UK DSIT Data Brokers, Intermediaries CfE

Published on: Mar 20, 2025

On Mar. 17, UK DSIT sought views on data brokers and intermediaries.

  • UK DSIT issued a call for evidence (CfE) seeking views on the data broking industry, data brokers' operations, security practices, customers, to support policy development.
  • And a CfE on data intermediaries, seeking information to inform policy design, promote trusted data access and sharing, manage potential harms from 3rd party data control.
  • Data Brokers
  • The call for evidence on data brokers is intended to help UK DSIT understand more about organizations that take part in data broking, and wider data broking industry.
  • In particular would like to understand definition and services of data brokers, national security risks related to the industry, effectiveness of existing security governance arrangements, and data brokers' customers and consumer awareness.
  • The data broker industry is a complex ecosystem and there is a lack of publicly available information profiling the industry's customers and main beneficiaries.
  • UK DSIT wants to learn more about the customers buying UK data, who is benefiting from the industry and how commercially available data is being used.
  • And what tools, beyond existing legislation, may be appropriate to strengthen the United Kingdom against emerging data-related national security risks.
  • Data Intermediaries
  • This call for evidence notes data intermediaries is a term that refers to a range of organizations that facilitate data access and exchange on behalf of, or for the benefit of individuals, has been highlighted that barriers exist to their development in the UK.
  • UK DSIT is committed to enhancing data access for businesses and individuals.
  • Seeks information on: the reasons for the limited exercise of some data subject rights, like data portability; nature and scope of data intermediaries' activities and a proposed taxonomy; critical success factors for them to reach full potential, and any barriers.
  • And risk factors associated with third-party exercise of data subject rights.
  • Effectiveness
  • Closing date for submission of responses to both calls for evidence is May 12, 2025.
Regulators
UK DSIT
Entity Types
CNSM; Corp
Reference
CfE, PR, 3/17/2025
Functions
Market Conduct; Operations; Outsourcing; Privacy; Research; Technology
Countries
United Kingdom
Category
State
N/A
Products
Corporate
Rule Type
Concept
Regions
EMEA
Rule Date
Mar 17, 2025
Effective Date
May 12, 2025
Rule ID
247399
Linked to
N/A
Reg. Last Update
Mar 17, 2025
Report Section
UK