4/23/2026 1:23:23 PM Sky Betting case update: a score draw but an objective answer on marketing consent By Cindy Knott Richard Jeens Businesses will welcome the clarity provided by the Court of Appeal in RTM v Bonne Terre Limited that consent to personalised marketing...
4/22/2026 12:54:19 PM 5 things you need to know from the UK’s new Smart Data Strategy By Will Manley Bryony Bacon Emily Bradley The UK’s Smart Data Strategy, published on 26 March, sets out the government’s aims and plans for smart data in the UK until 2035. With...
4/20/2026 2:29:02 PM Privacy laws are playing their part in online safety regulation By Rebecca Cousin Kathryn Martin Cussons The debate about keeping people (especially children) safe online keeps making headlines. That debate has accelerated as AI tools that...
4/7/2026 1:28:22 PM New ICO guidance on ADM: Some relaxations but no free pass By Bryony Bacon Cindy Knott The ICO has published new draft updated guidance (the draft guidance) for organisations using automated decision making. The draft...
3/13/2026 2:05:04 PM ICO publishes guidance on data protection complaints processes By Lewis Mack Bryony Bacon Cindy Knott The Data (Use and Access) Act 2025 (DUA Act) requires organisations to have a data protection complaints process in place from 19 June...
3/12/2026 1:15:02 PM Identifiability in controllers' hands is key - Outcome of the DSG Retail appeal By Rebecca Cousin Alex Buchanan The Court of Appeal’s February 2026 ruling in DSG Retail Ltd v Information Commissioner has confirmed the normal interpretation of the...
2/27/2026 10:03:21 AM Children’s privacy in focus: ICO fines Reddit £14.47m By Bryony Bacon Lewis Mack Whereas 2025 saw the ICO’s penalties firmly aimed at data security and cyber breaches, this year has seen the issue of two significant...
2/19/2026 11:11:54 AM How does Ofcom set penalties under the OSA? Insights from its recent decisions By Will Manley Bryony Bacon With intense public and political scrutiny falling on online safety enforcement, triggered by X’s Grok AI chatbot, enforcement action...
2/19/2026 11:03:47 AM The EU Data Act in practice: Key recent developments By Will Manley Peter Elkin Support for Data Act compliance has been bolstered in recent months by the launch of the EU’s new Data Union Strategy, which aims to...
2/6/2026 1:47:29 PM ICO updates on plans for supporting economic growth as key parts of the DUA Act come into force By Cindy Knott Bryony Bacon This time last year, the ICO published a letter to the UK government setting out five new initiatives to support innovation and sustain...
1/27/2026 2:28:14 PM ICO publishes report on agentic AI and its data privacy implications By Lily Latimer Smith The Information Commissioner’s Office (ICO) has published the latest report in its Tech Futures series on the topic of agentic AI (the...
1/26/2026 11:02:42 AM Major update to ICO international transfers guidance: key takeaways for organisations By Bryony Bacon The UK Information Commissioner’s Office (ICO) has published a major update to its international transfers guidance to help organisations...
1/12/2026 12:06:55 PM ICO publishes new guidance on data subject access requests By Cindy Knott The Information Commissioner’s Office (ICO) has published updated guidance on data subject access requests (DSARs), reflecting both...
12/11/2025 9:27:38 AM EU proposes single-entry point for cyber incident reporting, but is it really “report once, share many”? By Laura Houston Richard Jeens Christopher Burns Natalie Donovan +1 more... Show less As part of the recently announced Digital Omnibus simplification package (see our blog on that here), the European Commission plans to...
11/24/2025 5:05:38 PM Preventing Core Technical Failures: Lessons from the Capita Breach By Rebecca Cousin Natalie Donovan Peter Elkin The Information Commissioner’s Office (ICO) investigation into Capita’s 2023 cyber attack has concluded with a £14 million fine for the...
11/20/2025 2:37:30 PM What changes does the Digital Omnibus make to the EU GDPR? By Bryony Bacon Major changes to the EU’s data protection regime are included in the European Commission’s Digital Omnibus package, launched on 19...