UK GDPR Brexit Reforms & Accountability

A side-by-side look at the changes to RoPAs, DPIAs, DPOs and DSRs in the UK Data Protection and Digital Information Bill
UK GDPR Brexit Reforms

The UK government claims that the reforms in the draft UK Data Protection and Digital Information Bill, published by the government on 18 July 2022, will reduce ‘the burdens on businesses that impede the responsible use of personal data. By giving businesses the opportunity to protect personal data in the most proportionate and appropriate way, we will make them more efficient, meaning higher productivity rates, and more jobs.


Apples and Oranges

There are lots of blogs about the Bill, but few side-by-side analyses showing you how the proposals stack up against current practices.

You know the phrase ‘you’re comparing apples and oranges’? It’s when you’re trying to compare two very different things.

We’ve put the current obligations in UK GDPR side-by-side with the proposed obligations in the UK DPDI Bill. That way we can all compare apples with apples and see what practical changes might happen.

And as, at Keepabl, we focus on the practicalities of Privacy, we’ve focussed on the key changes to your Privacy daily role and your Accountability: RoPAs, DPOs, DPIAs and DSARs.


Apples and Apples

We’ve gone through the UK GDPR and the Bill to put your current obligations alongside your proposed obligations, free of all the rhetoric, so you can see for yourself what the impact is on your daily job and your Privacy Governance.




Here are the controller obligations for records of processing activities under the UK GDPR and the UK Bill:

UK controller RoPA


When it’s set out like this, GDPR on the left and the Bill on the right, all becomes clearer.

Look at this crosswalk in the context of your other obligations. You need to be able to satisfy the transparency obligations, telling data subjects all the information in Arts 13 and 14 anyway. And you need to be able to react appropriately to data subject rights, respond to breaches, make sure your use of processors is compliant, that any transfers are identified and the appropriate transfer tool is in place.

In that context, what’s your view? Are there practical differences and, if so, how big are they? Is one lighter or easier than the other and, if so, by how much?


Get all the crosswalks

You can get these crosswalks for all of RoPAs, DPIAs and Assessments, DPOs and SRIs, and DSRs for controllers and processors in our super clear UK GDPR: Brexit Reforms Guide on Accountability.


Keepabl can make your [compliance] life easier!

Here at Keepabl we make operationalising Privacy simple and intuitive, from data mapping to breaches, with instant insights – saving you a lot of time, sweat and tears (and cost).

If you’re ready to get your Privacy governance into gear for your business, why not request a demo or free trial of our Privacy Management Software?


Related Articles

Blog Case Studies News & Awards
Leading Privacy and Security Consultant accelerates client’s GDPR compliance with Keepabl’s Privacy Management Software

David Clarke, a very experienced UK-based Privacy and Security consultant working with public and private organisations of all sizes, was suitably impressed when he recently used Keepabl’s Privacy Management software…

Read More
UK ICO Accountability Framework
The UK ICO Accountability Framework - 15 FAQs with the UK ICO

We were delighted to be joined in Privacy Kitchen by Chris Taylor, the UK ICO’s Head of Assurance whose team set up the ICO Sandbox, manages the ICO’s guidance and…

Read More