The General Data Protection Regulation (2016/679) (“EU GDPR”) allows individuals to seek compensation for “non-material” damages, such as distress or anxiety, where this results from an infringement ...

The Data Protection Act (DPA) 2018 is the UK’s data protection law. It brings the EU’s General Data Protection Regulation (GDPR) into the UK’s legal system and defines how personal data should be ...

European Commission decides UK provides adequate level of data protection, but can cancel the agreement if it sees the UK moving away from the EU model. The European Commission has granted the UK data ...

In March 2023, the UK government re-introduced its controversial Data Protection and Digital Information (DPDI) Bill to Parliament. The purpose of the legislation is to establish a UK version of the ...

Many companies are still struggling with some basic concepts of the General Data Protection Regulation, such as “controller,” “processor” and “transfer” of personal data. The European Data Protection ...

The Chartered Insurance Institute has told insurers not to use General Data Protection Regulation “as an excuse” to avoid supporting vulnerable customers.

The EU general data protection regulation (GDPR) is the strongest privacy and security law in the world. This regulation updated and modernised the principles of the 1995 data protection directive. It ...

The U.K. government has confirmed another pause to draft digital legislation under new prime minister Liz Truss’ reshuffled cabinet — saying the data reform bill it had introduced in recent months is ...

On 22 August 2025, the UK Court of Appeal issued its judgment in Farley v Paymaster. 1 The case related to the Sussex Police, whose pension scheme members’ “annual benefit statements” were posted to ...