Reform UK has pledged to scrap the General Data Protection Regulation (GDPR) as part of a broader plan to cut business red tape, replacing it with what the party calls a 'light-touch' approach to data protection. The announcement, tied to an expanded venture capital scheme offering tax relief to investors, marks one of the clearest policy statements yet from the party on how it would reshape Britain's data privacy framework if it formed a government.

What Reform UK Is Proposing

The pledge centers on axing GDPR entirely rather than reforming it incrementally. Reform UK has pointed to a lighter-touch data regime, similar to the model used in New Zealand, as the template for a UK replacement. The party frames this as necessary to reduce compliance burdens on small businesses and startups, arguing that current data protection rules slow down innovation and make it harder for firms to compete.

This isn't the first time Reform UK has floated the idea. The party's leadership, including Nigel Farage, has previously argued that GDPR has 'strangled small businesses and tech firms' with excessive paperwork and legal risk. Those earlier comments, detailed in coverage of Reform UK's plans to scrap UK GDPR rules, laid the groundwork for this more formal policy pledge, which now links deregulation to a specific investment incentive scheme.

Why GDPR Matters for Everyday Privacy

GDPR was introduced to give people meaningful control over their personal information: the right to know what data companies hold about them, the right to have it deleted, and the right to be informed when a breach occurs. It also sets strict rules on how organizations collect, store, and share data, backed by fines for companies that fail to comply.

A 'light-touch' replacement raises questions that go beyond business red tape. If enforcement becomes less strict or if core rights like data access and deletion requests are watered down, individuals could find it harder to hold companies accountable for how their information is used. Data protection law also underpins consumer protections around marketing, tracking, and profiling, so any rollback would likely touch far more than corporate compliance costs.

Supporters of scrapping GDPR argue that the regulation is overly bureaucratic and disproportionately burdens smaller companies that lack the legal resources of larger firms. Critics counter that data protection rules exist precisely because power imbalances between individuals and organizations make privacy hard to protect without legal backing. Both arguments are likely to feature heavily as this proposal moves from campaign pledge toward, potentially, a governing platform.

The Business Case and the New Zealand Comparison

Reform UK's pitch bundles data deregulation with an expanded venture capital tax relief scheme, positioning both as part of a wider push to make the UK more attractive to investors and entrepreneurs. The party has cited New Zealand's lighter regulatory approach to data protection as evidence that a less prescriptive framework can coexist with a functioning digital economy.

Whether that comparison holds up depends heavily on the details Reform UK has yet to publish. New Zealand's privacy regime, while less prescriptive than GDPR, still includes core principles around data collection, use, and breach notification. A genuine 'light-touch' UK law could range from a modest simplification of existing rules to a much more substantial rollback of individual data rights. Without a full policy document, it's difficult to know which version of deregulation Reform UK is actually proposing.

What This Means For You

For now, this is a political pledge, not enacted law. GDPR and the UK's existing data protection framework remain in effect, and your current rights to access, correct, or delete your personal data are unchanged. But the proposal signals that data privacy could become a live political issue in future elections, especially as parties weigh deregulation against consumer protection.

If you're concerned about how your personal data is handled regardless of what happens with GDPR, it's worth taking stock of your own digital habits now. Review privacy settings on the services you use most, limit unnecessary data sharing with apps and websites, and pay attention to how companies communicate about breaches or policy changes. Staying informed about proposals like this one, rather than reacting only once laws change, gives you more room to adjust your habits and advocate for the protections that matter to you.

Key Takeaways

  • Reform UK's GDPR pledge is currently a policy proposal, not law, so your existing data rights remain intact for now.
  • The party has linked scrapping GDPR to broader business deregulation and a venture capital tax relief scheme.
  • A 'light-touch' framework could mean anything from minor simplification to significant rollback of privacy protections, and details remain unclear.
  • Keep an eye on how this pledge develops, particularly around what specific rights, like data deletion or breach notification, might change under a New Zealand-style model.
  • Regardless of policy shifts, proactively managing your own data sharing and privacy settings remains one of the most reliable ways to protect your information.