Q&As
Are you aware of any other provision in the Data Protection Act 2018/ UK law which makes it clear that the UK will not be classed as a 'third country'...
27th Jun
Practice notes
Artificial intelligence—explainabilityExplainability has emerged as an important component of ethical and responsible artificial intelligence (AI) and...
27th Jun
Practice notes
Internet of things (IoT)—data protection, privacy and securityThis Practice Note focuses on the data protection and privacy implications of the...
Produced in partnership with Professor
Guido Noto La Diega PhD FHEA Avv of
University of Strathclyde
27th Jun
Q&As
Following a ‘no deal’ Brexit (and assuming there is no adequacy decision in respect of the UK), might a controller in a remaining EU Member State...
27th Jun
Q&As
What is the impact of Brexit on international transfers of personal data?This Q&A looks at the impact of Brexit on cross-border transfers of...
27th Jun
Q&As
What UK laws apply to automated individual decision-making and profiling?The UK GDPRThe mostly commonly encountered UK data protection law is the...
27th Jun
Practice notes
Data (Use and Access) Act—trackerThis Practice Note tracks key developments relating to the Data (Use and Access) Act 2025 (DUAA 2025) which received...
27th Jun
Practice notes
The Data Protection Act 2018 before 1 January 2021 [Archived]ARCHIVED: This archived Practice Note provides information on the Data Protection Act...
27th Jun
Practice notes
The GDPR regime in the UK before 1 January 2021—Navigator [Archived]ARCHIVED: This archived Practice Note provides information on the EU General Data...
27th Jun
Practice notes
DPA 1998 to GDPR comparison—rights of data subjects [Archived]Brexit: On 31 January 2020, the UK ceased to be an EU Member State and entered an...
Produced in partnership with
White & Case
27th Jun
Practice notes
The Data Protection and Digital Information Bill [Archived]ARCHIVED: This archived Practice Note provides information about the Data Protection and...
27th Jun
Practice notes
Rights of data subjectsFORTHCOMING CHANGE: On 19 June 2025, the Data (Use and Access) Bill received Royal Assent, becoming the Data (Use and Access)...
27th Jun
Practice notes
Processing personal data by law enforcement and intelligence agenciesSTOP PRESS: The Data (Use and Access) Act 2025 received Royal Assent on 19 June...
Produced in partnership with Professor
Dan Hyde of
HCR Law
26th Jun
Practice notes
Offences under the Data Protection Act 2018STOP PRESS: The Data (Use and Access) Act 2025 received Royal Assent on 19 June 2025 and partially came...
Produced in partnership with
Sam Thomas of
2BR
26th Jun
Q&As
How do I calculate the time limit for responding to a data subject request?The General Data Protection Regulation, Regulation (EU) 2016/679 (GDPR)...
26th Jun
Q&As
What data/information can a data subject request from me under the right of access?The General Data Protection Regulation provides for enhanced rights...
26th Jun
Q&As
What makes a data subject access request ‘complex’?The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects in the...
26th Jun
Q&As
What should I do if I can’t access all the relevant data to respond to a data subject request because of coronavirus (COVID-19) social distancing...
26th Jun
Q&As
Refusing a data subject request—what is ‘manifestly unfounded or excessive’?The General Data Protection Regulation (GDPR) provides for enhanced rights...
26th Jun
Q&As
How long do I have to comply with a data subject request?The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects...
26th Jun