On 3 July, the CMA issued its draft guidance on the price transparency provisions in the Digital Markets, Competition and Consumers Act 2024 (DMCCA), and launched a consultation on this draft guidance (to close on 8 September...more
7/18/2025
/ Advertising ,
Consultation ,
Consumer Protection Laws ,
Digital Marketplace ,
Draft Guidance ,
Fees ,
Hidden Fees ,
Internet Retailers ,
Online Travel Vendors ,
Price Transparency ,
Regulatory Requirements ,
Transaction Fees ,
Transparency ,
UK ,
UK Competition and Markets Authority (CMA) ,
Unfair or Deceptive Trade Practices
In this Insight, first published in PLC, Anna Blest and Katharine Tulloch consider the decision in Jaevee Homes Ltd v Fincham (t/a Fincham Demolition) [2025] EWHC 942 (TCC), in which the court concluded, among other things,...more
2025 has already been a busy year in UK consumer protection law. With the CMA having issued its annual plan for 2025 / 2026 on 27 March 2025 and its new enforcement powers under the Digital Markets, Competition and Consumer...more
4/25/2025
/ Compliance Dates ,
Consumer Protection Laws ,
Enforcement Actions ,
Enforcement Guidance ,
Fake Reviews ,
Hidden Fees ,
New Regulations ,
Regulatory Requirements ,
UK ,
UK Competition and Markets Authority (CMA) ,
Unfair or Deceptive Trade Practices
The CMA' s new enforcement powers granted under the Digital Markets, Competition and Consumers Act 2024 ("DMCCA") come in to force on 6 April 2025, bringing major change to the consumer protection regime. Provisions relating...more
2025 is set to be a busy year in UK consumer protection law. With the CMA issuing its annual plan for 2025 / 2026 on 27 March 2025 and its new powers to enforce consumer protection law under the Digital Markets, Competition...more
3/28/2025
/ Compliance Dates ,
Consumer Protection Laws ,
Draft Guidance ,
Enforcement Actions ,
Enforcement Priorities ,
Fake Reviews ,
New Legislation ,
Regulatory Requirements ,
Risk Management ,
UK ,
UK Competition and Markets Authority (CMA) ,
Unfair or Deceptive Trade Practices
After a flurry of AI-related papers from the previous UK Conservative government and regulators in 2023 and the first half of 2024 (and the establishment of the UK’s AI Safety Institute and the AI Policy Directorate),...more
The 2024 CrowdStrike outage and the ransomware attack on NHS partner Synnovis hit mainstream news and highlighted the fragility of ICT supply chains and the risks posed by cyber incidents....more
1/31/2025
/ Cyber Attacks ,
Cyber Incident Reporting ,
Cybersecurity ,
Data Breach ,
Data Privacy ,
Data Protection ,
EU ,
Financial Institutions ,
Financial Services Industry ,
Popular ,
Ransomware ,
Risk Management ,
Risk Mitigation ,
UK
Businesses now have the chance to influence the new UK rules governing subscriptions contracts by responding the Government’s consultation on the new legislation (and the secondary rules which are required to implement it)....more
The FCA, PRA, and Bank of England have published their finalised critical third party (CTP) rules (and accompanying guidance) in PS24/16 Operational resilience: Critical third parties to the UK financial sector....more
11/25/2024
/ Bank of England ,
Compliance ,
Consultation ,
Final Rules ,
Financial Conduct Authority (FCA) ,
Financial Institutions ,
Financial Services Industry ,
HM Treasury ,
Prudential Regulation Authority (PRA) ,
Regulatory Requirements ,
Supply Chain ,
Technology ,
Technology Sector ,
Third-Party ,
Third-Party Risk ,
Third-Party Service Provider ,
UK
In this Insight, first published in PLC, James Clarke, Richard Shaw and Anna Blest consider the Supreme Court's decision in RTI Ltd v MUR Shipping BV [2024] UKSC 18, which confirmed that a party's obligation to exercise...more
The stakes are high for FemTech – as Benjamin Franklin noted: ‘it takes many good deeds to build a good reputation and only one bad one to lose it.’...more
7/19/2024
/ Consumer Privacy Rights ,
Data Protection ,
Data Protection Impact Assessments (DPIAs) ,
EU ,
Mobile Health Apps ,
Patient Privacy Rights ,
Personal Data ,
Regulatory Requirements ,
Risk Management ,
Sensitive Personal Information ,
Technology Sector ,
UK
The Digital Markets, Competition and Consumers Act 2024 (DMCCA) has recently received royal assent, following the announcement of the July General Election. We examine the key developments in our previous article. One very...more
On 23 May 2024, over a year since its introduction to Parliament, the DMCC Bill was rushed through before the proroguing of Parliament ahead of the July UK General Election. It received Royal Assent the following day....more
Rapid advances in artificial intelligence (AI) have overhauled business models in many sectors. With productivity in the construction industry lagging behind other sectors, does AI present opportunities to innovate and...more
5/2/2024
/ Architects ,
Artificial Intelligence ,
Construction Industry ,
Design-Build ,
General Contractors ,
Information Reports ,
Intellectual Property Protection ,
Machine Learning ,
Project Management ,
Smart Contracts ,
Standard Form Contracts ,
UK ,
Urban Planning & Development
In part one of our series "FemTech: how this growing industry can build trust, protect privacy and redress healthcare inequity… one app at a time", we take an introductory look at the industry, and offer some...more
3/11/2024
/ Data Privacy ,
Data Security ,
Data-Sharing ,
Health Care Providers ,
Information Commissioner's Office (ICO) ,
Mobile Health Apps ,
Personal Data ,
Personalized Medicine ,
PHI ,
Privacy Laws ,
Reproductive Healthcare Issues ,
UK
With adoption of generative AI tools scaling exponentially amongst content creators, companies need to be vigilant to ensure all content posted on social media platforms complies with user guidelines about AI, especially...more
2/1/2024
/ Artificial Intelligence ,
Best Practices ,
Canon ,
Content Publishing ,
Deep Fake ,
Digital Platforms ,
Disclosure Requirements ,
Online Advertisements ,
Online Platforms ,
Photographs ,
Political Advertising ,
Risk Management ,
Social Media ,
Sony ,
Terms of Service ,
Third-Party ,
TikTok ,
UK
On 12 October the UK–U.S. “data bridge” becomes operational, providing an additional, compliant route for UK-outbound transfers of personal data to U.S. organisations that are EU-U.S. Data Privacy Framework members. UK...more
10/12/2023
/ Adequacy Requirement ,
Biden Administration ,
Data Protection ,
Data Subjects Rights ,
Executive Orders ,
Federal Trade Commission (FTC) ,
International Data Transfers ,
Personal Data ,
Popular ,
Privacy Framework ,
Regulatory Oversight ,
UK
The draft of the Digital Markets, Competition and Consumers Bill (the “Bill”) was published last week, and among the many objectives, it aims to drive high standards of consumer protection. One area which has attracted much...more
On 25 April 2023, the UK Government unveiled its draft Digital Markets, Competition and Consumers Bill (the “Bill”) with its stated aim to establish a modernised, pro-competitive regime for digital markets. The Bill aims to...more
A recent case (Last Bus Ltd (trading as Dublin Coach) v Dawsongroup Bus and Coach Ltd [2022]) has provided a useful reminder of the circumstances in which commercial parties may exclude statutory implied terms, as well as...more
The Age Appropriate Design Code (“AADC”) - more commonly known as the Children’s Code - has been heralded as the world’s first code to protect children online. Compliance with the AADC became mandatory for in-scope businesses...more
In a joint letter this summer, the UK’s data protection regulator (the ICO) and the UK’s National Cyber Security Centre (the NCSC) sought to convey some key messages to the legal profession relevant to advising clients...more
8/22/2022
/ Australia ,
Client Services ,
Corporate Counsel ,
Cybersecurity ,
Cybersecurity Information Sharing Act (CISA) ,
Data Protection Authority ,
ENISA ,
FBI ,
Information Commissioner's Office (ICO) ,
NCSC ,
Popular ,
Ransomware ,
Reporting Requirements ,
Risk Mitigation ,
UK ,
UK GDPR
The UK government set out its detailed proposals for data protection reform on 18 July 2022 in the form of the Data Protection and Digital Information Bill. Compared with some of the radical ideas in the 2021 public...more
7/26/2022
/ Anonymization ,
Compliance ,
Consultation ,
Data Controller ,
Data Processors ,
Data Protection ,
Data Protection Authority ,
Data Subject Access Requests ,
EU Data Protection Laws ,
Proposed Legislation ,
UK
Since the Schrems II 2020 judgment famously “cancelled” the EU/U.S. Privacy Shield program for personal data flows from the EU to the United States, it would be an understatement to say that U.S.-bound personal data flows...more
The latest version of the Online Safety Bill was introduced in the UK’s Parliament on 16 March 2022. It now begins the process of being scrutinised, amended and debated on but it is anticipated that this is the version that...more