Data protection

Data protection is paramount in today's digital age, requiring legal experts to stay ahead of evolving regulations and technologies. This topic provides practical insights into compliance, risk management, and safeguarding personal data, empowering practitioners to navigate the complexities of data protection law effectively.

View Information Law by content type:

News
Practice notes
Precedents
Q&As

Sub Topics We Cover

Accountability, governance and compliance Data breaches, sanctions and enforcement Data protection in specific activities Data protection regime Data protection regime—DPA 1998 Data sharing and transactions EU GDPR regime International transfers Rights of data subjects Thought leadership—Data Protection Intelligence Group Transparency, privacy policies and notices

Latest Information Law News

NCSC publishes Five Eyes cyber security agencies’ statement on AI cyber risk

NCSC publishes Five Eyes cyber security agencies’ statement on AI cyber risk

The National Cyber Security Centre (NCSC) has published a joint statement by the Five Eyes cyber security agencies urging organisational leaders to...

No remedy under section 1 of the Protection from Harassment Act 1997 where impact is felt abroad (Rzucek v Vinnicombe)

No remedy under section 1 of the Protection from Harassment Act 1997 where impact is felt abroad (Rzucek v Vinnicombe)

TMT analysis: The High Court held that no remedy was available under section 1 of the Protection from Harassment Act 1997 (PHA 1997) where the...

Court of Appeal confirms requirements for pleading damages in reputational harm caused by publication abroad (Ogunkami v Chia)

Court of Appeal confirms requirements for pleading damages in reputational harm caused by publication abroad (Ogunkami v Chia)

TMT analysis: The Court of Appeal has dismissed an appeal against an award of damages for libel and harassment, holding that the claimant had failed...

UK Energy Sector Cyber Security Strategy—A news analysis commentary

UK Energy Sector Cyber Security Strategy—A news analysis commentary

Energy analysis: Sam De Silva (partner) and Rob Grant (senior associate) at CMS consider the new UK Energy Sector Cyber Security Strategy published by...

Featured Information Law content

The UK General Data Protection Regulation (UK GDPR)—Navigator [Archived]

The UK General Data Protection Regulation (UK GDPR)—Navigator [Archived]

The UK General Data Protection Regulation (UK GDPR)—NavigatorThis Practice Note serves as a reference guide to the Retained Regulation (EU) 2016/679...

Privacy law—misuse of private information

Privacy law—misuse of private information

Privacy law—misuse of private informationThe tort of misuse of private information is focused on ‘the protection of human autonomy and dignity—the...

Confidentiality agreement—mutual

Confidentiality agreement—mutual

Confidentiality agreement—mutualThis Agreement is made on [date]Parties1[insert name of party] [of [insert details ] OR a company incorporated in...

The Information Commissioner’s Office (ICO)

The Information Commissioner’s Office (ICO)

The Information Commissioner’s Office (ICO)The Information Commissioner’s Office (ICO) is the UK’s independent regulator designed to uphold...

Practice notes

The UK General Data Protection Regulation (UK GDPR)

The UK General Data Protection Regulation (UK GDPR)This Practice Note provides a summary of the UK GDPR regime. For a higher-level introduction to UK...
Read More >
30th May
Q&As

Are recorded conversations between lay people legal and can they be used in legal proceedings?

Are recorded conversations between lay people legal and can they be used in legal proceedings?The law relating to the recording of conversations...
Read More >
Produced in partnership with Chris Bryden of 4 King’s Bench Walk
13th Oct
Q&As

Is it standard for a non-disclosure agreement to contain liability limitations (eg for loss of information and/or breach) and what arguments could be used to seek to remove any such provisions added by another party?

Is it standard for a non-disclosure agreement to contain liability limitations (eg for loss of information and/or breach) and what arguments could be...
Read More >
2nd Jun
Q&As

In the context of confidentiality agreements, what constitutes an ‘indirect’ disclosure? Is it necessary to specifically use the word ‘indirect’ to capture all types of disclosure by the main disclosing party?

In the context of confidentiality agreements, what constitutes an ‘indirect’ disclosure? Is it necessary to specifically use the word ‘indirect’ to...
Read More >
Produced in partnership with Michelle Last of Keystone law
30th May
Precedents

Letter of claim—breach of confidence

Letter of claim—breach of confidence[Insert name and address of recipient]Dear [insert organisation name],[Name of client] and confidential...
Read More >
30th May
Practice notes

Trade secrets and confidential information—protection and enforcement

Trade secrets and confidential information—protection and enforcementThis Practice Note sets out the protection available for trade secrets and...
Read More >
Produced in partnership with Will Smith of Anglo American
30th May
tag iconIn-house
Practice notes

Introduction to the EU GDPR and UK GDPR

Introduction to the EU GDPR and UK GDPRThis Practice Note provides a high-level introduction to the EU’s General Data Protection Regulation,...
Read More >
30th May
tag iconIn-house
Practice notes

Data protection, privacy and confidential information case law tracker

Data protection, privacy and confidential information case law trackerThis Practice Note tracks noteworthy High Court, Court of Appeal and Supreme...
Read More >
30th May
Practice notes

Commercial use of photographs—data protection and privacy issues

Commercial use of photographs—data protection and privacy issuesThis Practice Note addresses issues affecting professional photographers taking...
Read More >
2nd Jun
Precedents

Letter of claim—breach of data protection law

Letter of claim—breach of data protection law[Insert name and address of recipient]Dear [insert organisation name],[Name of client] and breach of data...
Read More >
2nd Jun
Practice notes

What does IP completion day mean for Information Law? [Archived]

What does IP completion day mean for Information Law? [Archived]ARCHIVED: This Practice Note has been archived and is not maintained.11 pm (GMT) on 31...
Read More >
30th May
Practice notes

Confidential information, privacy and injunctions

Confidential information, privacy and injunctionsThis Practice Note deals with the general principles of obtaining an injunction relating to...
Read More >
30th May
Practice notes

The Data Protection Act 2018

The Data Protection Act 2018This Practice Note introduces the UK’s Data Protection Act 2018 (DPA 2018).For higher-level introductions to data...
Read More >
30th May
tag iconIn-house tag iconBrexit tag iconData Protection Toolkit
Q&As

Is someone’s voice personal identifiable information under GDPR? If someone is to do a voice over for content of some training for a business, would a consent form be needed?

Is someone’s voice personal identifiable information under GDPR? If someone is to do a voice over for content of some training for a business, would a...
Read More >
30th May
Practice notes

The Network and Information Systems Regulations 2018

The Network and Information Systems Regulations 2018This Practice Note provides an overview of the Network and Information Systems Regulations 2018...
Read More >
30th May
Practice notes

Limitation of data protection liability in contracts—market practice in general business services agreements between controllers and processors [Archived]

Limitation of data protection liability in contracts—market practice in general business services agreements between controllers and processors...
Read More >
2nd Jun

Popular documents

What is the difference between an appeal and a review?

What is the difference between an appeal and a review?What is an appeal?An appeal in insolvency proceedings is no different to an appeal in normal litigation. An appeal will be allowed only if the appeal court is satisfied that the decision of the lower court was 'wrong' or 'unjust because of a

If a rentcharge is shown as being informally exonerated on title information, does this apply to the

If a rentcharge is shown as being informally exonerated on title information, does this apply to the current registered owner? Or does the informal exoneration only apply to the parties to the document which informally exonerated the rentcharge?This Q&A considers the situation where, at some

If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal

If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal fees, will that count as a PET against their estate?A disclaimer is the refusal of a gift prior to acceptance. The refusal of the gift must take place before the beneficiary accepts any benefit

Strike out—making an application to strike out a statement of case

Strike out—making an application to strike out a statement of caseA strike out order can be made either following an application by the parties or on the court's own initiative. This Practice Note deals with the scenario of the order being made following a party's application.Making an application