Hello, I'm James.

And I'm Richard.

And we're both tech and data specialists from fieldfishers, Silicon Valley.

So the UK has finally wrestled back sovereignty, or the DUA Act, finally became law just at the end of the last one.

But as Brexit gets further into the rearview mirror, how radical are these changes really?

And what do they mean for UK adequacy and international data transfers going forward?

So, Richard, we've heard about these UK reforms for some time now.

First, it was the data protection and digital information bill, then it was the Data Reform Act,

and now we've got the DUA Act.

And if we use its long name, it gets even crazier.

We've got an act to make provision about access to customer data and digital business ID,

registers relating to apparatus in street,

registers and birth and deaths. It goes on and on and on. Yeah, it's quite a mathful.

And so we've got provisions covering things like digital verification services, the National

Underground Asset Register, the digitalization of register and births and deaths, lots and lots

of stuff to cover here. But I think the headline is that this

probably isn't relevant to most business customers. So today what we're going to be focusing

on is just the top five changes that actually make a difference in practice from the perspective

of UK data protection law. So, Richard, from your perspective, looking at those sort of top five key points, what do you think are the big changes here? What are the headlines that people need to know?

Well, firstly, let's be clear. This isn't a radical change to UK data protection law. The DUA Act doesn't make whole scale changes to existing law. It doesn't replace the UK GDPR or the Data Protection Act. Instead,

what it does it fine-tunes existing laws, aiming to reduce some regulatory burden and bring

more clarity to certain aspects of the law. In fact, in many cases, the DAU Act simply codifies

...