Moved by
Lord Stevenson of Balmacara
78A: After Clause 13, insert the following new Clause—
“Personal Data Ethics Advisory Board
(1) The Secretary of State must appoint an independent Personal Data Ethics Advisory Board as soon as reasonably practicable after the passing of this Act.
(2) The Personal Data Ethics Advisory Board’s functions, in relation to the processing of personal data to which the GDPR and this Act applies, are to—
(a) monitor further technical advances in the use and management of personal data and their implications for the rights of data subjects;
(b) protect the individual and collective rights and interests of data subjects in relation to their personal data;
(c) ensure that trade-offs between the rights of data subjects and the use and management of personal data are made transparently, accountably and inclusively;
(d) seek out good practices and learn from successes and failures in the use and management of personal data; and
(e) enhance the skills of data subjects and controllers in the use and management of personal data.
(3) The Personal Data Ethics Advisory Board must report annually to the Secretary of State.
(4) The report in subsection (3) may contain recommendations to the Secretary of State and the Commissioner relating to how they can improve the processing of personal data and the protection of data subjects’ rights by improving methods of—
(a) monitoring and evaluating the use and management of personal data;
(b) sharing best practice and setting standards for data controllers; and
(c) clarifying and enforcing data protection rules.
(5) The Secretary of State must lay the report in subsection (3) before both Houses of Parliament.”