The Information Commissioner’s Office (ICO) has finally issued long-anticipated guidance on anonymisation and pseudonymisation practices,...

As we’ve previously reported on this blog, the third draft of the EU’s General-Purpose AI Code of Practice was published on 11 March. ...

As many jurisdictions scramble to transpose the NIS2 directive into national law across the EU, the European Union Agency for...

On 10 April 2025, the Government published its latest Cyber Security Breaches Survey. The tenth edition of the study was commissioned by...

The ICO and the Competition and Markets Authority (CMA) have worked together for a number of years to enhance regulatory coherence and...

Hot off the heels of its notice of intent to fine DNA company 23andMe £4.59m following a data breach, the ICO has fined Advanced Computer...

On 1 April 2025, the government published a statement providing further detail on the UK’s upcoming Cyber Security and Resilience Bill....

On 6 April the majority of the unfair commercial practices (“UCP”) provisions in the Digital Markets, Competition and Consumers Act 2024...

The Information Commissioner’s Office (ICO) announced earlier this week that it will work with the UK Government on a regulatory review...

The Information Commissioner’s Office (ICO) has published the third edition of its Tech Horizon Report, a series which helps...

On 25th February, Ofcom opened consultation on its draft guidance which addresses online safety for women and girls. This new guidance...

It’s late but finally here. The 3rd edition of the EU’s GPAI Code of Practice was originally expected in mid February but was published...

The recent opinion of the Attorney General (AG) in the European Data Protection Supervisor (EDPS) v. Single Resolution Board (SRB) case...

When it comes to fining regimes, deciding whether to set fines based on an entire group's turnover or only an infringing entity’s can...

As businesses increasingly look to their tech providers to deliver costs savings, it is important to ensure that the exclusions and...

The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have separately weighed in with their...