Data protection

Rise of the regulatory monster: Roderick Ramage takes aim at the General Data Protection Regulation

MLex has published a new special report entitled ‘Is the GDPR doing its job?’, which looks at the trends in General Data Protection Regulation, Regulation (EU) 2016/679 (GDPR) enforcement across the 27 EU Member States, the UK, and three EEA countries since it came into force on 25 May 2018. 

The appointment of Liz Truss has postponed the second reading of the complex Data Protection and Digital Information Bill, which had been due to take place this week

‘Minimal’ activity such as offering subscriptions in the UK is enough to make a US online magazine subject to the General Data Protection Regulations (GDPR), the Court of Appeal has held in a landmark case

Former New Zealand Privacy Commissioner John Edwards has been confirmed as the new Information Commissioner

Lawyers have welcomed the European Commission’s decision that UK data protection standards are ‘adequate’―however, weakening standards could lead to immediate revocation

Partner Mei-Ling Huang announced as new chair

On 26 May 2021 the Court of Appeal unanimously ruled in R (on the application of Open Rights Group and another) v Secretary of State for the Home Department and another (Liberty and another intervening) [2021] EWCA Civ 800 that the so-called 'immigration exemption' in paragraph 4 of Schedule 2 to the Data Protection Act 2018, which restricts certain data subject rights, was incompatible with Article 23 of the EU's General Data Protection Regulation (EU GDPR). 

The UK’s mass surveillance regime breaches the right to privacy and freedom of expression, the European Court of Human Rights has held, in a landmark ruling.

The COVID-19 pandemic has shone a spotlight on cyber security risks for law firms—the time to act on them is now, says Frances McLeod