Enforcement action in respect of GDPR data deletion requirements is rare in the UK and the EU, and even more so when the issue is...

Legislation is now in place to revolutionise access to customer data in the UK by enabling new ‘smart data’ schemes to come to fruition. ...

While there has been much focus in the UK on the impact of the EU’s AI Act and delays to the publication of an AI Bill, a new law was...

Staying abreast of enforcement trends is a critical element of the General Data Protection Regulation (GDPR) risk landscape for...

On 11 June, the UK’s Data (Use and Access) Bill (DUA Bill) passed in the House of Lords and is shortly set to become law. This marks the...

A recent survey by the Financial Conduct Authority and the Bank of England identified that 85% of financial services organisations are...

DPIA… or not to DPIA – Is a DPIA needed before connecting to a pensions dashboard? That is the question… being asked by UK pension scheme...

As readers of this blog will know, the final version of the EU’s General Purpose AI (GPAI) Code of Practice was due to be published by 2...

Cyber is in the headlines again, with M&S and other retailers suffering attacks and the cause of the power outage in the Iberian...

2025 continues to prove to be a year of considerable change for marketing compliance. We’ve previously covered new guidance in this area...

The Information Commissioner’s Office (ICO) has finally issued long-anticipated guidance on anonymisation and pseudonymisation practices,...

The ICO and the Competition and Markets Authority (CMA) have worked together for a number of years to enhance regulatory coherence and...

The Information Commissioner’s Office (ICO) announced earlier this week that it will work with the UK Government on a regulatory review...

The Information Commissioner’s Office (ICO) has published the third edition of its Tech Horizon Report, a series which helps...

On 25th February, Ofcom opened consultation on its draft guidance which addresses online safety for women and girls. This new guidance...

The recent opinion of the Attorney General (AG) in the European Data Protection Supervisor (EDPS) v. Single Resolution Board (SRB) case...