Moved by
Lord Stevenson of Balmacara
41A: After Clause 13, insert the following new Clause—
“Use of private personal data accounts
(1) Within the period of 12 months beginning with the day on which this Act is passed, the Commissioner must carry out a public consultation on the use of private personal data accounts by data subjects.
(2) The consultation must include, but is not limited to—
(a) how the rights accorded to data subjects under the GDPR and this Act, including the rights to rectification and to be forgotten, may be affected by having a private personal data account;
(b) the conditions under which a data subject may make their personal data available to data controllers via a private personal data account; and
(c) the remuneration arrangements which may arise between a data subject and a data controller through the use of a private personal data account.
(3) In this section, “private personal data account” means a single account through which a data subject can store and share their personal data with data controllers.”