On 23 February 2022, the European Commission published its draft Data Act (the Act). The aim of the Act is to “ensure fairness in the digital environment, stimulate a competitive data market, open opportunities for...more
By the close of 2021, EU data protection authorities (“DPA”) had initiated investigations into a number of US tech companies operating in Europe and further investigations are set to continue. In a recent case concerning...more
1/28/2022
/ Cookies ,
Cybersecurity ,
Data Protection ,
Data Protection Authority ,
Data Security ,
Enforcement Priorities ,
EU ,
EU Data Protection Laws ,
General Data Protection Regulation (GDPR) ,
Information Technology ,
Regulatory Oversight ,
Technology Sector
Companies not established in the UK who process the personal data of UK-based individuals are required to appoint a representative in the UK pursuant to Article 27 of the UK GDPR. This requirement may become less practical...more
On 10 November 2021, the UK Supreme Court handed down its long-awaited decision in Lloyd v Google LLC. In what will be seen as a landmark decision in the fields of data protection and collective actions in the UK, the Supreme...more
Since 2018, the decision-making arsenal of the UK Information Commissioner’s Office (“ICO”) has included the Regulatory Panel, a body tasked with making independent recommendations to the Commissioner regarding proposed...more
10/21/2021
/ Big Tech ,
Cybersecurity ,
Data Management ,
Data Protection ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Personal Data ,
Personally Identifiable Information ,
Regulatory Oversight Committee ,
Risk Management ,
UK ,
UK ICO ,
UK Regulatory Reforms