Question to the Department for Digital, Culture, Media & Sport:

To ask the Secretary of State for Digital, Culture, Media and Sport, what steps he plans to take to ensure that children and their parents can receive legal redress where they have been victims of a large-scale data breach.

The Data Protection Bill seeks to enhance UK citizens’ data rights. Clause 180 of the bill, in conjunction with article 80(1) of the General Data Protection Regulation (GDPR), provides data subjects with the right to request an authorised non-profit organisation which has statutory objectives in the public interest and which is active in the field of data protection to bring a legal claim on their behalf. Taken together with the right of individuals and organisations to complain to the Information Commissioner when they have concerns about the processing activities of particular companies, this will ensure children and their parents can rely on a range of redress mechanisms.