Create a legally enforceable, single national system allowing individuals to opt out of non-essential or secondary use of their personal data by public bodies and their external technology contractors. The opt-out must be simple, universal, and transparently enforced.

As public services become more data-driven, personal data is often used beyond its original purpose, including by external technology contractors similar to high-profile analytics firms. While such use can support planning and research, people should retain meaningful control. A single national opt-out would strengthen privacy, improve trust, and support UK GDPR principles while allowing essential services to continue safely.