Data Protection - the GDPR is here to stay but a new Data Protection Bill is also on its way

In yesterday's Queen's Speech the government confirmed that the General Data Protection Regulations (GDPR) would be implemented in the UK to enable the UK to continue to share data with the EU after Brexit. A new Data Protection Bill was also promised, to replace  the Data Protection Act 1998(DPA). The new bill would strengthen the rights of individuals over their personal data and update the powers and sanctions available to the Information Commissioner. The new rights of individuals will include the 'right to  be forgotten' and, as promised in the Conservative Party's manifesto,  the right to compel social media platforms to delete information held about them at the age of 18. 

We look forward to seeing the new Bill when it is published but what changes do you think are needed to update the DPA for for the 21st century?