stays fragile.

🔎 Data’s about people, not systems.

My thoughts here:

www.linkedin.com/pulse/beyond...

#Data #Trust #Privacy #DUAAct #DigitalRights @data.ft.com

2 0 0 0
Owen Boswarva
Owen Boswarva
@owenboswarva.bsky.social
9 months ago
In this instance, the UK Government has only legislated without consent based on assurances from the Executive that there were no policy concerns with any of the transferred matters, and that it had recommended the Assembly provide its consent to the Act - as set out in the draft legislative consent memorandum laid before the Assembly. It is important that the provisions apply in Northern Ireland so that the benefits can be felt by the people of Northern Ireland, and so that the legislation is clear. It would not be right if, simply because of a process issue, the people of Northern Ireland could not benefit from smart data schemes like Open Banking and those schemes had to operate differently in different parts of the UK. Similarly, it would not be right if roadworks in Northern Ireland were not made safer and more efficient by NUAR; nor if public service delivery was not improved by the amendment to the Digital Economy Act.

In this instance, the UK Government has only legislated without consent based on assurances from the Executive that there were no policy concerns with any of the transferred matters, and that it had recommended the Assembly provide its consent to the Act - as set out in the draft legislative consent memorandum laid before the Assembly. It is important that the provisions apply in Northern Ireland so that the benefits can be felt by the people of Northern Ireland, and so that the legislation is clear. It would not be right if, simply because of a process issue, the people of Northern Ireland could not benefit from smart data schemes like Open Banking and those schemes had to operate differently in different parts of the UK. Similarly, it would not be right if roadworks in Northern Ireland were not made safer and more efficient by NUAR; nor if public service delivery was not improved by the amendment to the Digital Economy Act.

Letter from DSIT Secretary Peter Kyle confirming that in enacting the Data (Use and Access) Act the UK Parliament has effectively legislated in certain devolved policy areas without the consent of the Northern Ireland Assembly committees.parliament.uk/publications...

#DUAAct #smartdata #devolution

2 0 0 0
Owen Boswarva
Owen Boswarva
@owenboswarva.bsky.social
9 months ago
ACS has welcomed a letter from energy minister Dr Miatta Fahnbulleh MP, announcing that the requirement for retailers to report on their fuel availability as part of the upcoming Fuel Finder scheme will be postponed. The Government aims to launch the Fuel Finder scheme by the end of 2025. When the scheme is launched, retailers will be required to report on the retail prices of all types of petrol and diesel, as well as reporting on changes in those prices within 30 minutes. Under previous proposals, the scheme would also require retailers to report on when there is no availability of a fuel grade on their site.

ACS has welcomed a letter from energy minister Dr Miatta Fahnbulleh MP, announcing that the requirement for retailers to report on their fuel availability as part of the upcoming Fuel Finder scheme will be postponed. The Government aims to launch the Fuel Finder scheme by the end of 2025. When the scheme is launched, retailers will be required to report on the retail prices of all types of petrol and diesel, as well as reporting on changes in those prices within 30 minutes. Under previous proposals, the scheme would also require retailers to report on when there is no availability of a fuel grade on their site.

UK Government has reportedly descoped initial requirements for the statutory Fuel Finder #opendata scheme, following industry lobbying forecourttrader.co.uk/latest-news/... + www.acs.org.uk/news/fuel-av...

Context www.gov.uk/government/c...

#DUAAct #fuelprices #roadfuel #smartdata #transportdata

0 0 0 0
Owen Boswarva
Owen Boswarva
@owenboswarva.bsky.social
9 months ago

Dear Meg, Caroline, Chi: letter from DSIT Secretary Peter Kyle to committee chairs, clarifying what the parliamentary working group on AI and copyright might involve; soz for any confusion committees.parliament.uk/publications...

#DUAAct #genAI #IPlaw #techpolicy

Previous correspondence below.

0 0 0 0
Owen Boswarva
Owen Boswarva
@owenboswarva.bsky.social
9 months ago
Pinsent Masons infographic: "How UK AI copyright policy might develop: an indicative timeline"

Pinsent Masons infographic: "How UK AI copyright policy might develop: an indicative timeline"

AI and copyright: a post-Data Bill UK timeline into 2026 www.pinsentmasons.com/out-law/anal... from Pinsent Masons

Undertakings in the DUA Act www.legislation.gov.uk/ukpga/2025/1...

Pending consultation outcome www.gov.uk/government/c...

#DUAAct #genAI #IPlaw #techpolicy

0 0 0 0
Owen Boswarva
Owen Boswarva
@owenboswarva.bsky.social
9 months ago

There's now a fully linked HTML version of the UK's Data (Use and Access) Act 2025, which received Royal Assent yesterday www.legislation.gov.uk/ukpga/2025/1...

#DUABill #DUAAct #dataprotection #digitalID #smartdata etc.

0 1 0 0
Owen Boswarva
Owen Boswarva
@owenboswarva.bsky.social
9 months ago

Data (Use and Access) Act 2025 as passed by the UK Parliament www.legislation.gov.uk/ukpga/2025/18/ (PDF only so far)

Other docs bills.parliament.uk/bills/3825/p...

#DUABill #DUAAct #dataprotection #digitalID #smartdata etc.

0 1 1 0
Owen Boswarva
Owen Boswarva
@owenboswarva.bsky.social
9 months ago

UK organisations stand to benefit from new data protection laws ico.org.uk/about-the-ic...

Some info from the ICO now the Data (Use and Access) Act 2025 has received Royal Assent.

Would be good if DSIT had managed to organise publication of the Act itself, but hey-ho.

#DUAAct #dataprotection

0 0 0 0
Owen Boswarva
Owen Boswarva
@owenboswarva.bsky.social
9 months ago
The ICO is undergoing an exciting transformation. The Data (Use and Access) Act 2025 will modernise the ICO's governance framework to ensure it is fit for purpose, suitable to its role and remit, and relevant to the rapidly evolving regulatory landscape. The Act will replace the ICO's governance model with a "body corporate" structure, called the Information Commission, governed by an independent board made up of non-executive members (including the Chair), alongside executive board members, including a Chief Executive Officer. The new model will spread the responsibilities of the Information Commissioner across a greater number of people, increasing the diversity and resilience of the regulator.

The ICO is undergoing an exciting transformation. The Data (Use and Access) Act 2025 will modernise the ICO's governance framework to ensure it is fit for purpose, suitable to its role and remit, and relevant to the rapidly evolving regulatory landscape. The Act will replace the ICO's governance model with a "body corporate" structure, called the Information Commission, governed by an independent board made up of non-executive members (including the Chair), alongside executive board members, including a Chief Executive Officer. The new model will spread the responsibilities of the Information Commissioner across a greater number of people, increasing the diversity and resilience of the regulator.

Part-time job – Information Commission Non-Executive Members (7 roles) apply-for-public-appointment.service.gov.uk/roles/8609

The Information Commission will be established by the Data (Use and Access) Act 2025 to replace the ICO as the UK's data regulator.

#DUAAct #dataprotection (also #FOI etc.)

1 0 1 0
Owen Boswarva
Owen Boswarva
@owenboswarva.bsky.social
9 months ago

Blink and you'll miss it: Royal Assent to the UK's Data (Use and Access) Act Bill – now the Data (Use and Access) Act 2025 – announced in the House of Lords this morning www.parliamentlive.tv/Event/Index/... (from 11.06am)

Docs bills.parliament.uk/bills/3825

#DUABill #DUAAct #dataprotection etc.

3 0 1 0