All Insights

Decoding penalty notices: UK ICO clarifies its methodology for issuing fines in new guidance

Wed, 27 Mar 2024 13:28:36 +0000

<[CDATA[

Restatement and consolidation of the ICO's decision-making process rather than revolution in approach to enforcement

]]>

Data Law | UK Regulatory Outlook March 2024

Wed, 27 Mar 2024 10:09:13 +0000

<[CDATA[

ICO collects views on 'consent or pay' business models in relation to advertising cookies | IAB Europe a 'joint controller' for consent in TCF processing for online advertising | ICO guidance on using biometric data

]]>

UK Binding Corporate Rules: are updates a reason to reconsider the 'gold standard' transfer tool?

Wed, 24 Jan 2024 09:38:57 +0000

<[CDATA[

The ICO's steps to lessen a post-Brexit admin burden with the launch of the UK BCR Addendum may again encourage uptake

]]>

ICO and CMA clamp down on dark patterns in the UK

Mon, 04 Sep 2023 09:00:00 +0100

<[CDATA[

Regulators publish joint paper on harmful online design practices

]]>

Data protection | UK Regulatory Outlook July 2023

Wed, 26 Jul 2023 16:26:40 +0100

<[CDATA[

UK efforts to facilitate cross-border flows of data | EU Commission proposes new procedural regulation for stronger GDPR enforcement in cross border cases | ICO submits data protection and journalism code of practice

]]>

GDPR for HR | Pay gaps, data access and IT security

Mon, 24 Jul 2023 10:48:28 +0100

<[CDATA[

This month's update looks at guidance on data subject access requests and ethnicity pay gaps, and IT systems safety tips

]]>

What does the new Data Privacy Framework adequacy decision mean for US data flows?

Tue, 11 Jul 2023 16:25:22 +0100

<[CDATA[

EU and UK companies transferring personal data should check if their US data importers certify under the new framework

]]>

Data Protection | UK Regulatory Outlook June 2023

Wed, 28 Jun 2023 15:45:12 +0100

<[CDATA[

Update on UK data protection reform | UK and US announce Atlantic Declaration | ICO publishes report on neurotechnology

]]>

Data Protection | UK Regulatory Outlook May 2023

Thu, 25 May 2023 16:18:52 +0100

<[CDATA[

EDPB publishes guide for small businesses | Italian Data Protection Authority un-bans ChatGPT | CJEU case on the right to obtain a copy of personal data

]]>

How to assess UK data privacy risk in artificial intelligence use

Mon, 22 May 2023 17:09:01 +0100

<[CDATA[

What data protection issues should be considered when processing personal data for AI purposes?

]]>

GDPR for HR | Data protection guidance on artificial intelligence

Tue, 02 May 2023 12:43:10 +0100

<[CDATA[

Welcome to this month's edition of our GDPR for HR newsletter, bringing you a snapshot of developments, cases and insights relating to privacy in the workplace

]]>

Data protection | UK Regulatory Outlook April 2023

Thu, 27 Apr 2023 12:00:00 +0100

<[CDATA[

UK ICO issues guidance for developers and users of generative AI | MEPs raise concerns over proposed new EU-US adequacy decision | UK data protection reform update: second reading of DPDI bill on the 17 April

]]>

GDPR for HR Newsletter March 2023 | Data protection guidance on processing health data

Mon, 13 Mar 2023 16:30:00 +0000

<[CDATA[

Welcome to this month's snapshot of developments, cases and insights relating to privacy in the workplace

]]>

UK government reignites data protection reform

Thu, 09 Mar 2023 13:41:30 +0000

<[CDATA[

Changes to existing privacy framework proposed in updated Data Protection and Digital Information Bill

]]>

UK Employment Law Coffee Break: Employment trends webinar, menopause and GDPR for HR

Thu, 02 Feb 2023 12:24:47 +0000

<[CDATA[

Welcome to our latest Coffee Break in which we look at the legal and practical developments impacting UK employers

]]>

GDPR for HR | A glance back at 2022 and look forwards to 2023

Wed, 25 Jan 2023 10:06:54 +0000

<[CDATA[

In this edition of our GDPR for HR newsletter we take a look at the events of the past year, as well as looking ahead to some of the developments that employers can expect over the course of 2023

]]>

Biden paves way for EU-US Data Privacy Framework and UK-US adequacy agreement

Tue, 18 Oct 2022 17:17:00 +0100

<[CDATA[

Is post-Schrems II legal certainty on the horizon for transatlantic data processing?

]]>

GDPR for HR | The gig economy, DSAR tips and data protection abroad

Mon, 03 Oct 2022 12:30:55 +0100

<[CDATA[

Welcome to this fourth edition of our GDPR for HR newsletter - bringing you a snapshot of developments, cases and insights relating to privacy in the workplace

]]>

GDPR for HR | AI in recruitment, EU employee transparency legislation, data privacy legislation in the US and more

Mon, 05 Sep 2022 10:24:50 +0100

<[CDATA[

Welcome to this third edition of our GDPR for HR newsletter - bringing you a snapshot of developments, cases and insights relating to privacy in the workplace

]]>

UK government formalises data protection reform following consultation

Mon, 08 Aug 2022 13:32:11 +0100

<[CDATA[

Changes to existing privacy framework proposed in Data Protection and Digital Information Bill

]]>

UK government proposes clamp down on use of data subject access requests as a litigation tactic

Fri, 05 Aug 2022 14:43:29 +0100

<[CDATA[

Consultation response suggests that an inappropriate 'purpose' for making a DSAR could soon be a reason to refuse to respond

]]>

Employment Law Coffee Break | GDPR for HR, drafting employment contracts and a round-up of recent developments

Thu, 04 Aug 2022 09:40:35 +0100

<[CDATA[

Welcome to our latest Coffee Break in which we look at the latest legal and practical developments impacting UK employers.

]]>

GDPR for HR | Accessing employees' non-work related emails, Brexit, DSARs and more

Tue, 02 Aug 2022 10:43:33 +0100

<[CDATA[

Welcome to the second edition of our GDPR for HR newsletter - bringing you a snapshot of developments, cases and insights relating to privacy in the workplace.

]]>

How to respond to a ransomware attack – an illustrative example

Tue, 14 Jun 2022 13:43:59 +0100

<[CDATA[

Cyber attacks have become a fact of life. They are a persistent and real risk for any business, with the frequency and severity of attacks increasing dramatically over the past few years. Our case study illustrates how to navigate a cyber attack: to ensure that operational impact, reputational damage, financial loss, and legal liability are minimised, and the potential fallout is managed to the greatest extent possible.

This is chapter 2.9 of Data-driven business models: The role of legal teams in delivering success

]]>

How employers should prepare for data subject access requests

Tue, 24 May 2022 16:36:30 +0100

<[CDATA[

New European Data Protection Board guidelines on data requests mean employers will need to get up to speed on obligations

]]>