UK Extends EU-US Data Privacy Framework: 2023 Impact Assessment

Statement - 21st September

The RPC produces opinions of impact assessments (IA) to help departments ensure that the evidence and analysis in them is sufficiently robust. We provide an independent opinion to assist final ministerial decision making and parliamentary scrutiny of regulatory proposals. We publish these to assist parliamentarians and to ensure that they are available to external stakeholders. Government departments are expected to submit IAs to the RPC in time for the RPC to issue an opinion before the relevant legislation is laid before Parliament.

The IA for the regulations was first submitted on 4th August for RPC scrutiny. The RPC's initial review of the IA, sent to the Department for Science, Innovation and Technology (DSIT) on 15th September, found that it was not sufficiently robust, and identified areas where improvements should be made. We considered that the points raised would generate a red-rated opinion, if not addressed adequately.

Following discussions, DSIT submitted a revised IA on 20th September. The Data Protection (Adequacy) (United States of America) Regulations 2023 were laid before Parliament on 21st September.

The RPC will now resume its scrutiny and provide a published opinion as soon as is possible to assist both DSIT and Parliament.

/Public Release. This material from the originating organization/author(s) might be of the point-in-time nature, and edited for clarity, style and length. Mirage.News does not take institutional positions or sides, and all views, positions, and conclusions expressed herein are solely those of the author(s).View in full here.