A survey conducted in April and May 2023 revealed that around 55 percent of the companies that do business in the European Union (EU) and the United Kingdom (UK) found it challenging to adapt to new or changing requirements of the General Data Protection Regulation (GDPR) or Data Protection Act 2018 (DPA). A further 45 percent of the survey respondents said it was challenging to increase the budget because of the changes in the data privacy laws.

During a survey carried out in the United Kingdom (UK) in late 2023, roughly 74 percent of consumers aged 55 to 64 were concerned about data privacy when interacting with brands digitally. Among interviewees aged 18 to 24, the respective share stood at 59.3 percent.

A survey conducted in April and May 2023 revealed that around 35 percent of organizations in the United States and 40 percent of organizations in the United Kingdom pay higher costs for international data transfers due to data privacy regulations, but they also find it manageable. Furthermore, approximately 35 percent of respondents from both countries think the regulations encourage businesses by guaranteeing that the data will be safeguarded in other countries.

In the United Kingdom, consumer concerns around use of personal data by companies centered on more accountability from the side of the companies, according to a survey conducted among internet users in the UK. 58 percent of respondents said they thought companies should be held accountable in the case of data misuse. Another 34 percent of consumers who took part in the survey said they wanted to see transparency on marketing and advertising practices carried out by companies.

This dataset is a central catalogue of Data Protection Impact Assessments (DPIAs) of smart city projects that collect personal information in public spaces. By publishing this in one place for the first time, it will enable public transparency and support good practice among operators.

A DPIA helps to identify and minimise the risks of a project that uses personal data.

Further information:

DPIA registration form: https://www.london.gov.uk/dpia-register-form

Information Commissioner DPIA: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/accountability-and-governance/data-protection-impact-assessments/

As of the third quarter of 2023, more than 44 percent of online users in the United Kingdom (UK) declined cookies on websites at least some of the time. Another 38.4 percent worried about how companies might use their online data. Furthermore, around 28 percent reported using a tool to block advertisements on the internet at least some of the time.

The Cyber Security Breaches Survey, 2023 (CSBS) was run to understand organisations' approaches and attitudes to cyber security, and to understand their experience of cyber security breaches. The aim of the survey was to support the Government by providing evidence that can inform policies which help to make Britain a safer place to do business online. Details of changes for the 2023 survey can be found in the Technical Annex documentation.

These surveys have been conducted annually since 2016 to understand the views of UK organisations on cyber security. Data are collected on topics including online use; attitudes of organisations to cyber security and awareness of Government initiatives; approaches to cyber security (including investment and processes); incidences and impact of a cyber security breach or attack; and how breaches are dealt with by the organisation. This information helps to inform Government policy towards organisations, including how best to target key messages to businesses and charities so that they are cyber secure (and so that the UK is the safest place in the world to do business online). The study is funded by the DSIT as part of the National Cyber Security Programme.

The underlying data are useful for researchers to better understand the response across a range of organisations and for wider comparability over time. The survey originally only covered businesses but was expanded to include charities from the 2018 survey onwards. From 2020, the survey includes a sample of education institutions (primary and secondary schools, further and higher education). Please note that the UK Data Service only holds data from 2018 onwards.

Further information and additional publications can be found on the GOV.UK Cyber Security Breaches Survey 2023 webpage.

Latest Edition Information
For the second edition (August 2023), the data file has been updated to correct an error with the variable COUNTRY. In the earlier version, some non-charity data had been mistakenly mapped to a country in this variable, which refers to charities sampled only. These respondents have now been recoded as -1 (missing).

A survey conducted in April and May 2023 among companies in the United States and the United Kingdom (UK) showed that seven in 10 organizations had designated an internal manager or owner to lead and implement data privacy measures. Additionally, almost 60 percent conducted regular training of all staff on data privacy and compliance.

This is because it would breach the first data protection principle as: a) it is not fair to disclose claimant personal details to the world and is likely to cause damage or distress. b) these details are not of sufficient interest to the public to warrant an intrusion into the privacy of the claimant. Please click the below web link to see the exemption in full. https://www.legislation.gov.uk/ukpga/2000/36/section/40 Breach of Patient confidentiality Please note that the identification of claimants is also a breach of the common law duty of confidence. A claimant who has been identified could make a claim against the NHSBSA or yourself for the disclosure of the confidential information. The information requested is therefore being withheld as it falls under the exemption in section 41(1) ‘Information provided in confidence’ of the Freedom of Information Act. Please click the below web link to see the exemption in full.

These are requests for particular government dataset to be made public (and ideally open). The requests are added by anyone, using a form at data.gov.uk and they are listed at https://data.gov.uk/data-request

Only 'public' data requests are included in the data published here. Confidential requests can also be made, e.g. for commercial confidentiality. There is a count of them provided on https://data.gov.uk/data-request which at the time of writing stands at 522 confidential requests out of 1257 dataset requests.

There are two versions of the data:

• v1 - missing a couple of fields. Live data (always up to date).
• v2 - contains all the public fields. Produced nightly. System fields: nid, url, created, updated. Requester fields: title submitted_by data_themes status description suggested_use suggested_use_detail benefits_overview. Government response: publisher dataset_link field_review_notes.

Policy for requests:

• a "data request" is a request for government to publish a dataset that is not yet published on data.gov.uk. Requests associated with specific datasets already on data.gov.uk should instead be made in a comment on the particular dataset page.
• only central government and its agencies are available in these requests. For others organizations, contact them directly and consider making an FOI request.
• your personal data should not be requested with this method - contact the relevant organization directly. each request will be directed to the relevant department by the Cabinet Office team.

(These have been shown on the form since late 2015, and before that the policy varied)

Data requests on file date back to September 2012.