Data breaches, sanctions and enforcement

View Information Law by content type:

News

Practice notes

Precedents

Q&As

Latest Information Law News

Court of Appeal denies journalist’s request for extensive access to court papers (Newman v Southampton City Council)

The following Family news provides comprehensive and up to date legal information on Court of Appeal denies journalist’s request for extensive access to court papers (Newman v Southampton City Council)

Information Law weekly highlights—8 April 2021

The following Information Law news provides comprehensive and up to date legal information on Information Law weekly highlights—8 April 2021

Court of Appeal provides step-by-step guidance on determining whether a European regulation forms part of UK domestic law and sets out how to analyse the impact of the EU-UK Trade and Cooperation Agreement and the European Union (Future Relationship) Act 2020 (Lipton v BA City Flyer Ltd)

Court of Appeal provides step-by-step guidance on determining whether a European regulation forms part of UK domestic law and sets out how to analyse the impact of the EU-UK Trade and Cooperation Agreement and the European Union (Future Relationship) Act 2020 (Lipton v BA City Flyer Ltd)

LexisPSL and MLex trial new interactive EU GDPR enforcement tracker

The following Commercial news provides comprehensive and up to date legal information on LexisPSL and MLex trial new interactive EU GDPR enforcement tracker

Featured Information Law content

Joint, several, and joint and several liability

ContractWhere a contract is made by two or more parties it may contain a promise or obligation made by two or more of those parties. Any such promise...

Conditions precedent in commercial contracts

This Practice Note considers the meaning and use of conditions precedent in commercial arrangements. It also considers typical conditions precedent...

A company’s constitution

What is a company's constitution?A company’s 'constitution' is defined under the Companies Act 2006 (CA 2006) as including:•the company’s articles of...

Malicious falsehood

This Practice Note provides an introduction to the tort of malicious falsehood. Unlike a claim for defamation, there is no requirement in a claim for...

Practice notes

Declaration of a director's interests—the statutory provisions

A director who is in any way, directly or indirectly, interested in:•a proposed transaction or arrangement with the company of which they are a...

9th Nov

Practice notes

Defamation—defences

DefencesThere are a number of substantive defences to a defamation claim, the majority of which are now, since the Defamation Act 2013 (DA 2013),...

Produced in partnership with 5RB 12th Jan

In-house

Practice notes

Starting a GDPR compensation claim—a practical guide

Brexit: The UK's departure from the EU on exit day ie Friday 31 January 2020 has implications for practitioners in a number of areas covered in this...

Produced in partnership with Robert Brodrick and Stephen Woodward of Payne Hicks Beach 12th Jan

Practice notes

Rome Convention—introduction and interpretation

Brexit: The UK's departure from the EU on exit day, ie Friday 31 January 2020, has implications for practitioners considering applicable law. For...

9th Nov

Practice notes

Sub-licensing intellectual property rights

An intellectual property (IP) owner may choose to license its IP to a third party. This can be an effective route to generating revenue while...

Produced in partnership with Jessica Stretch 12th Jan

In-house

Practice notes

Introduction to retained EU law

This Practice Note provides an introduction to retained EU law, which is an entirely new legal concept introduced to UK domestic law in preparation...

9th Nov

Brexit

Precedents

Standard contractual clauses—set II—controller to controller (Model Clauses)

DRAFTING FOR BREXIT: For the latest information on the impact of Brexit on the drafting, negotiation and enforceability of this Precedent, see...

9th Nov

Practice notes

No deal Brexit—jurisdiction (UK and the Lugano Convention)

This Practice Note has been produced in partnership with Guy Pendell, Liz Williams and Kushal Gandhi of CMS.STOP PRESS: This Practice Note is under...

9th Nov

Brexit

Practice notes

Model ADR clauses

Brexit: The UK's departure from the EU on exit day ie Friday 31 January 2020 has implications for practitioners considering the use of ADR as it may...

9th Nov

Precedents

Execution clause—company—deed

Option 1—deed executed by a company under its common seal (model articles, where the authorised signatory is an...

9th Nov

In-house

Practice notes

Applications for interim injunctions for breaches of privacy

This Practice Note should be read in conjunction with Practice Notes: Privacy law—misuse of private information and Privacy law—remedies.Coronavirus...

Produced in partnership with Ben Gallop and Lily Walker-Parr of 5RB and Daniel Bishop 12th Jan

Precedents

Third party intellectual property rights indemnity clause—pro-supplier

1 Intellectual property rights indemnity 1.1 The Supplier shall defend the Customer against any third party claim that...

9th Nov

In-house

Practice notes

Applicable law clauses

Brexit: The UK's departure from the EU on exit day, ie Friday 31 January 2020, has implications for practitioners considering applicable law. For...

9th Nov

Precedents

Month definition

Month means a calendar month; Close This is a suggested definition for the term 'month', which...

9th Nov

Most recent Data breaches, sanctions and enforcement content

Practice notes

Managing personal data breaches

Data security is a cornerstone of the UK General Data Protection Regulation (UK GDPR). The sixth data protection principle (the integrity and...

9th Apr

Practice notes

Non-Data Protection Act offences involving the misuse of data

The Data Protection Act 2018 (DPA 2018) creates a number of criminal offences relating to the misuse of personal data in the UK. For information on...

9th Apr

Practice notes

Offences under the Data Protection Act 2018

IP COMPLETION DAY: 11pm (GMT) on 31 December 2020 marks the end of the Brexit transition/implementation period entered into following the UK’s...

Produced in partnership with Professor Dan Hyde of Harrison Clark Rickerbys 9th Apr

Practice notes

The EU NIS Directive and UK NIS Regulations—timeline

This timeline sets out key dates and information relating to:•the EU’s Network and Information Systems Directive (NIS Directive), Directive (EU)...

9th Apr

Practice notes

The Information Commissioner’s Office (ICO)

IP COMPLETION DAY: 11pm (GMT) on 31 December 2020 marks the end of the Brexit transition/implementation period entered into following the UK’s...

9th Apr

Practice notes

Cybersecurity breach notification requirements

IP COMPLETION DAY: 11pm (GMT) on 31 December 2020 marks the end of the Brexit transition/implementation period entered into following the UK’s...

Produced in partnership with Chris Benn of Fieldfisher and Nicola Fulford of Hogan Lovells 9th Apr

Practice notes

The Network and Information Systems Regulations 2018

This Practice Note provides an overview of the Network and Information Systems Regulations 2018 (NIS Regulations), SI 2018/506 which implemented the...

9th Apr

Q&As

What is the impact of Brexit on international transfers of personal data?

This Q&A looks at the impact of Brexit on cross-border transfers of personal data involving the UK and EEA, under the General Data Protection...

8th Apr

Brexit

Practice notes

EU and EEA data protection supervisory authorities

A key objective of the General Data Protection Regulation, Regulation (EU) 2016/679 (the EU GDPR) is to achieve a level of consistency in relation to...

7th Apr

Practice notes

GDPR enforcement by UK and EEA supervisory authorities—tracker

A key objective of the General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR) was to achieve a level of consistency in relation to how...

7th Apr

Practice notes

Data protection principles

On 31 January 2020, the UK ceased to be a member of the EU and EEA. Given the extensive data flows between the EEA and UK, equivalent EEA data...

Produced in partnership with Pillsbury Winthrop Shaw Pittman LLP 6th Apr

Q&As

Is it a criminal offence under the Data Protection Act 2018 to fail to pay the data protection fee to the ICO?

Under the Data Protection (Charges and Information) Regulations 2018, SI 2018/480, data controllers are required to pay an annual charge (a ‘data...

29th Mar

Q&As

What are the potential fines due for failure to register as a data controller with the Information Commissioner’s Office?

The fees are set by the Data Protection (Charges and Information) Regulations 2018, SI 2018/480.For background information, see Practice Note: The...

29th Mar

Practice notes

Introduction to the EU GDPR and UK GDPR

On 31 January 2020, the UK ceased to be a member of the EU and EEA. This Practice Note introduces:•the General Data Protection Regulation, Regulation...

24th Mar

In-house

Q&As

Is an employer permitted to access and read a former employee's private emails and documents that are stored on the employer's IT systems, with a view to finding evidence to dispute the former employee's version of events and/or damage his credibility at an employment tribunal hearing?

An individual’s private emails and, depending upon the contents, private documents, will comprise personal data as defined in section 1 of the Data...

24th Mar

Q&As

When preparing a privacy notice for a computer game aimed at subscribers who are over the age of 18, should the privacy information be understandable for children as well as the over 18 users?

For the purposes of this Q&A we have focused on the transparency obligations under Regulation (EU) 2016/679, the General Data Protection Regulation...

24th Mar

Q&As

How do you enforce a subject access request?

This Q&A considers subject access requests under the Regulation (EU) 2016/679, General Data Protection Regulation (GDPR) and the Data Protection Act...

24th Mar

Practice notes

ICO enforcement—database

IP COMPLETION DAY: 11pm (GMT) on 31 December 2020 marks the end of the Brexit transition/implementation period entered into following the UK’s...

19th Mar

Q&As

When are assessment notices served under the Data Protection Act and what happens if I receive one?

What is an assessment notice?Assessment notices are a feature of compulsory data protection audits introduced into the ICO's regulatory toolkit by the...

24th Feb

Practice notes

UK GDPR and EU GDPR—sanctions and enforcement

On 31 January 2020, the UK ceased to be an EU Member State and entered a Brexit implementation period. This Practice Note introduces the approach to...

23rd Feb