The United Kingdom (UK) Data Protection and Digital Information Bill is slowly making its way through the legislative process; it may become law in 2024.^[1] The bill is intended to make the General Data Protection Regulation (GDPR) more practicable and less burdensome in lower-risk processing of personal data while maintaining high data protection standards.

While UK businesses will welcome a less bureaucratic approach to data protection compliance, multinationals that do business not only in the UK but also in Europe will find that they may have to adapt to different data processing rules. In practice, they may stick to the tried and tested GPDR “accountability” approach.