News & Analysis as of

Data Processors Data Protection Information Commissioner's Office (ICO)

Goodwin

The Data Shift: UK Sets a New Course With 2025 Data (Use and Access) Act

Goodwin on

The Data (Use and Access) Bill passed both Houses of UK Parliament and received Royal Assent on 19 June 2025, now becoming the Data (Use and Access) Act 2025 (“DUA Act”). This is the final iteration of the Data Protection and...more

Epiq

International Data Transfers: Knowing Which Rules Apply to Comply

Epiq on

While countries all over the globe continue to make data privacy strides, comparing similarities and differences between the EU and U.K. is important in light of Brexit. It is also crucial to know the differences as they...more

Latham & Watkins LLP

UK Data Protection Bill: Examination of Key Provisions (Part 2)

Latham & Watkins LLP on

Areas of interest include anonymisation, “recognised legitimate interests”, and the ICO’s role. The UK Data Protection and Digital Information Bill (the Bill) sets out the government’s proposals for reforming the current...more

Latham & Watkins LLP

UK Data Protection Bill: Overview of Proposed Changes (Part 1)

Latham & Watkins LLP on

The bill would largely build on the UK data protection regime’s EU GDPR-style framework, albeit with UK-specific provisions. The UK government introduced the Data Protection and Digital Information Bill (the Bill) to...more

Skadden, Arps, Slate, Meagher & Flom LLP

Privacy & Cybersecurity Update - May 2022

In this month’s Privacy & Cybersecurity Update, we review Connecticut’s passage of a comprehensive privacy law (making it the fifth state to do so), the newly enacted federal Better Cybercrime Metrics Act, New York’s new law...more

A&O Shearman

Data: A new direction?

A&O Shearman on

As the UK looks to find a new and post-Brexit direction, the UK Government is setting its agenda for developments in regulation, particularly when it comes to technology, data and innovation. We have seen the recent...more

Goodwin

Europe OPTS for Pragmatism with New SCCS and ICO Opens Consultations on UK SCCS — What Companies Need to Do Next

Goodwin on

The dust has settled on the new EU standard contractual clauses for cross-border data transfers (“New SCCs”), but confusion still reins on how the New SCCs cover data transfers and what companies need to do to take advantage...more

Latham & Watkins LLP

New Standard Contractual Clauses and Final EDPB Recommendations - Next Steps

Latham & Watkins LLP on

Companies have three months to prepare to use the latest standard contractual clauses for new data transfers, and 18 months to migrate existing arrangements. On 4 June 2021, the European Commission released its...more

BCLP

Who, Sir? Me, Sir? Appointing GDPR Representatives in the UK and the EU

BCLP on

This article explores the topic of appointed representatives under Article 27 of the GDPR. What are they? When do you need one? How is regulatory enforcement starting to play out in the EU and in the UK on this issue?...more

Goodwin

Déjà Vu All Over Again: EU High Court Invalidates Privacy Shield For EU – U.S. Data Transfers

Goodwin on

Today (July 16) Europe’s highest court, the Court of Justice of the European Union (CJEU), in the case of Data Protection Commissioner v Facebook Ireland and Maximillian Schrems (Schrems II) invalidated the EU–U.S. Privacy...more

Katten Muchin Rosenman LLP

UK ICO Issues Guidance on COVID -19 Data Protection Considerations

The Information Commissioner's Office (ICO) has issued a statement confirming that data protection will not stop the need for businesses to share information quickly, or adapt the way they work to face the unprecedented...more

Orrick, Herrington & Sutcliffe LLP

Privacy in the Time of Coronavirus

Over the past few days, commentators and, in some cases, government ministers have stated that the GDPR (and by association the Data Protection Act 2018) are preventing some organisations from providing a comprehensive...more

Akin Gump Strauss Hauer & Feld LLP

AI Auditing Framework – Draft ICO Guidance Published for Consultation

On February 19, 2020, the Information Commissioner’s Office (ICO), the data protection regulator in the United Kingdom, launched a consultation on its draft guidance on the artificial intelligence (AI) auditing framework. ...more

Fox Rothschild LLP

UK ICO Provides Guidance On Processing Sensitive Information

Fox Rothschild LLP on

The United Kingdom's Information Commissioner's Office has updated its guidance on Special Category Data (Article 9 General Data Protection Regulation). Key takeaways: Genetic Data- Genetic analysis that includes enough...more

Akin Gump Strauss Hauer & Feld LLP

Continuing GDPR Pressure for Adtech

Data protection authorities (DPAs) in the European Union (EU) continue to scrutinize practices in the adtech sector for compliance with the EU’s General Data Protection Regulation (GDPR) and local data protection and...more

Fox Rothschild LLP

GDPR Guidance: Data Controllers Are Responsible For Processors’ Competency

Fox Rothschild LLP on

The UK Information Commissioner’s Office (ICO) has issued a new guidance on the liabilities of Controllers and Processors, advising that the Controller is responsible for assessing that its Processor is competent to process...more

BakerHostetler

New Guidance on GDPR Data Processing Contracts Published by the UK ICO

BakerHostetler on

The U.K. Information Commissioner’s Office (ICO) recently published guidance on contracts between controllers and processors. This new guidance provides a more in-depth and detailed discussion of the key issues than did a...more

Fox Rothschild LLP

The ICO Speaks: New Guidance On Contracts, Data Controllers And Processors

Fox Rothschild LLP on

The UK Information Commissioner’s Office (ICO) has issued several new guidance documents on Data Controllers, Data Processors and the interaction among them....more

Pillsbury - Global Sourcing Practice

The ICO’s Draft Guidance Leaves Unanswered Questions on Processor Obligation to Notify Infringing Instructions

Those of us who have been grappling with how best to approach GDPR compliance in outsourcing and other commercial contracts will be all too familiar with Article 28 of the GDPR, which sets out a number of minimum contract...more

19 Results
 / 
View per page
Page: of 1

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide