Whitehall’s tech department is seeking feedback from market experts to help understand security implications and dictate policy related to companies whose business is to gather, collate and share data sets

Government is exploring the potential risks to national security created by “data brokers”.

A consultation process being undertaken by the Department for Science, Innovation and Technology outlines that this refers to firms – also known as “information brokers or data providers” – offering services wherein “pre-packaged or bespoke datasets can be obtained at speed and scale”.

“Whilst these organisations can support the benefits of data sharing, the government recognises the potential for hostile actors, such as cybercriminals, to acquire UK data on the open market,” the consultation outline says. “Hostile actors could exploit this opportunity and data brokers themselves, tainting an otherwise important market, to access large amounts of UK data. This data could include potentially sensitive information a hostile actor may use for malign purposes, resulting in potential national security harms… Other countries have also identified data related national security risks and are taking steps to mitigate this.”

To help support future policymaking, the government is inviting stakeholders and other experts to provide insight in four defined areas – beginning with the establishing “the definition and services of data brokers”. The second area of focus aims to examine “national security risks associated with the data broker industry” while the third is concerned with the current “effectiveness of data brokers’ security and governance frameworks”.

Related content

• ‘The people who are affected are the ones that should be making decisions about how data gets used’
• ‘Data is the lifeblood of Scottish public services’
• Government ‘committed to improving data-sharing’ – but knocks back PACAC recommendations

The final section of the consultation “asks data brokers for a breakdown of their customer base and explores consumer awareness of data brokers”.

The outline adds: “We understand that some of the responses, such as issues relating to customers or security arrangements, will be commercially sensitive, or respondents may not want to share details for security reasons. Please note, however, that we will handle this data carefully and securely.”

Those taking part in the consultation process will be asked to respond to 41 questions and submissions are open until midnight on 12 May.

Prospective participants are advised that DSIT is “particularly interested in hearing from: data brokers or organisations conducting data broking of UK data; organisations which supply, license or make available data to data brokers; organisations which buy, license or obtain data from data brokers; relevant industry bodies; academics and think tanks working/interested in data, national security, cyber security and/or other related fields”.

“The UK government recognises that data is one of the UK’s most valuable assets and has the potential to drive economic growth and innovation,” the outline says. “Whilst data plays an increasingly important role in our lives and the sharing of data can reap positive outcomes, it’s essential that the government facilitates access to data in a safe and responsible way that ensures security of data and builds public trust in how it is used.”