Data protection, privacy and confidential information case law tracker
Data protection, privacy and confidential information case law tracker

The following Commercial guidance note provides comprehensive and up to date legal information covering:

  • Data protection, privacy and confidential information case law tracker
  • Cases

Brexit: On 31 January 2020, the UK ceased to be an EU Member State and entered an implementation period, during which it continues to be subject to EU law. During this period, the GDPR applies in the UK and the UK generally continues to be treated as an EU (and EEA) state for EEA and UK data protection law purposes. Any references to EEA or EU states in this Practice Note should therefore be read to also include the UK until the end of the implementation period. For further guidance on that period, its duration and the data protection laws that are anticipated to apply after the end of it, see Practice Note: Brexit—implications for data protection.

This Practice Note tracks noteworthy High Court, Court of Appeal, Supreme Court and Court of Justice decisions related to data protection, ePrivacy, misuse of private information and confidential information handed down within the last year.

For an introduction to the data protection regime under the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Data Protection Act 2018 (DPA 2018), see: GDPR toolkit and Practice Note: The Data Protection Act 2018. For an introduction to the previous data protection regime under the Data Protection Act 1998 (DPA 1998), see: Data protection regime—DPA 1998—overview [Archived].

For introductions to ePrivacy, misuse of private information and confidential information, see: