Consultation outcome

UK National Data Strategy consultation

Updated 18 May 2021

This was published under the 2019 to 2022 Johnson Conservative government

Why we are consulting

Given the significant changes of the last five years, and the more significant changes we expect to see throughout the 2020s, we need a data strategy that reflects the opportunities and challenges of our new hyper-digital world; a strategy that ensures that the decisions, priorities and potential trade-offs that face us are considered in a deliberate and evidence-driven way.

It is clear that the government can not, and must not, do this alone. To ensure that we set the right overall direction and approach, we are keen that stakeholders contribute to the framing and core principles of the strategy as set out in Questions 1-4 of the consultation.

The decisions we will take will have an impact beyond government and into the wider economy and society. As such, we are keen to ensure that our missions, associated areas of focus and policy proposals have received proper scrutiny and input (as set out in Questions 5-19). We are also keen to ensure that these decisions do not have any negative impact on groups within society, not least on individuals with a protected characteristic under the Equality Act 2010. We ask for specific impact on this matter in Question 4.

Given the importance of data to the economy, we are taking a considered and evidence-based approach to developing the strategy. While the evidence base is nascent in a rapidly changing environment, your responses to this consultation can help expand this, as well as supporting the further development of the strategy.

Who we are seeking to consult with

We are keen to hear from a representative cross section of society, ensuring diversity and inclusion, and the consultation has been designed in line with the government Consultation Principles; and with due consideration to the Public Sector Equality Duty.

Given the focus of the consultation, we consider it to have particular relevance to:

• start-ups, charities and small businesses; especially those currently struggling to use data in their processes
• technology and data-driven, or data-rich companies
• investors in technology and data companies
• civil society organisations focused on consumer rights, digital rights, privacy and data protection, and vulnerable people
• academics, and research and policy organisations with a particular interest in the role of data in the economy and society
• international data standards, regulation, and governance bodies
• law firms and other professional business services

There is also likely to be wider public interest in the social aspects of the strategy.

This consultation is on a UK-wide basis: we welcome responses from organisations and individuals across the UK. The strategy covers both reserved and devolved areas: where the strategy covers reserved areas (and, in respect of Northern Ireland, excepted areas), it does so for the whole UK, and where it covers devolved or transferred areas, it applies to England only.

The consultation: how to respond

Thank you for your interest in responding to this consultation on the National Data Strategy. The consultation will be open for 13 weeks, to allow time for your consideration and response.

To help us analyse the responses please use the online system wherever possible. Visit DCMS’s online survey platform to submit your response. Hard copy responses can be sent to:

National Data Strategy
DCMS
100 Parliament Street
London
SW1A 2BQ
Email: nationaldatastrategy@dcms.gov.uk

If you are submitting a hard copy response, please include details about the size of your organisation, or if you are responding as an individual, your interest in data and your profession.

Summary of next steps

The government’s response to this consultation will be published in due course following its closure on 9 December 2020. This will take all responses submitted to this consultation into account, and will be based on careful consideration of the points made in responses.

We will publish further detail on the proposed strategy actions and the associated monitoring and evaluation framework, building on the responses in the consultation to do this.

Consultation Questions

Overall

We want to ensure that we produce a forward-looking strategy that takes into account public opinion and delivers real change. These questions will help to inform future work that the government will take in this space. They will provide evidence for the government to target areas for intervention in future policy.

Please find a diagram below of the NDS pillars, missions and opportunities for reference.

Q1. To what extent do you agree with the following statement: Taken as a whole, the missions and pillars of the National Data Strategy focus on the right priorities. Please explain your answer here, including any areas you think the government should explore in further depth.

• Strongly disagree
• Somewhat disagree
• Neither agree nor disagree
• Somewhat agree
• Strongly agree

Q2. We are interested in examples of how data was or should have been used to deliver public benefits during the coronavirus (COVID-19) pandemic, beyond its use directly in health and social care. Please give any examples that you can, including what, if anything, central government could do to build or develop them further.

For question two, we are only looking for examples outside health and social care data. Health and social care data will be covered in the upcoming Data Strategy for Health and Social Care.

Q3. If applicable, please provide any comments about the potential impact of the proposals outlined in this consultation may have on individuals with a protected characteristic under the Equality Act 2010?

Q4. We welcome any comments about the potential impact of the proposals outlined in this consultation on the UK across all areas, and any steps the government should take to ensure that they take account of regional inequalities and support the whole of the UK?

Mission one: Unlocking the value of data across the economy

Data is an incredibly valuable resource for businesses and other organisations, helping them to deliver better services and operations for their users and beneficiaries. However, there is increasing evidence to suggest that the full value of data is not being realised because vital information is not getting to where it needs to be.

Our first mission is to create an environment where data is appropriately usable, accessible and available across the economy – fuelling growth in organisations large and small. We will create a clearer policy framework to identify where greater data access and availability across and with the economy can and should support growth and innovation, in what form, and what government’s role should be, in the UK and globally.

Data availability: For data to have the most effective impact, it needs to be appropriately accessible, mobile and re-usable. That means encouraging better coordination, access to and sharing of data of appropriate quality between organisations in the public sector, private sector and third sector, and ensuring appropriate protections for the flow of data internationally.

Q5. Which sectors have the most to gain from better data availability? Please select all relevant options listed below, which are drawn from the Standardised Industry Classification (SIC) codes.

• Accommodation and Food Service Activities
• Administrative and Support Service Activities
• Agriculture, Forestry and Fishing
• Arts, Entertainment and Recreation
• Central/Local Government inc. Defence
• Charity or Non Profit
• Construction
• Education
• Electricity, Gas, Steam and Air Conditioning Supply
• Financial and Insurance Activities
• Human Health and Social Work Activities
• Information and Communication
• Manufacturing
• Mining and Quarrying
• Transportation and Storage
• Water Supply; Sewerage, Waste Management and Remediation Activities
• Wholesale and Retail Trade; Repair Of Motor Vehicles and Motorcycles
• Professional, Scientific and Technical Activities
• Real Estate Activities
• Other

Q6. What role do you think central government should have in enabling better availability of data across the wider economy?

Q6a. How should this role vary across sectors and applications?

Data foundations: The true value of data can only be fully realised when it is fit for purpose, recorded in standardised formats on modern, future-proof systems and held in a condition that means it is findable, accessible, interoperable and reusable. By improving the quality of the data we are using, we can use it more effectively, and drive better insights and outcomes from its use.

Q7. To what extent do you agree with the following statement: The government has a role in supporting data foundations in the wider economy. Please explain your answer. If applicable, please indicate what you think the government’s enhanced role should be.

• Strongly disagree
• Somewhat disagree
• Neither agree nor disagree
• Somewhat agree
• Strongly agree

Q8. What could central government do beyond existing schemes to tackle the particular barriers that small and medium-sized enterprises (SMEs) face in using data effectively?

The Smart Data Review in 2019 consulted on ways to make evolving schemes more coordinated across banking, finance, telecoms and energy. The focus of Smart Data is citizens asking their providers to share information about them with third parties.

Q9. Beyond existing Smart Data plans, what, if any, further work do you think should be done to ensure that consumers’ data is put to work for them?

Mission two: Maintaining a pro-growth and trusted data regime

Building on our status as a world leader in technological innovation and our robust data protection standards, we will maintain a data regime that supports the future objectives of the UK outside of the EU and promotes growth and innovation while maintaining public trust. This regime will not be overly burdensome for the average company, nor will it be unnecessarily complex or vague; it will help innovators and entrepreneurs use data legitimately to build and expand their businesses, without undue regulatory uncertainty or risk at both the domestic and international levels.

To encourage the widespread uptake of digital technologies, we will also work with regulators to provide advice and support to small- and medium-sized businesses to help them expand online, and develop sector specific guidance and co-regulatory tools to accelerate digitisation across the UK economy.

Q10. How can the UK’s data protection framework remain fit for purpose in an increasingly digital and data driven age?

In section 7.1.2 we lay out the functions of the Centre for Data Ethics and Innovation (CDEI), set up in 2018 to advise the Government on the use of data-driven technologies and AI.

Q11. To what extent do you agree with the functions set out for the Centre for Data Ethics and Innovation (CDEI) - AI monitoring, partnership working and piloting and testing potential interventions in the tech landscape? Please explain your answer.

• Strongly disagree
• Somewhat disagree
• Neither agree nor disagree
• Somewhat agree
• Strongly agree

Q11a. How would a change to statutory status support the CDEI to deliver its remit?

Mission three: Transforming government’s use of data to drive efficiency and improve public services

There is massive untapped potential in the way the government uses data. We will implement major and radical changes in the way that the government uses data to drive innovation and productivity across the UK. In doing so, we will improve the delivery of public services, as well as our ability to measure the impact of policies and programmes, and to ensure resources are used effectively.

To succeed, we need a whole-government approach led by a Government Chief Data Officer from the centre in strong partnership with organisations. We need to transform the way data is collected, managed, used and shared across government, including with the wider public sector, and create joined-up and interoperable data infrastructure. We need the right skills and leadership to understand and unlock the potential of data – and we need to do so in a way that both incentivises organisations to do the right thing, as well as build in the right controls to drive standardisation, consistency and appropriate data use.

The government is going to set an ambitious package of work in this space and wants to understand where we can have the biggest impact.

Q12. We have identified five broad areas of work as part of our mission for enabling better use of data across government:

• Quality, availability and access
• Standards and assurance
• Capability, leadership and culture
• Accountability and productivity
• Ethics and public trust

We want to hear your views on any actions you think will have the biggest impact for transforming government’s use of data.

Q13. The Data Standards Authority is working with a range of public sector and external organisations to create a pipeline of data standards and standard practices that should be adopted. We welcome your views on standards that should be prioritised, building on the standards which have already been recommended.

Mission four: Ensuring the security and resilience of the infrastructure on which data relies

In the UK, the government already imposes safeguards and enforcement regimes to ensure that our data is handled responsibly. But we will also take a greater responsibility for ensuring that data is sufficiently protected when in transit, or when stored in external data centres.

The government will determine the scale and nature of risks and the appropriate response, accounting for emerging trends in the market landscape. We will also determine whether current arrangements for managing data security risks are sufficient to protect the UK from threats that counter our missions for data to be a force for good. And we will consider the sustainability of data use, exploring inefficiencies in stored and processed data, and other carbon-inefficient processes.

The infrastructure on which data relies is the virtual or physical data infrastructure, systems and services that store, process and transfer data . This includes data centres (that provide the physical space to store data), peering and transit infrastructure (that enable the exchange of data), and cloud computing that provides virtualised computing resources (for example servers, software, databases, data analytics) that are accessed remotely.

Q14. What responsibilities and requirements should be placed on virtual or physical data infrastructure service providers to provide data security, continuity and resilience of service supply?

Q14a. How do clients assess the robustness of security protocols when choosing data infrastructure services? How do they ensure that providers are keeping up with those protocols during their contract?

Q15. Demand for external data storage and processing services is growing. In order to maintain high standards of security and resilience for the infrastructure on which data use relies, what should be the respective roles of government, data service providers, their supply chain and their clients?

Q16. What are the most important risk factors in managing the security and resilience of the infrastructure on which data use relies? For example, the physical security of sites, the geographic location where data is stored, the diversity and actors in the market and supply chains, or other factors.

Q17. Do you agree that the government should play a greater role in ensuring that data does not negatively contribute to carbon usage? Please explain your answer. If applicable, please indicate how the government can effectively ensure that data does not negatively contribute to carbon usage.

• Strongly disagree
• Somewhat disagree
• Neither agree nor disagree
• Somewhat agree
• Strongly agree

Mission five: Championing the international flow of data

In our hyper-connected world, the ability to exchange data securely across borders is essential.

As the UK leaves the EU, we have the opportunity to develop a new UK capability that delivers new and innovative mechanisms for international data transfers.

Using our reputation as a world leader in digital, a champion of free trade and the rules-based international system, and an engaged, rule-abiding member of the global community, we will build trust in data’s use, creating the regimes, approaches and tools to ensure personal data is appropriately safeguarded as it moves across borders. We will also facilitate cross-border data flows by removing unnecessary barriers to international data transfers that promote growth and innovation. And we will seek to promote data standards, data interoperability, and UK values internationally.

Q18. How can the UK improve on current international transfer mechanisms, while ensuring that the personal data of UK citizens is appropriately safeguarded?

We will seek EU ‘data adequacy’ to maintain the free flow of personal data from the EEA and we will pursue UK ‘data adequacy’ with global partners to promote the free flow of data to and from the UK and ensure it will be properly protected.

Q19. What are your views on future UK data adequacy arrangements (e.g. which countries are priorities) and how can the UK work with stakeholders to ensure the best possible outcome for the UK?

Privacy Notice

The following is to explain your rights and give you the information you are entitled to under the Data Protection Act 2018 and the General Data Protection Regulation (“the Data Protection Legislation”). This notice only refers to your personal data (e.g. your name, email address, and anything that could be used to identify you personally) not the content of your response to the survey.

1. The identities of the independent data controllers and contact details of our Data Protection Officers

The Data Controllers are listed here:

The Department for Digital, Culture, Media & Sport (“DCMS”). The Data Protection Officer can be contacted at dcmsdataprotection@dcms.gov.uk

The Department for Environment, Food and Rural Affairs (Defra) dataprotection@defra.gov.uk.

Government Digital Service (GDS) DPO@cabinetoffice.gov.uk.

The Department for Business, Energy and Industrial Strategy (BEIS) dataprotection@beis.gov.uk

Office for National Statistics (ONS) DPO@statistics.gov.uk]

You can find out more here: Personal information charter

2. Why we are collecting your personal data

Your personal data is being collected as an essential part of the consultation process, so that we can contact you regarding your response and for statistical purposes such as to ensure individuals and organisations cannot complete the survey more than once.

3. Our legal basis for processing your personal data

The Data Protection Legislation states that, as government departments, the departments may process personal data as necessary for the effective performance of a task carried out in the public interest (i.e. a consultation).

We will not:

• sell or rent your data to third parties
• share your data with third parties for marketing purposes
• use your data in analytics

We will share your data if we are required to do so by law – for example, by court order, or to prevent fraud or other crime.

4. With whom we will be sharing your personal data

Copies of responses may be published after the survey closes. If we do so, unless you indicate otherwise, we will ensure that neither you nor the organisation you represent are identifiable, and any responses used to illustrate findings will be anonymised.

SmartSurvey is the online survey platform used to conduct this survey. They will store the data in accordance with the controllers instructions and their privacy policy

Survey privacy statement

If you want the information that you provide to be treated as confidential, please be aware that, under the FOIA, there is a statutory Code of Practice with which public authorities must comply and which deals, amongst other things, with obligations of confidence. In view of this, it would be helpful if you could explain to us why you regard the information you have provided as confidential. If we receive a request for disclosure of the information, we will take full account of your explanation, but we cannot give an assurance that confidentiality can be maintained in all circumstances. An automatic confidentiality disclaimer generated by your IT system will not, of itself, be regarded as binding on the Departments.

5. For how long we will keep your personal data, or criteria used to determine the retention period.

Your personal data will be held for two years after the survey is closed. This is so that the department is able to contact you regarding the result of the survey following analysis of the responses.

6. Your rights, e.g. access, rectification, erasure

The data we are collecting is your personal data, and you have considerable say over what happens to it. You have the right:

• to see what data we have about you
• to ask us to stop using your data, but keep it on record
• to have all or some of your data deleted or corrected
• to lodge a complaint with the independent Information Commissioner (ICO) if you think we are not handling your data fairly or in accordance with the law

You can contact the ICO at https://ico.org.uk, or phone 0303 123 1113. ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

7. Your personal data will not be sent outside the EEA

8. Your personal data will not be used for any automated decision making

9. Your personal data will be stored in a secure government IT system and the survey companies secure system

We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access or disclosure of your data – for example, we protect your data using varying levels of encryption.

We also make sure that any third parties that we deal with keep all personal data they process on our behalf secure.

10. Changes to this policy

We may change this privacy policy. In that case, the ‘last updated’ date at the bottom of this page will also change. Any changes to this privacy policy will apply to you and your data immediately.

If these changes affect how your personal data is processed, the controllers will take reasonable steps to let you know.

28 August 2020