Government piggybacks on EU rules as it heads for exit door

Bereft of ideas and momentum, Tory ministers are taking credit for Brussels’ work, writes Martyn Mclaughlin

The politics of personal data will be one of the defining issues of this century. The rise of social networks and the breakneck pace at which they develop new technology and algorithms has revolutionised the way we communicate, but so too it poses one of the greatest regulatory challenges of our times.

With firms such as Facebook constantly devising increasingly complex ways of harvesting, analysing and monetising our data, the UK government has been playing catch-up for a decade.

Against such a backdrop, it was with considerable self-satisfaction that the previously anonymous digital minister Matt Hancock announced the upcoming Data Protection Bill this week.

At first glance, the pictures of Mr Hancock beaming as he enjoyed his moment in the spotlight were understandable. There is much to welcome in the government’s 30-page statement of intent for the new law, in particular the plan to sharpen the teeth of the Information Commissioner’s Office.

As things stand, companies which breach data laws face a maximum fine of £500,000; granted, it is a great deal of money, but at a time when the major tech players are measuring their revenues and profits by the billions, it hardly acts as a realistic deterrent.

Instead, the new Bill will permit the commissioner to issue penalties of up to £17m, or four per cent of a company’s global turnover. Such a penalty will not only hit offenders hard, it suggests the issue of data protection is being taken seriously.

All is not what it seems, sadly. It is a shame that the government is being more than a little disingenuous about its role in pushing through such tough new rules. Anyone reading the press release from the Department for Digital, Culture, Media and Sport would be forgiven for thinking Mr Hancock and his civil servants were trailblazers, taking firm action while other countries flounder. The new Bill, the minister excitedly promised, will give us “one of the most robust, yet dynamic set of data laws in the world”.

Provided the legislation makes its way through the Commons and Lords intact, that will indeed be true, but it was perhaps convenient for Mr Hancock to forget to mention that, even in the best case scenario, Britain will only be on an even keel with the rest of the EU.

The Bill, announced in the Queen’s Speech, is in fact little more than a formality which will bring the UK’S laws in line with those put in place by the EU’S General Data Protection Regulation, which comes into force next May.

Even though the UK is departing the EU, it will still be a member state next spring and, as such, must adhere to its laws. After Brexit, if the UK wishes to freely transfer personal data back and forth between EU states, it must demonstrate it has thorough data protection standards in place.

In short, the Data Protection Bill is a procedural step designed to make that a reality and ease trade.

Mr Hancock may wish to project the idea the UK is at the forefront of the data revolution, but the legislation is simply following a path laid out by Europe; the truth is that members of the public in Britain will still be protected by the same rules they are now, following Brexit.

The desperate attempt to claim credit for legislation that has come out of Brussels should not come as a surprise, and with Prime Minister