UK Knowledge Collection | Online safety, data privacy, and AI
Published on 7th Feb 2025
Welcome to this week's Knowledge Collection
Ofcom has published its statement on age assurance and children's access arrangements under the Online Safety Act 2023. This follows its publication in December of guidance and codes of practice on illegal content. There are tight compliance deadlines for service providers to meet: 17 March for illegal content risk assessments and 16 April for children's access assessments. Our Insights consider the measures that services must implement.
The Information Commissioner's Office (ICO) has recently given its view on data privacy compliance in "consent or pay" models, where businesses offer free access to online services conditional on accepting personalised advertising. Our Insight looks at to what extent the UK's position differs from the EU's and what this means for businesses.
The ICO has also published its response to its extensive consultation on the application of UK data protection law to generative artificial intelligence. The interim guidance will be important for organisations who develop, commission or incorporate Gen AI models. The particular data protection compliance requirements for the use of AI in the Life Sciences and Healthcare sector is the subject of a webinar next week, where our experts consider the position in the UK and EU.
Our Dipping into Data webinar series returns soon, with sessions on AI and data protection, the data law issues in processing HR-related data and developments affecting advertising and marketing.
Recent Insights
Dealmakers adapt to the new low-growth normal and international dealmaking slowly rebounds
Osborne Clarke has prepared a report analysing, from a legal perspective, the trends emerging in dealmaking in 2024 and how they are likely to pan out in 2025.
Read more >
FCA highlights anti-money laundering compliance gaps in UK capital markets
The FCA's report on money laundering through the markets addresses specific concerns in the capital markets sector, but it contains detailed guidance that is likely to be of interest and use to firms more broadly across financial services.
Read more >
UK Online Safety Act: Ofcom publishes guidance on age assurance and children's access assessments
Ofcom's statement comprises three sets of guidance and marks the first step in its implementation of the child protection provisions of the Online Safety Act 2023.
Read more >
Ofcom publishes final illegal content risk assessment guidance and codes of practice under UK Online Safety Act
While Ofcom has tried to make both the codes of practice and guidance clearer, the process for carrying out risk assessments and implementing appropriate risk mitigation measures remains complex.
Read more >
ICO delivers its verdict on 'consent or pay' in the UK
The UK has adopted a more positive tone than the EU on data privacy compliance for consent or pay models.
Read more >
ICO updates its views on using personal data in generative AI in the UK
The regulator's consultation response provides interim guidance to organisations using personal data in training and deploying generative AI models, and raises a number of issues.
Read more >
Upcoming Events
Life Sciences Academy | Data privacy and governance for use of AI in Life Sciences and Healthcare
11 February | 10:00-11:00
The development, training and utilisation of AI systems in the sector involve processing highly sensitive health data, which triggers stringent requirements under EU and UK data protection law. This webinar explores the delicate balance between regulation and innovation.
Register now >
Dipping into Data | AI and data protection
25 February | 16:00-16:30
The latest developments in the application of data protection laws to AI models and systems, including legislative changes, EDPB and ICO guidance, and enforcement actions.
Register now >
GDPR for HR | 12-month glance back and look forwards
5 March | One London Wall | 17:15-19:30
Our in-person event at our London office considers recent privacy developments and what's on the horizon for the processing of HR-related data, including AI in the workplace, data subject access requests and ICO enforcement.
Register now >
Dipping into Data | GDPR for HR
20 March | 16:00-16:30
This webinar summarises the hot topics for data-related issues in HR.
Register now >
Dipping into Data | A focus on advertising and marketing
22 April | 16:00-16:30
The series turns its spotlight on data protection developments in the world of advertising and marketing.
Register now >
