Reform UK pledges to scrap GDPR and adopt New Zealand's privacy law
The party proposes a lighter data protection regime to relieve small businesses.
1Reform UK's GDPR plan
Reform UK plans to remove the UK's GDPR regulations and adopt New Zealand's lighter privacy law. Party leader Nigel Farage and economy chief Robert Jenrick argue this change would free small businesses from bureaucracy. Post-Brexit UK GDPR imposes heavy fines on companies, while the New Zealand model caps penalties at NZ$50,000. The proposal is part of a broader package aimed at reducing burdens on small enterprises.
2Pressure on small businesses
Farage stated that small businesses have been crushed by heavy taxes and EU bureaucracy for years. Jenrick claimed GDPR has strangled both small businesses and tech firms with unnecessary regulations. The party emphasized that following EU privacy laws a decade after Brexit makes no sense. The proposed changes particularly target tax and bureaucratic relief for small businesses.
3Differences in New Zealand model
New Zealand's Privacy Act 2020 significantly differs from UK GDPR. While EU regulations grant broad rights like 'right to be forgotten,' New Zealand's law lacks such provisions. The actual differences in data handling and transfer mechanisms are smaller than the rhetoric suggests. However, the penalty mechanisms show notable contrasts between the two regimes.
4Risk to EU data adequacy status
Reform UK claims the change won't affect Britain's EU data adequacy status. This status enables personal data flow between the UK and EU without additional legal processes. Brussels extended the status until 2031. However, the EU Commission only grants adequacy to countries offering essentially equivalent protection levels. Reform's press release asserts the New Zealand model meets this standard but provides no details.
5Practical consequences for businesses
UK firms losing free data flows to the EU would have to rely on standard contractual clauses. This means additional bureaucracy and costs for the very small businesses Reform aims to help. The Labour Party's Data (Use and Access) Act passed last year relaxed some UK GDPR provisions. That law facilitated data sharing between critical sectors and softened automated decision-making rules.
6Legal challenges and criticism
Good Law Project sued Reform UK in 2025 for allegedly failing to comply with UK GDPR. The group claims the party didn't disclose what data it held or respond to deletion requests. The High Court ruled the case should proceed to trial. A Labour spokesperson called Reform's pledges 'unworkable and unserious,' accusing them of trying to undo the Online Safety Act.
7Lack of details and uncertainties
Reform UK has shared few details about its technology policies. The party hasn't specified which regulator would enforce the new law or what powers it would have. Beyond vague ambitions to make Britain a leader in emerging fields like AI, concrete plans remain scarce. Shadow chancellor Sir Mel Stride noted the lack of detail on how scrapping GDPR would work in practice.
8Future determining factors
Whether Reform UK's proposal becomes reality depends on two critical tests. First, whether the party publishes a draft of its light-touch law. Second, whether the European Commission comments on adequacy status before the next election. The only opinion with legal consequences for this proposal will be the European Commission's stance.