Moved by
Lord Stevenson of Balmacara
71A: After Clause 11, insert the following new Clause—
“Right to be informed of the commercial exploitation of personal data
(1) Data controllers must notify data subjects of all intended or actual commercial exploitation of their personal data.
(2) The notification under subsection (1) must be made—
(a) at the time when the data subject consents to their personal data being processed by the data controller,
(b) before commercial exploitation takes place, if this is more than six months after the notification in paragraph (a), and
(c) every six months thereafter if the commercial exploitation is ongoing.
(3) Notifications under this section must include—
(a) the primary uses to which the personal data will be put, and
(b) the gross revenues the data controller expects to receive through the exploitation of that personal data.”