News & Analysis as of

European Union › Information Commissioner's Office (ICO) › Personal Data

The European Union is an economic and political partnership comprised of 27 nations within the Eurozone. The EU was established in 1948 to promote stability and cooperation among member states in the aftermath of... more +
The European Union is an economic and political partnership comprised of 27 nations within the Eurozone. The EU was established in 1948 to promote stability and cooperation among member states in the aftermath of WWII. The EU maintains a common currency as well as several intranational institutions, including the European Parliament and the European Commission. less -
Latham & Watkins LLP

UK Adequacy Holds Firm Under New Data (Use and Access) Act 2025

Latham & Watkins LLP on

The DUAA introduces several reforms to UK data protection law, but their implications are relatively limited in practice. The Data (Use and Access) Act 2025 (the DUAA) was enacted on 19 June 2025 and amends rather than...more

Paul Hastings LLP

ICO Annual Report Provides Insight Into Data Protection Risks for Businesses

Paul Hastings LLP on

The UK Information Commissioner’s Office’s (the ICO’s) latest Annual Report summarises its accomplishments and priorities, including last year’s enforcement actions. Based on our review of the report, we see the ICO focusing,...more

Goodwin

The Data Shift: UK Sets a New Course With 2025 Data (Use and Access) Act

Goodwin on

The Data (Use and Access) Bill passed both Houses of UK Parliament and received Royal Assent on 19 June 2025, now becoming the Data (Use and Access) Act 2025 (“DUA Act”). This is the final iteration of the Data Protection and...more

Latham & Watkins LLP

Kingdom of Saudi Arabia Issues New Data Transfer Risk Assessment Guidelines

Latham & Watkins LLP on

The guidelines specify the requirements for data controllers to conduct risk assessments related to the transfer or disclosure of personal data outside the Kingdom. ...more

A&O Shearman

English judgment shines light on ICO investigation into Cambridge Analytica

A&O Shearman on

On March 23 2018, the Information Commissioner’s Office (ICO) executed a warrant to enter and search the offices of Cambridge Analytica. The purpose of the search was to access records concerning its alleged use of personal...more

Latham & Watkins LLP

EDPB Issues Guidelines on Processing Personal Data for Legitimate Interests Purposes

Latham & Watkins LLP on

The draft guidelines provide further clarification to the EDPB’s interpretation of legitimate interests, and suggest a potential divergence with the UK ICO....more

A&O Shearman

When does payment card data qualify as personal data? English Court gives new guidance on this question

A&O Shearman on

The Upper Tribunal (UT) has overturned a decision by the First-tier Tribunal (FTT), relating to a Monetary Penalty Notice (MPN) that was issued by the Information Commissioner (ICO). All of this stemmed from a cyber-attack...more

A&O Shearman

EU and UK Data Protection Regulatory Trends so far in 2024: a focus on employee surveillance and biometric in the workplace

A&O Shearman on

This series of blogs rounds up some of the key data protection regulatory trends we have seen during 2024, focused on the EU and UK. 2024 has seen behavioural advertising and cookies continue to dominate the agenda of data...more

A&O Shearman

EU and UK Data Protection Regulatory Trends so far in 2024: a focus on AI

A&O Shearman on

This series of blogs rounds up some of the key data protection regulatory trends we have seen during 2024, focused on the EU and UK. 2024 has seen behavioural advertising and cookies continue to dominate the agenda of data...more

Latham & Watkins LLP

UK US Data Bridge Practical Tips for Implementation and Compliance

Latham & Watkins LLP on

Latham & Watkins and Privacy Laws & Business recently co-hosted a webinar looking back on the first eight months since the UK-US Data Bridge entered into force. Speakers from the UK Information Commissioner’s Office (ICO) and...more

Constangy, Brooks, Smith & Prophete, LLP

UK government establishes UK-U.S. Data Bridge

Constangy, Brooks, Smith & Prophete, LLP on

The United Kingdom has announced its decision to establish the UK-U.S. Data Bridge. The UK-U.S. Data Bridge will allow UK businesses and organizations to transfer personal data to organizations in the United States that have...more

Orrick, Herrington & Sutcliffe LLP

Data Subject Access Requests from Employees: What UK Employers Need to Know About New ICO Guidance

Orrick, Herrington & Sutcliffe LLP on

A challenging economic situation is prompting contentious staffing decisions. The rise of hybrid work has led employers to generate more information in more places about employees. Against this backdrop, more employees are...more

Orrick, Herrington & Sutcliffe LLP

ICO Issues Updated Guidance on International Data Transfers

Orrick, Herrington & Sutcliffe LLP on

On 17 November 2022, the Information Commissioner's Office (“ICO”) announced that it has updated its guidance on international data transfers. In its announcement, the ICO outlined its intention to “clarify an alternative...more

Epiq

International Data Transfers: Knowing Which Rules Apply to Comply

Epiq on

While countries all over the globe continue to make data privacy strides, comparing similarities and differences between the EU and U.K. is important in light of Brexit. It is also crucial to know the differences as they...more

ArentFox Schiff

Colorado Attorney General Seeks Rulemaking Comments for the Colorado Privacy Act

ArentFox Schiff on

Colorado Attorney General Seeks Rulemaking Comments for the Colorado Privacy Act - With the Notice of Proposed Rulemaking set for fall 2022, Colorado’s Attorney General office is currently inviting preliminary comments for...more

Orrick, Herrington & Sutcliffe LLP

8 Things You Need to Know About United Kingdom (UK) International Data Transfers

Orrick, Herrington & Sutcliffe LLP on

Update: UK international data transfer agreement and UK addendum to the EU standard contractual clauses now in force In February, the Information Commissioner’s Office (“ICO”), the United Kingdom (UK) data protection...more

Hogan Lovells

ICO consults on new guidance for conducting scientific research under the UK GDPR

Hogan Lovells on

Research and development, innovation, product and service improvement, AI design and deployment...these are key commercial drivers for the successful modern business. They also underpin technological, medicinal, and other...more

Ogletree, Deakins, Nash, Smoak & Stewart,...

UK Data Transfer Mechanisms: Key Takeaways for Employers

Ogletree, Deakins, Nash, Smoak & Stewart,... on

On 2 February 2022, the UK Information Commissioner’s Office (ICO) published the final form of its much-anticipated new International Data Transfer Agreement (IDTA) and the International Data Transfer Addendum to the European...more

Ogletree, Deakins, Nash, Smoak & Stewart,...

UK Government’s Consultation on Data Protection and Privacy: Information Commissioner’s Office Issues Response

Ogletree, Deakins, Nash, Smoak & Stewart,... on

The Information Commissioner’s Office (ICO) recently released its response to the UK government consultation, ‘Data: A new direction’. The consultation was conducted by the Department for Digital, Culture, Media and Sport...more

Butler Snow LLP

The European Commission’s New Standard Contractual Clauses: Transferring Personal Data from the EU (A Long Overdue “Take Two”)

Butler Snow LLP on

On June 4, 2021, the European Commission adopted a new, highly anticipated set of standard contractual clauses to facilitate the transfer of personal data out of the European Economic Area (“EEA”) in accordance with the...more

Orrick, Herrington & Sutcliffe LLP

With the September 27 Deadline Looming, 7 Key Things to Know About Europe’s New Standard Contractual Clauses (SCCs)

Orrick, Herrington & Sutcliffe LLP on

On June 7, 2021, the European Commission (Commission) published its long-awaited Implementing Decision adopting standard contractual clauses for the transfer of personal data to third countries referred to as the new Standard...more

Faegre Drinker Biddle & Reath LLP

Data Transfers: U.K. Proposes New Tools and Approach

Faegre Drinker Biddle & Reath LLP on

The United Kingdom Information Commissioner’s Office (ICO) recently launched a consultation regarding the transfer of personal data outside of the U.K. The ICO is seeking comment on its draft international data transfer...more

Goodwin

Europe OPTS for Pragmatism with New SCCS and ICO Opens Consultations on UK SCCS — What Companies Need to Do Next

Goodwin on

The dust has settled on the new EU standard contractual clauses for cross-border data transfers (“New SCCs”), but confusion still reins on how the New SCCs cover data transfers and what companies need to do to take advantage...more

BCLP

UK launches consultation on international data transfers - a first glimpse of the “UK SCCs”

BCLP on

On 11 August, the UK Information Commissioner’s Office launched a consultation paper on “International transfers under UK GDPR”. The documents released alongside the paper include a draft International Data Transfer Agreement...more

McGuireWoods LLP

CNPD vs. Amazon, the largest GDPR fine on record – what do we know so far?

McGuireWoods LLP on

Amazon’s financial records have revealed that the Luxembourg data protection supervisory authority, the Commission Nationale pour la Protection des Données (“CNPD”), is fining the retailer’s European arm (Amazon Europe Core...more

63 Results
 / 
View per page
Page: of 3
Next »

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up Log in
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide