The General Data Protection Regulation (2016/679) (“EU GDPR”) allows individuals to seek compensation for “non-material” damages, such as distress or anxiety, where this results from an infringement ...

European Commission decides UK provides adequate level of data protection, but can cancel the agreement if it sees the UK moving away from the EU model. The European Commission has granted the UK data ...

Many companies are still struggling with some basic concepts of the General Data Protection Regulation, such as “controller,” “processor” and “transfer” of personal data. The European Data Protection ...

What Happens to GDPR After Brexit in the UK? On January 1 2021, the UK formally and effectively left the European Union. The UK is now a “third country” under the EU’s GDPR (i.e., outside the EU). As ...

The EU general data protection regulation (GDPR) is the strongest privacy and security law in the world. This regulation updated and modernised the principles of the 1995 data protection directive. It ...

On 22 August 2025, the UK Court of Appeal issued its judgment in Farley v Paymaster. 1 The case related to the Sussex Police, whose pension scheme members’ “annual benefit statements” were posted to ...

The UK has passed the Data (Use and Access) Act 2025 (the act). This serves as an amendment to its General Data Protection Regulation and is aimed at streamlining its ...

A decision by the UK Court of Appeal to allow a claim for contravention of the European Union’s General Data Protection Regulation (GDPR) to be served against US defendants has raised questions over ...