When it comes to fining regimes, deciding whether to set fines based on an entire group's turnover or only an infringing entity’s can...

It has been a busy start to the year in the AI space, with data privacy regulators under increasing pressure to balance promoting...

Following its initial finding that software provider Advanced Computer Software Group Ltd (Advanced, now trading as OneAdvanced) failed...

The sheer number of cases facing potential enforcement coupled with the shifting versions of draft guidance have, in recent years, made...

On 2 October 2023, the ICO released for consultation new draft guidance on how it decides to issue penalty notices and calculate fines...

In early October 2022, UK catalogue retailer Easylife was issued separate financial penalties by the ICO under the PECR (£130,000) and...

In group actions, publicity often pulls in more plaintiffs. TV advertising has long been used by claimant firms in the United States to...

New guidelines published on 14 January provide both practical examples of when to notify a data breach and “advisable measures” which...

While there is plenty of uncertainty on the horizon, one thing we can expect in 2021 is some big developments in relation to collective...

Giving proper effect to individuals’ data privacy rights is at the heart of the GDPR and Data Protection Act (DPA) 2018. It is therefore...

The ICO has published draft guidance around how it will flex its regulatory muscles when enforcing data privacy legislation in the UK....

The Court of Justice of the European Union (CJEU) has published its long-awaited decision in the case of Data Protection Commissioner...

Following my last post on the data protection challenges associated with adtech, the Information Commissioner’s Office (ICO) announced...

Most of us will be familiar with the experience of being followed around the internet by adverts for an item we’ve searched for, or...