15 Aug, 2024 Process this: ICO issues £6 million provisional fine against processor Advanced Computer Software By Alex Buchanan Following its initial finding that software provider Advanced Computer Software Group Ltd (Advanced, now trading as OneAdvanced) failed...
16 Apr, 2024 New ICO fining guidance and an update on the ICO's enforcement approach By Alex Buchanan Richard Jeens The sheer number of cases facing potential enforcement coupled with the shifting versions of draft guidance have, in recent years, made...
19 Oct, 2023 Same same but different: welcome alignment in ICO draft Data Protection Fining Guidance By Ross O'Mahony On 2 October 2023, the ICO released for consultation new draft guidance on how it decides to issue penalty notices and calculate fines...
19 Oct, 2022 Hardly an Easylife: Key lessons from the ICO’s latest GDPR enforcement action By Alex Buchanan In early October 2022, UK catalogue retailer Easylife was issued separate financial penalties by the ICO under the PECR (£130,000) and...
12 Feb, 2021 Pay to play: Judge rules lawyers leading group action against British Airways cannot recover costs of advertising By Ross O'Mahony In group actions, publicity often pulls in more plaintiffs. TV advertising has long been used by claimant firms in the United States to...
21 Jan, 2021 When should you notify a data breach? New EDPB guidance provides practical examples By Ross O'Mahony New guidelines published on 14 January provide both practical examples of when to notify a data breach and “advisable measures” which...
14 Dec, 2020 Mass claims in the data sphere: what will 2021 bring? By Anna Broadley While there is plenty of uncertainty on the horizon, one thing we can expect in 2021 is some big developments in relation to collective...
05 Oct, 2020 Mass claims for data breaches: if Lloyd v Google doesn’t open the floodgates then perhaps the DCMS will? By Samantha Holland Giving proper effect to individuals’ data privacy rights is at the heart of the GDPR and Data Protection Act (DPA) 2018. It is therefore...
02 Oct, 2020 Fines for data privacy breaches - the ICO shows its hand (or, rather, its calculator) By Slaughter and May The ICO has published draft guidance around how it will flex its regulatory muscles when enforcing data privacy legislation in the UK....
16 Jul, 2020 Court of Justice of the European Union approves continued use of EU model clauses, but strikes down EU-US Privacy Shield By Slaughter and May The Court of Justice of the European Union (CJEU) has published its long-awaited decision in the case of Data Protection Commissioner...
15 Jul, 2019 Adtech (part 2) - the ICO says "I see you" By Slaughter and May Following my last post on the data protection challenges associated with adtech, the Information Commissioner’s Office (ICO) announced...
04 Jun, 2019 Adtech – your data to the highest bidder? By Slaughter and May Most of us will be familiar with the experience of being followed around the internet by adverts for an item we’ve searched for, or...