Get a good background to data protection law and view practical guidance focused on data protection matters for commercial transactions. See also our UK GDPR compliant pro-party clauses for use in commercial agreements.
Protect trade secrets and know-how using the law of confidentiality. Get information and a set of pro-party confidentiality agreements here.
View a range of trackers to enable horizon scanning and monitoring of key developments. The trackers are maintained - making them useful for keeping up-to-date and for business development.
It’s our online practical guidance product for contentious and non-contentious lawyers dealing with Data Protection, Confidential Information, Privacy, Cybersecurity and Freedom of Information issues.
Planning analysis: In this decision, the First-tier Tribunal (FTT) considered whether information sought under a subject access request in relation to...
Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to...
The Information Commissioner’s Office (ICO) has published new guidance to help organisations securely disclose documents containing large volumes of...
The Information Commissioner's Office (ICO) is currently seeking stakeholder feedback on its guidance regarding the use of profiling tools for online...
Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to...
Licensing intellectual property rightsLicensing IP rights—introductionDrafting IP licences can raise a number of commercial and legal issues, which...
Cybercrime—list of relevant authoritiesThe UK has one of the most web-based economies in the world, with the UK internet market valued in the order of...
Cybercrime—issues, threats and vulnerabilitiesCyber risk, like any other risk to your business, needs to be managed properly and considered a high...
Cybercrime incident managementThough taking preventative steps obviously makes good sense (see Practice Note: Cybercrime prevention), it is not...
The Information Commissioner’s Office (ICO)FORTHCOMING CHANGE: On 19 June 2025, the Data (Use and Access) Bill received Royal Assent, becoming the...
Data protection officer—DPO—job description and role profile1DPO detailsName of organisation[Insert name of organisation]Name of DPO[Insert...
Information and cybersecurity—supplier questionnaire1Background informationName of[ prospective] supplier[To be completed by customer]Address[To be...
Transfer impact assessment—personal data—EU methodology1Background informationStatus of data transfer☐ Proposed☐ ExistingPerson(s) conducting...
Particulars of claim (defamation)Claim No.: HQ [insert number]IN THE HIGH COURT OF JUSTICEKING’S BENCH DIVISIONROYAL COURTS OF JUSTICEMEDIA AND...
Website privacy policyFORTHCOMING CHANGE: On 19 June 2025, the Data (Use and Access) Bill received Royal Assent, becoming the Data (Use and...
The UK General Data Protection Regulation (UK GDPR)—NavigatorThis Practice Note serves as a reference guide to the Retained Regulation (EU) 2016/679...
Privacy law—misuse of private informationThe tort of misuse of private information is focused on ‘the protection of human autonomy and dignity—the...
Confidentiality agreement—mutualThis Agreement is made on [date]Parties1[insert name of party] [of [insert details ] OR a company incorporated in...
The Information Commissioner’s Office (ICO)The Information Commissioner’s Office (ICO) is the UK’s independent regulator designed to uphold...
The UK General Data Protection Regulation (UK GDPR)This Practice Note provides a summary of the UK GDPR regime. For a higher-level introduction to UK...
Letter of claim—breach of confidence[Insert name and address of recipient]Dear [insert organisation name],[Name of client] and confidential...
Trade secrets and confidential information—protection and enforcementThis Practice Note sets out the protection available for trade secrets and...
Introduction to the EU GDPR and UK GDPRThis Practice Note provides a high-level introduction to the EU’s General Data Protection Regulation,...
Data protection, privacy and confidential information case law trackerThis Practice Note tracks noteworthy High Court, Court of Appeal and Supreme...
Commercial use of photographs—data protection and privacy issuesThis Practice Note addresses issues affecting professional photographers taking...
Letter of claim—breach of data protection law[Insert name and address of recipient]Dear [insert organisation name],[Name of client] and breach of data...
What does IP completion day mean for Information Law? [Archived]ARCHIVED: This Practice Note has been archived and is not maintained.11 pm (GMT) on 31...
Confidential information, privacy and injunctionsThis Practice Note deals with the general principles of obtaining an injunction relating to...
The Data Protection Act 2018This Practice Note introduces the UK’s Data Protection Act 2018 (DPA 2018).For higher-level introductions to data...
There must be a clear and affirmative action by the user. Deeming that consent has been provided, for example by a user continuing to use a website (regardless of whether they been warned of the presence of cookies), is not sufficient. Pre-ticked boxes, sliders that are set to ‘on’, or any equivalent mechanism that is intended to provide consent by default is not adequate.
the formal records kept by a magistrates' court;
an order made against a child or young person who has been convicted of an offence, requiring him or her to make specific reparations to the victim or to the community at large;