On 13 September 2017, the UK government introduced the new Data Protection Bill in the House of Lords. If enacted, the bill will repeal and replace the existing Data Protection Act 1998 and supplement the GDPR. The bill is intended to implement a number of derogations by the UK that are permitted under the GDPR and to carry over a number of exemptions from the Data Protection Act 1998.

The bill's second reading, a general debate on all aspects of the bill in the House of Lords, is scheduled for 10 October 2017. This will be the first opportunity for members of the House of Lords to debate the bill's principles and to flag specific areas they believe require amendment. After a committee stage, a report stage and third reading, all in the House of Lords, the bill will then pass to the House of Commons.