Since our own UK GDPR, including any changes from the Data (Use and Access) Bill, is so heavily based on EU GDPR, it makes sense to pay attention to what’s happening in the EU regarding data protection.
In the first of a set of possible changes, the EU looks likely to propose a simplification of the RoPA requirements. This may mean that some special category data may not need an additional condition for processing, such as that related to employment.
Lawful basis and additional conditions for processing can cause confusion (a free 25-minute call can help) so this sounds welcome, but of course the UK may or may not eventually embrace the changes too.
Some commentators have suggested that the EU is moving towards a ‘GDPR lite’ and we wonder if that might mean that UK data protection regulations become the leading model. Time will tell.