Reform UK proposes scrapping GDPR for 'light-touch' New Zealand-style data laws

Reform UK has proposed the total abolition of the UK GDPR in favor of a "light-touch" data protection framework. The move represents a radical attempt to decouple British privacy law from European standards a decade after the Brexit referendum.

Nigel Farage and Reform UK economy chief Robert Jenrick argue that the current regulatory environment is "suffocating" and "strangling" the nation's tech firms and small enterprises. To replace the existing regime, the party suggests a model based on New Zealand's Privacy Act 2020. The difference in enforcement is stark: while the UK Information Commissioner can levy multi-million-pound fines, New Zealand's framework limits fines for organizations to NZ$50,000.

"Small businesses are the beating heart of our economy, yet they have been suffocated by years of punishing taxes, suffocating EU red tape and a big-state obsession that rewards dependency over hard work," Farage stated. Jenrick added that GDPR has trapped businesses in a "web of unnecessary regulation."

The Regulatory Landscape

The UK GDPR remains the cornerstone of British data privacy. The current Labour government has already begun modifying the regime through the Data (Use and Access) Act 2025, which received Royal Assent on June 19, 2025, to loosen certain restrictions. However, Reform UK's proposal goes significantly further than these incremental tweaks.

Critics have been quick to dismiss the proposal. Shadow chancellor Sir Mel Stride described the announcement as "a mixture of already-made promises and half-baked schemes that collapse on contact with reality."

Economic and Legal Implications

The proposal carries significant risks for international trade. A major divergence from EU data protection laws could jeopardize the UK's "adequacy decision" from the European Union. This status currently allows personal data to flow freely between the UK and EU without additional legal hurdles; losing it would create substantial new administrative and legal barriers for any business operating across borders.

Furthermore, the proposal arrives as Reform UK faces its own data compliance challenges. The party is currently embroiled in a legal battle with the Good Law Project over alleged failures to comply with UK GDPR, including accusations that the party refused to disclose or delete stored data.

What's Next

Whether the proposal gains traction depends on the party's ability to provide a detailed transition plan that satisfies both the business community and international regulators. For now, the primary point of contention remains the balance between reducing "red tape" for small firms and maintaining the high-standard privacy protections required for seamless European trade.