Westminster eForum

For booking-related queries or information on speaking please email us at info@forumsupport.co.uk, or contact us: +44 (0)1344 864796.

The future of the UK’s data protection frameworks

December 2020


Price: £95 PLUS VAT
Format: DOWNLOADABLE PDF


***Full-scale policy conference taking place online***
This conference is bringing together key stakeholders with policymakers, and will be an opportunity to examine latest developments in data protection regulation and practice in the UK, as well as to look ahead to the future of policy and implications of key changes with the approaching end of the Brexit transition period.


The discussion is bringing together stakeholders with key policy officials who are due to attend from DCMS; the Cabinet Office; the ICO; BEIS; the Centre for Data Ethics & Innovation; the CMA; the CPS; Defra; DfE; the Department of Health, NI; DIT; DfT; DHSC; DWP; the FSA; the Foreign, Commonwealth and Development Office; Government Banking; the Government Legal Department; Government Legal Profession; HMCTS; HMRC; HM Treasury; Home Office; MHCLG; the MOD; the MoJ; the SFO; the Welsh Revenue Authority; The Scottish Government; and the Welsh Government.


The agenda:


  • Regulation and enforcement in data protection - strategic aims and priorities going forward
  • Developing and implementing sectoral codes of conduct
  • Compliance, best practice and the experience of today’s data protection landscape across sectors in the UK economy
  • Data protection in the UK post-Brexit - the Withdrawal Agreement, progress on an adequacy decision, and regulatory obligations for UK organisations after the end of the transition period
  • The impact of COVID-19 - increased remote working, greater reliance of technology, and the data protection implications of contact-tracing

Areas for discussion:


  • the UK’s regulatory framework, Brexit and wider international relationships:
    • remaining priorities - developing the UK’s post-Brexit data protection policy and regulatory frameworks
    • a UK-EU data adequacy agreement - progress and next steps, the impact of the UK-US data access agreement on negotiations, and the wider future for international data exchange
    • resolving potential conflicts - including between EU data protection regulation and UK domestic legislation such as the Investigatory Powers Act 2016
    • standard contractual clauses - their use for data transfers by UK businesses
    • GDPR:
      • interpretation - potential future divergence in between UK courts from the CJEU
      • implementation - with the requirement for UK organisations to comply with the GDPR for data processing taking place in the UK but pertaining to non-UK data subjects  
  • compliance and key lessons learned from across the UK economy:
    • key sectors - the state of compliance, best practice and the experience of the data protection landscape across the UK economy, including finance, advertising, and online services
    • sector-specific codes of conduct - their development, and further unresolved issues and next steps for the ongoing implementation of GDPR in the UK
    • regulatory enforcement so far - actions under the GDPR, including penalties issued in relation to instances of data breaches - and the future approach to data protection enforcement
    • best practice - increasing privacy, trust and security on online platforms - including what lessons can be learned from the recent Twitter hack  
  • COVID-19:
    • increased threats - implications emerging from the pandemic, including the impact of more remote working and a greater reliance on technology with varying levels of data security
    • data protection and the UK’s economic recovery - including by encouraging trust in areas such as public and commercial information
    • contact-tracing - latest on the NHS Test and Trace service, and the way that personal data is handled as the Government shifts strategy towards a decentralised approach, following recommendations by privacy experts and campaigners that this offers greater data security
    • data protection and privacy during a time of crisis - following parliamentary concerns raised with the Information Commissioner

Relevant developments:


  • Government publishes new strategy to kickstart data revolution across the UK - launch of the Government’s wide-ranging National Data Strategy
  • Machinery of Government - transfer to the Cabinet Office of responsibility for guiding the government’s use of data aimed at maximising the benefits in policymaking and service delivery
  • Online harms and the ethics of data - the recently launched inquiry by the Digital, Culture, Media and Sport Sub-committee on Online Harms and Disinformation
  • Trust, Transparency and Technology: Building Data Policies for the Public Good - the Data Analytics APPG report calling for the Government to ensure that citizen’s rights are protected
  • Cabinet Office Personal Data Protection Delivery Enhancement - the new programme aimed at improving control over private data, following recommendations in Building trust in digital government
  • Accountability Framework - from the ICO with a focus on areas such as leadership, policies and procedures, training, transparency and data sharing, risks, record keeping and the response to issues
  • UK transition from the EU - and questions over the future of international data sharing and protection
  • the Regulatory Sandbox - the ICO initiative on supporting privacy and innovation, and delivery of new products and services with built-in data protections
  • How we will regulate during coronavirus - the ICO’s focus on protecting public interest, facilitating responsible data sharing, and balancing privacy and innovation
  • COVID-19 test and trace - ongoing developments across the UK nations regions of systems and technology to support tracking and containment of the pandemic

Policy officials attending:


Our forums are known for attracting strong interest from policymakers and stakeholders. Places have been reserved by officials from DCMS; the Cabinet Office; the Information Commissioner's Office; BEIS; the Centre for Data Ethics & Innovation; the Competition and Markets Authority; the Crown Prosecution Service; Defra; the Department for Education; the Department of Health, NI; the Department for International Trade; the Department for Transport; DHSC; the DWP; the Food Standards Agency; the Foreign, Commonwealth and Development Office; Government Banking; the Government Legal Department; Government Legal Profession; HM Courts and Tribunals Service; HM Revenue & Customs; HM Treasury; the Home Office; the Information Commissioner's Office; the MHCLG; the Ministry of Defence; the Ministry of Justice; the Serious Fraud Office; the Welsh Revenue Authority; The Scottish Government; and the Welsh Government.


Overall, we expect speakers and attendees to be a senior and informed group including Members of both Houses of Parliament, senior government and regulatory officials involved in this area of policy, as well as from the technology and telecoms industries, media businesses along with their suppliers and their advisors, digital platforms and other companies with a major presence online, digital marketing and advertising companies and trade bodies, businesses in the regulated industries, charities and third sector organisations, public services and public sector organisations that handle large volumes of personal data, organisations and individuals representing the views of consumers and citizens, legal and financial analysts, academics and commentators, together with reporters from the national and specialist media.


This is a full-scale conference taking place online***


  • full, four-hour programme including comfort breaks - you’ll also get a full recording to refer back to
  • information-rich discussion involving key policymakers and stakeholders
  • conference materials provided in advance, including speaker biographies
  • speakers presenting via webcam, accompanied by slides if they wish, using the Cisco WebEx professional online conference platform (easy for delegates - we’ll provide full details)
  • opportunities for live delegate questions and comments with all speakers
  • a recording of the addresses, all slides cleared by speakers, and further materials, is made available to all delegates afterwards as a permanent record of the proceedings
  • delegates are able to add their own written comments and articles following the conference, to be distributed to all attendees and more widely
  • networking too - there will be opportunities for delegates to e-meet and interact - we’ll tell you how!

Full information and guidance on how to take part will be sent to delegates before the conference



This pack includes

  • Dropbox video recording of the conference
  • PDF transcript of the discussion, including all speaker remarks and Q&A
  • PDFs of speakers' slide material (subject to permission)
  • PDFs of the delegate pack, including speaker biographies and attendee list
  • PDFs of delegate articles