Search results
222 results ordered by
EDPB guidelines on personal data breach notifications
Last month, the EDPB published their "Guidelines on Examples regarding Personal Data Breach Notification" (the Guidelines). These are intended to provide "practice-oriented, case-based" guidance on when it is necessary to notify the relevant supervisory authorities (the SA) under Article 33(1) of the GDPR and/or data subjects under Article 34(1) of the GDPR following a personal data breach.
Read moreThe Supreme Court hands down judgment in Lloyd v Google
In a keenly anticipated judgment that has significant ramifications for UK data protection, the Supreme Court has today overturned the Court of Appeal's decision in Lloyd v Google and restored the original order made by the High Court, refusing the claimant's application for permission to serve proceedings on Google outside the jurisdiction.
Read moreCase comment: striking out of privacy and confidence actions in the Dixons data breach case
The number of claims issued in the High Court (Media and Communications List) with a data protection element continues to increase. The rise in claim numbers can be attributed to a number of factors including: (i) individuals becoming more aware of their rights under data protection legislation, (ii) uncertainty as to whether individuals may recover damages for a loss of control of their personal data without proving material damage or distress; (iii) the abundance of specialist law firms who are prepared to act for individuals on a "no-win-no-fee" basis and (iv) the availability of After the Event ("ATE") insurance to protect a would-be claimant against adverse costs orders.
Read moreUpcoming changes to data protection legislation in Asia
The data privacy landscape in Asia is varied, complex and evolving. We are already seeing the wheels of change in motion as the data privacy laws of several Asian jurisdictions are being updated to reflect more closely the European data protection regime. This article summarises some of those changes.
Read moreSchrems II – Groundhog Day for Data Transfers
On Thursday 16 July, the Court of Justice of the European Union (“CJEU”) delivered its judgment in one of the most highly anticipated court cases in data protection, Case C-311/18 Data Protection Commissioner v Facebook Ireland Limited, Maximillian Schrems (widely referred to as “Schrems II”). This decision came almost 8 months after Advocate General Saugmandsgaard Øe published his Opinion, which albeit not binding, provided a strong indication for the CJEU's judgment.
Read moreRestarting your business and implementing Government guidance to support NHS Test and Trace
In its latest guidance on keeping workers and customers safe during COVID-19 in restaurants, pubs, bars and takeaway services (23 June 2020), the Government has recommended that businesses operating in these sectors keep a temporary record of customers and visitors for 21 days. This will assist NHS Test and Trace with requests for that data if needed.
Read moreCybersecurity and COVID-19: Opportunities for change in the face of challenge
COVID-19 is not the first and will not be the last pandemic, but it is the first one that has brought the importance of cyber resilience and adaptability in the era of global trade to the forefront of many businesses' minds.
Read moreAre you compliant with the new rules in Singapore? Asia? Beyond?
With the implementation of the GDPR in Europe (2018) and the rise of serious cyber-attacks in Asia, many APAC countries are making major changes to their data privacy laws. Navigating the various regulatory regimes can be complex particularly for companies doing business across the region and beyond.
Read moreNo Deal Brexit – implications for data and privacy law compliance
The Brexit rollercoaster ride continues. At the time of writing, the UK and EU have just announced the agreement of a new withdrawal deal but there are serious doubts about whether it will be backed by Parliament. Despite the requirements of the Benn Act, the risk of the UK leaving the EU without a deal continues to be a concern.
Read moreBrexit does not spell the end of the GDPR
The General Data Protection Regulation (the GDPR) is due to become law on 25 May 2018. As this will be before “Brexit” (Britain’s exit from the EU) takes effect, the GDPR will apply in the UK from that date.
Read moreApps: regulators globally push for data transparency
“Not in front of the telly: Warning over ‘listening’ TV”.
Read moreAI in auditing: Embracing a new age for the profession
Artificial Intelligence (AI) is a rather new concept for many (ignoring those versed in 80’s Sci-Fi movies); it’s something many don’t know much about and certainly don’t use in our day-to-day lives (or at least appreciate we are using). However, that’s not the case for everyone. Auditors have long been reaping the benefits of AI, but are auditors just scratching the surface of what AI can offer and what impact will an increased use have on their insurance requirements and claims they face?
Read moreEU AI ACT-ion stations
The EU is forging ahead with its vision for AI. With wrapping up talks on the EU AI Act between the EU governments, the Commission and the parliamentary negotiators imminent, we bring you up to date on the EU's risk based approach, the scope of the Act, a timeline, key points that will form the basis of the discussions and next steps.
Read moreWhat To Know About AI Fraudsters Before Facing Disputes
Fraudsters are quick to weaponise new technological developments and artificial intelligence is proving no exception, with AI-assisted scams increasingly being reported in the news, including most recently one using a likeness of a BBC broadcaster.
Read moreThe November 2023 AI safety summit and the UK's direction of travel
The government has confirmed that the UK AI safety summit will be held at Bletchley Park on 1 and 2 November 2023.
Read moreSports Ticker (27 April 2023) – PL gambling sponsor ban, WWE x UFC merger and Schumacher's AI interview – a speed-read of commercial updates from the sports world
In a fortnight which saw Corach Rambler win the Grand National, the UK & Ireland submit its bid to host the UEFA Euro 2028 men's tournament, and 48,000 runners take to the streets for the London Marathon, we bring you updates on Spotify's new integration with Strava and Team GB's collaboration with Birds Eye. We also feature stories on a controversial AI-generated interview with Michael Schumacher and our own Kate O'Malley's sub-three hour marathon success.
Read moreUK Government sets out proposals for regulation of AI
What are the UK Government’s plans for the future regulation of artificial intelligence (AI)?
Read moreUK government announces the launch of an AI standards hub
What does the new artificial intelligence (AI) standards hub mean for businesses seeking to develop AI technologies?
Read moreICO publishes guidance on AI decision making
How can companies comply with data regulation when using AI to make decisions affecting individuals?
Read moreAutomatic numberplate recognition: is it legal?
A report in the Guardian last week reminds readers of the strong likelihood that local police forces have tracked their movements with the use of automatic numberplate recognition (ANPR).
Read moreAre privacy injunctions too restrictive?
Has privacy law gone too far? It’s not just the editor of the Daily Mail who thinks so.
Read moreBlanket reporting restriction set aside by Court of Appeal
The Court of Appeal has discharged an order the effect of which would have been to postpone the reporting of an important criminal case for several months.
Read moreStay connected and subscribe to our latest insights and views
Subscribe Here