When it comes to cyber security, focussing solely on the GDPR can be dangerous. Liability for cyber security issues can arise in numerous ways. Securing personal data is not enough. Even in the absence of a personal data breach, companies may face disciplinary action or fines from other regulators (and...

The ICO's announcement yesterday (9 July 2019) that it intends to fine Marriott International £99.3m will send shock waves to boards across Europe. It comes only a day after the ICO's announcement that it intends to fine British Airways £183.39m (as covered in our Insight). The intended fine relates to...

The European Commission has published (19 February 2021) draft decisions on the adequate protection of personal data by the UK under both the EU's General Data Protection Regulation (EU GDPR) and the Law Enforcement Directive. Publication of the drafts is only the first step in the adequacy process: the opinion...

The EU-UK Trade and Cooperation Agreement The TCA, the treaty that governs trade in goods and services between the EU and the UK, remains only provisional in its application. The European Parliament has delayed its consideration of the TCA in order to express disapproval of the UK's extension of grace...

As the Covid-19 pandemic has continued to surge throughout the world, the impact on individuals – their lives and livelihoods – and on how business has been transacted throughout this period has been significant and is likely to be long-lasting. For businesses in the UK adapting to their workforces working...

The long-awaited PRC Personal Information Protection Law (the PIPL), China’s equivalent of the EU's General Data Protection Regulation (GDPR), was finally passed by the Standing Committee of the People’s Republic of China on 20 August 2021, and will enter into force on 1 November 2021. The new law is composed...

With regulation developing in US, China and India, European businesses with an appetite for global growth cannot ignore the data law landscape in other markets

The UK government has released (17 June 2022) its response to the consultation, "Data: a new direction", on the existing data protection regime in the UK. The response sets out the government's proposed post-Brexit reforms to the UK's data protection regime, which is currently based on the General Data Protection...

What is MaaS and what are the legal implications? Listen to the episode below and subscribe for more. Mobility as a service (MaaS) may mean different things to different people but it is based essentially upon the provision of a tailored, simplified and convenient multimodal travel solution from a mobile...

Data subject access requests (DSARs) often arise in the course of a termination of employment or a grievance procedure. A failure to respond to DSARs can leave businesses open to a higher level of administrative fines under the General Data Protection Regulation (GDPR): €20 million or up to 4% of...