PI responds to DSIT consultation on how UK data regulations impact AI adoption

Privacy International (PI) has submitted its response to the call for evidence consultation initiated by the Department for Science, Innovation and Technology (DSIT) regarding how United Kingdom (UK) data regulation interacts with artificial intelligence (AI) and data-intensive technologies.

In its response, PI addresses how foundational assumptions of data protection law are influenced across the AI lifecycle, the erosion of transparency and data subject rights, as well as circumstances where controllers can no longer identify held personal data, processing methods, or outputs. PI also outlined risks arising from onward identifiability, the mosaic effect, and proposals seeking to narrow the statutory definition of personal data.

In addition, PI examined amendments to automated decision-making (ADM) introduced under the Data (Use and Access) Act 2025 (DUA Act), along with gaps in the UK's legal framework on AI applications it argues should be prohibited, such as live biometric identification, sentiment analysis, and behavioural prediction. Finally, the submission addresses concerns related to competition intelligence service data breaches under the Investigatory Powers Act (IPA).

Training Announcement: Find out more about our range of independent accredited qualifications from BCS and IAPP. These include professional certifications for practitioners covering data protection and AI governance, information security and risk management, along with access to public information.