All Insights

Regulatory Outlook

Data law | UK Regulatory Outlook May 2026

UK updates: ICO publishes its final guidance on the use of storage and access technologies | ICO publishes advice to
Regulatory Outlook

Data law | UK Regulatory Outlook April 2026

UK: Data (Use and Access) Act 2025: ICO publishes new guidance | Automated decision-making: ICO consultation on updated guidance |
GDPR for HR

GDPR for HR | March 2026

Data protection in internal investigations, use of AI in DSARs and recruitment, and deleted data DSAR obligations
Regulatory Outlook

Data law | UK Regulatory Outlook March 2026

UK: ICO fines Reddit £14.47 million for children's privacy failures | ICO's open letter to platforms on strengthening age assurance
Regulatory Outlook

Data law | UK Regulatory Outlook February 2026

UK: Data (Use and Access) Act 2025 updates - Key data protection reforms in effect, new criminal offence for creating
Data protection and privacy regulation

UK ICO explains the Data (Use and Access) Act's new data protection complaints requirements

With less than six months until new obligations take effect, guidance offers controllers practical steps for compliance
Regulatory Outlook

Data law | UK Regulatory Outlook January 2026

A busy year ahead: what will this mean for business? | UK Data (Use and Access) Act 2025 | UK
GDPR for HR

GDPR for HR | December 2025

Data subject access requests: the impact of AI, the Data (Use and Access) Act, and ICO enforcement
Regulatory Outlook

Data law | UK Regulatory Outlook November 2025

UK: ICO consultation on enforcement procedural guidance | ICO fines Capita £14m for data breach | Cyber Security and Resilience
GDPR for HR

UK and EU GDPR for HR | Autumn 2025

Data subject access requests and disclosure pitfalls, workplace AI engagement, and sharing pseudonymised data
Regulatory Outlook

Data law | UK Regulatory Outlook October 2025

UK: ICO consults on new 'charitable purpose soft opt-in' under DUA Act | ICO survey on advice when sharing data
IT and data

CJEU clarifies concepts of personal and pseudonymised data: implications for data sharing

Transparency obligations apply to a transfer of pseudonymised data, even if it is not identifiable as personal data in the