Commonwealth law ministers have adopted a new model law to strengthen rules for protecting and handling personal data.
At their biennial meeting in Mauritius last week, ministers unanimously approved the adoption of the model provisions on data protection as a Commonwealth model law.
The model provisions replace and update earlier Commonwealth model laws on computer-related crimes and personal information, reflecting advances in technology and cross-border data flows.
The new provisions take a principled approach in line with the latest international agreements on data protection. They include mechanisms to investigate breaches, grounds for cross-border data transfers, rules for privacy compliance, restrictions on the usage of people’s personal data and a clear definition of consent.
While many Commonwealth countries have domestic laws on data protection, with varying levels of scope and enforcement, there is no legally binding regime applicable to all Commonwealth jurisdictions.
Legislators can use the model law as a standard template to draft new data protection legislation or amend existing statutes, with options that can be adapted according to local circumstances.
The purpose is to promote legislative harmonisation among the 56 Commonwealth countries to boost data protection, transnational data-driven trade and cross-border security cooperation.
“The adoption of these model provisions by law ministers is the culmination of a multi-year process that brought together the finest thinking in data protection from across the Commonwealth,” said Matthew Moorhead, Legal Adviser at the Commonwealth Secretariat’s Governance and Peace Directorate and director of the project.
“We offer them as a tool to legislators and policymakers everywhere who are grappling with this important topic.”
The process of developing the model provisions began in 2018, with the first meeting of an expert working group nominated by Commonwealth countries.
Assisted by data law experts Dr. Orla Lynskey and Judith Rauhofer, the working group negotiated provisions before finalising the recently adopted version.