Practice notes
Brexit: The Retained General Data Protection Regulation, Retained Regulation (EU) 2016/679 (UK GDPR) regime described in this Practice Note is the UK...
25th Nov
Practice notes
Brexit: On 31 January 2020, the UK ceased to be an EU Member State and entered an implementation period, during which it continues to be subject to EU...
Produced in partnership with Pillsbury Winthrop Shaw Pittman LLP
25th Nov
Practice notes
Brexit: The Retained General Data Protection Regulation, Retained Regulation (EU) 2016/679 (UK GDPR) regime described in this Practice Note is the UK...
25th Nov
Practice notes
Brexit: On 31 January 2020, the UK ceased to be an EU Member State and entered an implementation period, during which it continues to be subject to EU...
24th Nov
Q&As
In answering this Q&A, it has been assumed to be a breach notification under the Genaral Data Protection Rules, and the threshold for informing data...
23rd Nov
Precedents
On [insert date] we became aware that [describe what has happened, ie how the breach occurred]. The data [accessed OR stolen OR lost OR corrupted][...
19th Nov
Precedents
1Introduction1.1This personal data breach plan:1.1.1places obligations on staff to report actual or suspected personal data breaches; and1.1.2sets out...
19th Nov
Practice notes
Brexit: As of exit day (31 January 2020), the UK is no longer an EU Member State, but it has entered an implementation period during which it...
19th Nov
Q&As
This Q&A looks at the impact of Brexit on cross-border transfers of personal data involving the UK and EEA, under the General Data Protection...
18th Nov
Practice notes
This database sets out details of recent enforcement actions taken by the Information Commissioner's Office (ICO). It is accessible by clicking on the...
16th Nov
Practice notes
Brexit: On 31 January 2020, the UK ceased to be an EU Member State and entered an implementation period, during which it continues to be subject to EU...
Produced in partnership with Chris Benn of Fieldfisher and Nicola Fulford of Hogan Lovells
13th Nov
Practice notes
Brexit: On 31 January 2020, the UK ceased to be an EU Member State and entered an implementation period, during which it continues to be subject to EU...
12th Nov
Practice notes
This timeline sets out key dates and information relating to the Network and Information Systems Directive (NIS Directive), Directive (EU) 2016/1148,...
12th Nov
Q&As
There has recently been a legal challenge regarding the EU’s data sharing arrangement with the US, known as the EU‒US Privacy Shield, filed in the...
10th Nov
Practice notes
The Data Protection Act 2018 (DPA 2018) received Royal Assent on 23 May 2018. The DPA 2018 puts the UK in a position to continue to share personal...
Produced in partnership with Professor Dan Hyde of Harrison Clark Rickerbys
23rd Oct
Q&As
The General Data Protection Regulation (GDPR) will become directly applicable and enforceable from 25 May 2018 and will introduce substantial...
19th Oct
Q&As
Article 37(1) of Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), introduces a requirement that businesses must appoint a Data...
19th Oct
Q&As
In answering this Q&A, we have assumed that all parties and data subjects are exclusively based in the UK, no overseas laws or regulation applies,...
19th Oct
Q&As
In the context of data protection, the term 'data subject' is used frequently. For the purposes of the Data Protection Act 1998 (DPA 1998), 'data...
19th Oct
Q&As
For the purposes of the Data Protection Act 1998 (DPA 1998), 'personal data' is defined as: 'data which relate to a living individual who can be...
19th Oct
Sign-in
Help
In-house
