Data protection

View Information Law by content type:

Practice notes

Precedents

Q&As

Featured Information Law content

Brexit legislation tracker

This Practice Note tracks the progress of UK legislation introduced as part of the legislative project associated with the UK’s withdrawal from the

Cloud computing—key legal issues

This Practice Note considers the following legal and commercial issues relating to cloud services:•Due diligence•Contract documents•Service

Deeds

Under English law legally binding agreements can be made orally, in writing or by deed.This Practice Notice considers the circumstances in which a

Copyright infringement

The Copyright, Designs and Patents Act 1988 (CDPA 1988) gives the copyright owner exclusive rights in the UK to carry out various acts in relation to

Practice notes

Trade secrets and confidential information—protection and enforcement

Introduction to the laws protecting confidential information and trade secrets in the UKHistorically, the UK had no statutory regime to address the...

Produced in partnership with William Smith of Bird & Bird LLP 23rd Oct

In-house

Practice notes

The Data Protection Act 2018

Brexit: On 31 January 2020, the UK ceased to be an EU Member State and entered an implementation period, during which it continues to be subject to EU...

19th Oct

Brexit

In-house

Practice notes

UK GDPR and EU GDPR—sanctions and enforcement

Brexit: The Retained General Data Protection Regulation, Retained Regulation (EU) 2016/679 (UK GDPR) regime described in this Practice Note is the UK...

19th Oct

Practice notes

Data portability

Brexit: On 31 January 2020, the UK ceased to be an EU Member State and entered an implementation period, during which it continues to be subject to EU...

Produced in partnership with Alex Brown of Simmons & Simmons 19th Oct

Precedents

Standard contractual clauses—set II—controller to controller (Model Clauses)

DRAFTING FOR BREXIT: For the latest information on the impact of Brexit on the drafting, negotiation and enforceability of this Precedent, see...

16th Oct

Practice notes

Brexit—implications for data protection

This Practice Note discusses the impact of Brexit on the general processing of personal data under the General Data Protection Regulation, Regulation...

16th Oct

Brexit

In-house

Practice notes

Applications for interim injunctions for breaches of privacy

This Practice Note should be read in conjunction with Practice Notes: Privacy law—misuse of private information and Privacy law—remedies.Coronavirus...

Produced in partnership with Ben Gallop and Lily Walker-Parr of 5RB and Daniel Bishop 16th Oct

Practice notes

Misuse of private information and related claims

The tort of misuse of private information is the principal cause of action relied upon to protect privacy rights, at least against defendants who are...

Produced in partnership with Ben Gallop and Lily Walker-Parr of 5RB 15th Oct

Practice notes

Cookies

Brexit: On 31 January 2020, the UK ceased to be an EU Member State and entered an implementation period, during which it continues to be subject to EU...

28th Sep

Practice notes

The Network and Information Systems Regulations 2018

Brexit: On 31 January 2020, the UK ceased to be an EU Member State and entered an implementation period, during which it continues to be subject to EU...

26th Sep

Practice notes

Privacy law—misuse of private information

The tort of misuse of private information is focused on 'the protection of human autonomy and dignity—the right to control the dissemination of...

26th Sep

Precedents

Anti-bribery clause

1 Anti-bribery—short form—pro-customer Bribery Laws means the Bribery Act 2010[ and associated guidance published...

26th Sep

Practice notes

Adtech and programmatic advertising

This Practice Note provides an overview of the adtech ecosystem and the programmatic buying and selling of online display advertising. It considers...

26th Sep

Practice notes

Applying block exemptions to IP agreements

Intellectual property (IP) agreements relating to, for example, licensing of technology and for the joint development of new technology, may have a...

25th Sep

Practice notes

Consent under the GDPR

The General Data Protection Regulation (the GDPR), Regulation (EU) 2016/679 was published in the Official Journal of the EU on 4 May...

25th Sep

Most recent Data protection content

Practice notes

Bring your own device (BYOD)

Brexit: As of exit day (31 January 2020), the UK is no longer an EU Member State, but it has entered an implementation period during which it...

2nd Sep

Practice notes

Children and data protection law—code of practice for online services

Brexit: On 31 January 2020, the UK ceased to be an EU Member State and entered an implementation period, during which it continues to be subject to EU...

3rd Sep

Practice notes

Cloud computing—introduction

This Practice Note introduces cloud computing concepts and describes key principles underpinning the cloud market in the UK. It covers the...

25th Sep

Practice notes

Getting the Deal Through: Data Protection & Privacy 2021

Jurisdictions coveredThe following jurisdictions are covered in this report:Australia; Austria; Belgium; Brazil; Canada; Chile; China; Colombia;...

25th Sep

Practice notes

Non-Data Protection Act offences involving the misuse of data

The Data Protection Act 2018 (DPA 2018) creates a number of criminal offences relating to the misuse of personal data in the UK. For information on...

25th Sep

Practice notes

EU and EEA data protection supervisory authorities

Brexit: On 31 January 2020, the UK ceased to be an EU Member State and entered an implementation period, during which it continues to be subject to EU...

26th Sep

Practice notes

Image rights—protection, exploitation and taxation

As of exit day (31 January 2020) the UK is no longer an EU Member State. However, in accordance with the Withdrawal Agreement, the UK has entered an...

Produced in partnership with JJ Shaw of Lewis Silkin LLP and Alex Kelham of Lewis Silkin LLP 26th Sep

Precedents

Alternative wording for cookies notice

1Wording for website terms and conditions—Cookies and other information-gathering technologies1.1We use necessary cookies to make our site work....

26th Sep

Precedents

Policy—social media (short form)

1Introduction1.1The Company understands that the internet and social media platforms are increasingly used as a means of communication both at work...

26th Sep

Precedents

Policy—social media

1Introduction1.1The Company understands that the internet and social media platforms are increasingly used as a means of communication both at work...

26th Sep

Precedents

Letter notifying data subject of data breach under PECR 2003

Letter notifying data subject of data breach under the Privacy and Electronic Communications Regulations 2003, SI 2003/2426[Data subject’s name and...

26th Sep

Precedents

Policy—GDPR information security

1Introduction1.1The Company is committed to the highest standards of information security and treats confidentiality and data security extremely...

26th Sep

Precedents

Appendix 1 to the Standard contractual clauses—set II—controller to processor (Model Clauses)

DRAFTING FOR BREXIT: For the latest information on the impact of Brexit on the drafting, negotiation and enforceability of this Precedent, see...

26th Sep

Precedents

GDPR records retention schedule (employment)

IntroductionThis Record retention schedule accompanies and is incorporated into [insert organisation’s name]’s Record management policy. It sets out...

26th Sep

Precedents

Policy—GDPR criminal records information

FORTHCOMING CHANGE: Amendments to the Rehabilitation of Offenders Act 1974 (Exceptions) Order 1975 to change the definition of a ‘protected caution’...

26th Sep

Precedents

Policy—internet, email and communications (short form)

You must read this policy because it gives important information about:•the Company’s rules on the use of internet, email, telephone and other...

26th Sep

Precedents

Policy—GDPR data subject access requests

1Introduction1.1The Company holds personal data (or information) about job applicants, employees, clients, customers, suppliers, business contacts and...

26th Sep

In-house

Precedents