What the DISD Bill Means for UK Organisations Navigating Smart Data, Compliance, and Innovation
The UK’s data protection landscape has shifted significantly in 2024, with a major UK data protection legislation update following the general election. The Data Protection and Digital Information (DPDI) Bill was dropped in the parliamentary wash-up, and a new bill – the Digital Information and Smart Data (DISD) Bill – has now taken its place.
Although data protection wasn’t mentioned in King Charles’ speech during the opening of Parliament, it was included in the full background briefing notes (skip to page 39), confirming the Government’s intention to introduce the DISD Bill.
Why The DPDI Bill Was Dropped
The DPDI Bill aimed to modernise the UK’s post-Brexit data framework, but it faced criticism for weakening consent rules, reducing oversight, and risking misalignment with EU GDPR. These changes could have jeopardised the UK’s data adequacy status, creating costly compliance challenges for organisations handling EU–UK data transfers.
For many in the sector, its failure to pass was a relief. The bill’s complexity and potential to dilute privacy protections made it a risky proposition for charities, cultural organisations, and businesses alike.
What the DISD Bill Introduces
The DISD Bill represents a more future-focused UK data protection legislation update, balancing innovation with stronger safeguards. It introduces frameworks for:
- Digital Verification Services – streamlining identity checks and reducing data leakage, with an estimated £600 million annual benefit
- National Underground Asset Register (NUAR) – improving infrastructure planning with instant access to underground data.
- Smart Data Schemes – enabling secure data sharing with authorised providers, similar to Open Banking.
Implications for Public Services and Research
The Bill also supports better public services, including electronic birth and death registration, and modernises the Information Commissioner’s Office. For researchers, it enables broader consent and commercial access to data – aligning with modern interdisciplinary needs.
What This Means for Arts and Cultural Organisations
For arts and cultural organisations, this UK data protection legislation update won’t change day-to-day operations overnight. But it’s still worth watching. The DISD Bill focuses on innovation, infrastructure, and smart data. These areas may not directly affect your work now – but they shape the wider data landscape.
The Government is pushing ahead with data reform. It plans to change how organisations manage consent, how public bodies share data, and how the ICO works. If your organisation runs audience surveys, shares data with partners, or works with researchers, now’s the time to review your documentation.
Make sure your privacy notices are clear. Review how you collect and store personal data. And keep staff training up to date – especially around consent and transparency.
Get In Touch
Kate Fitzgerald Consulting Limited offers a range of data protection support for arts and cultural organisations. From regular retainer support to documentation reviews and staff training, we can support you with our data protection needs. If you would like a chat to discuss any needs you may have, do get in touch – we’d love to hear from you.