Get a good background to data protection law and view practical guidance focused on data protection matters for commercial transactions. See also our UK GDPR compliant pro-party clauses for use in commercial agreements.
Protect trade secrets and know-how using the law of confidentiality. Get information and a set of pro-party confidentiality agreements here.
View a range of trackers to enable horizon scanning and monitoring of key developments. The trackers are maintained - making them useful for keeping up-to-date and for business development.
It’s our online practical guidance product for contentious and non-contentious lawyers dealing with Data Protection, Confidential Information, Privacy, Cybersecurity and Freedom of Information issues.
The Home Office, HM Treasury, Ministry of Justice, Companies House, Serious Fraud Office and Department for Business and Trade have updated guidance...
Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to...
The Information Commissioner's Office (ICO) has issued an enforcement notice to Bristol City Council (BCC) for failing to respond to subject access...
Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to...
Dispute Resolution analysis: This case considers a jurisdictional clause in the context of service under CPR 6.33(2B)(b), which allows service out of...
Execution formalities—personal representativesThis Practice Note provides guidance on the execution of documents by personal representatives (PRs). It...
Surveillance powers of local authoritiesThe Investigatory Powers Act 2016 (IPA 2016) overhauled the legal framework governing the use of covert...
Boilerplate clauses in business-to-consumer contracts—specific clausesFORTHCOMING CHANGE: On 24 May 2024, the Digital Markets, Competition and...
Exemptions to the UK general data protection regimeFORTHCOMING CHANGE: On 19 June 2025, the Data (Use and Access) Bill received Royal Assent, becoming...
Data (Use and Access) Act—trackerThis Practice Note tracks key developments relating to the Data (Use and Access) Act 2025 (DUAA 2025) which received...
Rights of data subjects—list of precedentsThe following Precedents relating to the rights of data subjects under the United Kingdom General Data...
Data protection impact assessment—DPIA1Project overviewProject summary[Summarise the project, eg new IT system for storing and accessing personal...
Final order (database right infringement)Case No. [insert claim number]IN THE HIGH COURT OF JUSTICEBUSINESS AND PROPERTY COURTS OF ENGLAND &...
Reply (database right infringement)Case No. [insert claim number]IN THE HIGH COURT OF JUSTICEBUSINESS AND PROPERTY COURTS OF ENGLAND &...
Declaration of a director’s interests in a proposed transaction or arrangement—general noticeThe directors[Insert name of company] ([Company])[Insert...
The UK General Data Protection Regulation (UK GDPR)—NavigatorThis Practice Note serves as a reference guide to the Retained Regulation (EU) 2016/679...
Privacy law—misuse of private informationThe tort of misuse of private information is focused on ‘the protection of human autonomy and dignity—the...
Confidentiality agreement—mutualThis Agreement is made on [date]Parties1[insert name of party] [of [insert details ] OR a company incorporated in...
The Information Commissioner’s Office (ICO)The Information Commissioner’s Office (ICO) is the UK’s independent regulator designed to uphold...
The UK General Data Protection Regulation (UK GDPR)This Practice Note provides a summary of the UK GDPR regime. For a higher-level introduction to UK...
Letter of claim—breach of confidence[Insert name and address of recipient]Dear [insert organisation name],[Name of client] and confidential...
Trade secrets and confidential information—protection and enforcementThis Practice Note sets out the protection available for trade secrets and...
Introduction to the EU GDPR and UK GDPRThis Practice Note provides a high-level introduction to the EU’s General Data Protection Regulation,...
Data protection, privacy and confidential information case law trackerThis Practice Note tracks noteworthy High Court, Court of Appeal and Supreme...
Commercial use of photographs—data protection and privacy issuesThis Practice Note addresses issues affecting professional photographers taking...
Letter of claim—breach of data protection law[Insert name and address of recipient]Dear [insert organisation name],[Name of client] and breach of data...
What does IP completion day mean for Information Law? [Archived]ARCHIVED: This Practice Note has been archived and is not maintained.11 pm (GMT) on 31...
Confidential information, privacy and injunctionsThis Practice Note deals with the general principles of obtaining an injunction relating to...
The Data Protection Act 2018This Practice Note introduces the UK’s Data Protection Act 2018 (DPA 2018).For higher-level introductions to data...
any reasonably identifiable circumstance or event having a potentially adverse effect on the security of network and information systems
procedure by which some cases are transferred from a magistrates' court to the Crown Court for trial;
Consent must be obtained before cookies are placed (unless an exemption applies). In practice, this means ensuring that websites are structured so that cookies are not placed immediately when the user visits the landing page on the basis that the user will not have had the opportunity to consider the cookie information and to make an informed decision.