UK Knowledge Collection | Data law, online safety, and ESG

This month has seen several important changes to the UK's General Data Protection Regulation come into effect, as part of the Data (Use and Access) Act's phased implementation. Our Regulatory Outlook looks at the principal data protection reforms and provisions relating to automated decision-making now in force. The ICO has also recently published its final guidance on handling data protection complaints, as the new Act also brings in further rights for data subjects which come into effect in June.

In relation to the protection of children's data, the ICO recently fined an online platform after it found the company used children's personal information unlawfully. The regulator has stated its focus is on companies that primarily rely on self-declaration for age assurance, with online safety more broadly remaining a major focus for the government and regulators. The government brought forward its measures making it an offence to create purported intimate images, including AI-generated deepfakes, of an adult without consent. It has also announced an amendment to its Crime and Policing Bill to require regulated service providers to take down non-consensual intimate images within 48 hours.

On the ESG front, there are developments affecting sustainability reporting obligations for businesses in both the UK and EU. The Financial Conduct Authority is consulting on plans to replace the UK's current rules for listed companies' sustainability disclosures, and the Council of the EU has approved the provisional agreement on simplified sustainability reporting and due diligence rules. Our "Eating Compliance for Breakfast" webinar series returns next month, including a look at what the main ESG developments are that businesses should be aware of this year. Our in-person event at our Thames Valley Office next week will also explore a range of ESG and employment law issues and how the risks can be managed.

Recent Insights

Supreme Court opens the door in the UK to patentability of AI inventions

The decision represents a significant change to the way in which UK courts will approach the computer program exclusion in relation to the patentability of AI-related (and other computer-implemented) inventions.
Read more >

Regulatory Outlook

Our round-up of regulatory and compliance developments includes the implementation of certain important reforms under the Data (Use and Access) Act 2025, a tightening of online safety rules, and updates on sanctions enforcement.
Read more >

UK ICO fines online platform £14.47m and warns that age self-declaration is not enough to protect children

The regulator's decision makes clear that age self-declaration is legally insufficient, and has implications for all businesses operating online services that may be accessed by children.
Read more >

'Day 1' statutory sick pay to come into effect for UK agency workers from 6 April

The changes remove the lower earnings limit and three-day waiting period that previously restricted statutory sick pay eligibility for agency staff as well as employees.
Read more >

ESG Knowledge Update

This month's edition includes the UK's consultation on sustainability reporting, the EU's expansion of its Carbon Border Adjustment Mechanism and updated UK Green Claims Code guidance.
Read more >

Events

Life Sciences Academy 2026 | Unlocking health data for cross-border AI innovation: navigating privacy compliance in the EU and UK

10 March | 16:00-17:00
A case study exploring the use of existing data and the legal maze of cross-border health data innovation under EU and UK privacy law.
Register now >

Communications Review 2026

11 March | One London Wall | 15:00-17:45
This year's review will focus on how telecoms providers can future‑proof their networks and services amid rapid technological and regulatory change, with practical insights from industry speakers and our specialist telecoms team.
Register now >

Eating Compliance for Breakfast

09:00-09:30
EU AI Act update: preparing for enforcement | 12 March
Strategic compliance and regulatory frameworks | 19 March
Product regulation: packaging and food | 26 March
Employment Rights Act 2025: what employers and agencies should do now | 9 April
ESG: what do you need to know for 2026? | 16 April
Class actions: the new litigation risk landscape | 30 April
Register now >