Question to the Department for Science, Innovation & Technology:

To ask His Majesty's Government, further to the Written Answer by Viscount Camrose on 12 April (HL3677), what practical steps data subjects can use to verify that their personal data are being processed (1) in accordance with any consent they have granted, and (2) only insofar as is "necessary" for the intended purposes; how they can exercise their right to object; and whether all of these processes will remain in place following the passage of the Data Protection and Digital Information Bill as currently drafted.

Data controllers should inform individuals of how they are going to use their personal data and set this out in their privacy notice. Individuals have a number of rights under the UK’s data protection framework, including the rights to access their personal data, to object to its processing and to rectification and erasure. If an individual is concerned about the handling of their personal data, they can contact the ICO for advice or to make a complaint.

These rights, along with core data protection principles, will continue to apply under the reforms within the Data Protection and Digital Information Bill.