Question to the Department for Digital, Culture, Media & Sport:

To ask the Secretary of State for Digital, Culture, Media and Sport, whether an assessment will be made of the extent to which Government database processes meet the General Data Protection Regulation requirement of data protection by design and default; and if he will make a statement.

Government takes the protection of personal data and the right to privacy extremely seriously, and we are determined to lead the way and set the gold standard for data protection. As part of our preparations, we have been working closely with the Information Commissioner’s Office and departments to support compliance preparations across government.

Each department, as a data controller, is responsible for its own compliance with the new data protection law, including the requirement under Article 25 GDPR to implement appropriate technical and organisational measures to ensure data protection by design and default.