News & Analysis as of July 24, 2025

European Union › UK GDPR

+ Follow

The European Union is an economic and political partnership comprised of 27 nations within the Eurozone. The EU was established in 1948 to promote stability and cooperation among member states in the aftermath of WWII. The EU maintains a common currency as well as several intranational institutions, including the European Parliament and the European Commission. less -

ICO Annual Report Provides Insight Into Data Protection Risks for Businesses

Paul Hastings LLP on 7/22/2025

The UK Information Commissioner’s Office’s (the ICO’s) latest Annual Report summarises its accomplishments and priorities, including last year’s enforcement actions. Based on our review of the report, we see the ICO focusing,...more

The UK’s New Amendments to the UK GDPR Become Law and Get a Nod from the EU. What happens now?

Seyfarth Shaw LLP on 6/26/2025

The UK’s Data (Use and Access) Act received Royal Assent last Thursday, June 19th, bringing into law some significant changes to the country’s post Brexit data protection framework, among an array of other, related rules (on...more

EU-UK Data Transfers: Adequacy Decision Extended, But Uncertainty Remains

King & Spalding on 6/9/2025

On May 14, 2025, the European Data Protection Board ("EDPB") issued a favorable opinion on granting a six-month extension to the existing adequacy decisions for the UK, following a formal proposal from the European...more

Google’s U-Turn on Device Fingerprinting: ICO’s Response and Subsequent Guidance

DLA Piper on 1/31/2025

In a December, the Information Commissioner’s Office (ICO) responded to Google’s decision to lift a prohibition on device fingerprinting (which involves collecting and combining information about a device’s software and...more

UK AI: existing regulators take the lead

A&O Shearman on 11/22/2024

As further initiatives come in to play and legislation is on the horizon, existing regulators (such as the ICO, CMA, Ofcom and FCA) continue to press on with their approach to AI regulation, including through the Digital...more

UK AI policy developments and where next

A&O Shearman on 11/22/2024

As the EU presses ahead with its implementation of the AI Act, the UK continues to develop its evolutionary approach to AI policy and regulation. As the new Labour Government starts to implement its perspective and ahead of a...more

UK Government Introduces New Data (Use and Access) Bill

King & Spalding on 11/13/2024

On October 23, the UK Government’s House of Lords had its first reading of a new proposed data protection bill, the Data (Use and Access) Bill (“DUA Bill”), as sponsored by the Department of Science, Innovation, and...more

When does payment card data qualify as personal data? English Court gives new guidance on this question

A&O Shearman on 11/6/2024

The Upper Tribunal (UT) has overturned a decision by the First-tier Tribunal (FTT), relating to a Monetary Penalty Notice (MPN) that was issued by the Information Commissioner (ICO). All of this stemmed from a cyber-attack...more

Privacy and AI in Israel and worldwide: a look to 2024

Barnea Jaffa Lande & Co. on 1/29/2024

During 2023, privacy protection and artificial intelligence regulation continued apace and their implications continued to be a major focus in Israel and around the world. In Israel, this was reflected in a number of...more

Data Privacy & Protection – Swimming into the Unknown

NAVEX on 1/29/2024

If you feel like every day you wake up to a new data privacy law or piece of guidance, you’re not dreaming. Regulation and rulemaking are happening faster than ever before. The complexities relating to ethical data usage are...more

Privacy Speaks: A clearer view?

BCLP on 1/19/2024

Clearview AI Inc's successful challenge to the ICO’s £7.5 million fine focused on the limits of the UK GDPR’s jurisdictional reach, succeeding on the grounds that Clearview’s processing activities were outside the scope of...more

Automated decision making is under scrutiny in the EU and how is it addressed in other jurisdictions

A&O Shearman on 1/15/2024

Alongside the recent CJEU judgment on automated decision making in Schufa (see the Allen & Overy blog ) there are a range of developments related to ADM in other jurisdictions. UK developments - The UK Parliament is...more

Data transfers update: New data bridge available to facilitate UK-US data transfers from 12 October 2023 - despite “qualified”...

Eversheds Sutherland (US) LLP on 9/26/2023

Why should I read this? A new UK-US data bridge will be available to businesses in the UK looking to transfer personal data to organizations in the United States certified under the UK Extension to the EU-US Data Privacy...more

Data bridge over the Atlantic

Womble Bond Dickinson on 9/26/2023

On September 21, 2023, the UK Secretary of State for Science, Innovation and Technology laid before Parliament regulations that will operate to significantly simplify the process for UK businesses to transfer personal data to...more

Data Privacy: What Nonprofits Need to Know in the United States, EU and UK, and China

Pillsbury Winthrop Shaw Pittman LLP on 7/6/2023

From long-standing laws to incoming legislation, global nonprofits must understand the requirements and prepare for scrutiny in their handling of personal data. U.S. privacy regulations are currently a complex framework of...more

Data Subject Access Requests from Employees: What UK Employers Need to Know About New ICO Guidance

Orrick, Herrington & Sutcliffe LLP on 6/15/2023

A challenging economic situation is prompting contentious staffing decisions. The rise of hybrid work has led employers to generate more information in more places about employees. Against this backdrop, more employees are...more

CJEU Sets High Bar for Responses to Data Subject Access Requests

Latham & Watkins LLP on 5/5/2023

Organisations must provide individuals with information on the specific recipients of their data upon request. The Court of Justice of the European Union (CJEU) has ruled that organisations must generally disclose the...more

Doing Fintech Business in the UK: Regulatory Q&A for US and Other Non-UK Businesses

Goodwin on 5/1/2023

With more fintech’s looking to expand their businesses internationally, it can be daunting to navigate varying regulations across borders. This article focuses on regulations in the United Kingdom....more

UK Data Protection: Deviation from the Strict EU Regime

King & Spalding on 5/1/2023

Data is yet again at the top of the agenda in the UK Parliament. Seeking to balance the need for the protection of privacy of data and enabling data-driven growth, the UK Department for Science, Innovation and Technology...more

The UK Moves to Reform the UK GDPR Aims to be Both Business Friendly and Adequate in the Eyes of the EU

Benesch on 3/22/2023

While the reform is a long way away from a certainty, it represents a departure of the UK from the EU’s strict adherence and adoption of the General Data Protection Regulation which came into effect in 2018. Earlier this...more

UK GDPR Restrictions on Personal Data Transfers to South Korea are Lifted

WilmerHale on 12/8/2022

In November 2022, the UK Government announced that it had put in place UK GDPR ‘adequacy regulations’ in respect of South Korea (the Republic of Korea (“ROK”)). These new regulations will allow UK based organisations to...more

EU-U.S. and UK-U.S. Data Transfer Deals Advance with White House Executive Order

Proskauer on Privacy on 10/20/2022

A new legal mechanism to allow for transfers of personal data between the EU and the U.S. is now advancing after an October 7th, 2022 Executive Order was issued by U.S. President Biden (the “Executive Order”). The new...more

Deadlines for EU and UK Standard Contractual Clauses Approaching

Sheppard Mullin Richter & Hampton LLP on 9/14/2022

Companies transferring personal data out of the EU or UK are reminded of key deadlines approaching for the contracts that govern these transfers. When the European Commission adopted the new Standard Contractual Clauses...more

UK’s Data Protection Reform Proposals Show Distinct Divergence from EU Rules

Faegre Drinker Biddle & Reath LLP on 8/4/2022

The UK government has recently published proposals to amend UK data protection legislation with moves towards divergence from EU rules and regulation following the UK’s decision to leave the EU (“Brexit”). The Data Protection...more

Protecting Consumer’s Data Through Privacy by Design

Ankura on 3/31/2022

By the end of 2023, privacy laws will protect the personal information of 75 percent of the world’s population, and with the rise of cybercrime across the globe, data protection is top of mind for organizations that manage...more

31 Results

View per page

Page: of 2

European Union › UK GDPR

"My best business intelligence, in one easy email…"