Data Use and Access Act 2025 – Key Changes Now in Force
Important changes to UK data protection law came into force on 5th February 2026 under the Data (Use and Access) Act 2025. The good news … Read more
GDPR
What June 2026 Means for Data Protection Complaints in the UK
According to the latest ICO figures, data protection complaints are on the rise. And with new legislation on the horizon, UK businesses face a fundamental … Read more
GDPR Simplification Proposal: Reducing Burden or Weakening Protection?
In May 2025, the European Commission published a proposal that has sparked considerable debate within the data protection community. As part of its Fourth Omnibus … Read more
ICO steps up its game on cookies
After years of not really pushing cookie compliance, it seems the ICO has really got the cookie chip between its teeth of late. As well … Read more
Responsible use of AI in recruitment
When it comes to recruitment, Artificial Intelligence (AI) tools can be used for everything from scanning CVs to identify potential candidates to consider further, as … Read more
Two years of GDPR and Coronavirus: The Perfect GDPR Storm
Monday 25th May 2020 marks the two year anniversary of GDPR coming into force across the EU, including the UK. The GDPR requires you to … Read more
German data protection regulator issues €9.5m fine for security failings
The German Federal Commissioner for Data Protection and Freedom of Information (BfDI) has issued 1&1 Telecom with a €9,550,000 fine for security failings (English translation) in … Read more
ICO intends to fine BA and Marriott (£183m and £99m)
This week the ICO has published statements on its intentions to fine British Airways £183m and Marriott Hotels £99m for breaches of GDPR. But before … Read more
UK’s Data Protection Act 2018 challenged for immigration exemptions
PICUM (the Platform for International Cooperation on Undocumented Migrants) have issued a press release saying they have “filed a formal complaint to the European Commission … Read more
First GDPR fine in Poland for breach of Article 14 of the GDPR
The Polish data protection authority (UODO) has fined a company PLN943k (about £188k) for failure to inform data subjects about how they came to have … Read more