Subtle but helpful – changes to the right of access under DPDI 2

In this article, I discuss the upcoming changes to the rules on subject access requests under the Data Protection and Digital Information (No. 2) Bill (DPDI 2). Some of these changes also impact the broader rights of data subjects.

Standing at 220 pages long, one may assume that DPDI 2 is a big overhaul of data protection law, reminiscent of the start of the GDPR in 2018. However, at least on the data protection (rather than digital information) side, a lot of the changes are more subtle; a few tweaks here and there to existing rules under the UK GDPR and Data Protection Act 2018. Nonetheless, some of the tweaks may have a significant impact on organisations which need to apply the relevant rules. In relation to rights of individuals, the changes may provide some helpful clarity for controllers.

Read the full article: “Subtle but helpful – changes to the right of access under DPDI 2” published in Volume 24 Issue 1 of the PDP Privacy and Data Protection Journal (

Olivia Whitcroft, principal of OBEP, 11 October 2023

This article provides general information on the subject matter and is not intended to be relied upon as legal advice. If you would like to discuss this topic, please contact Olivia Whitcroft using the contact details set out here: Contact Details