Data breaches, sanctions and enforcement

View Information Law by content type:

News

Practice notes

Precedents

Q&As

Latest Information Law News

Court of Justice rules on national legislation protecting DPOs against employment termination (Leistritz AG v LH)

The following EU Law news provides comprehensive and up to date legal information on Court of Justice rules on national legislation protecting DPOs against employment termination (Leistritz AG v LH)

Information Law weekly highlights—30 June 2022

The following Information Law news provides comprehensive and up to date legal information on Information Law weekly highlights—30 June 2022

Clauses in conflict re-visited—construing arbitration, choice of law and jurisdiction clauses (AIG EUROPE SA v John Wood Group, CA)

The following Arbitration news provides comprehensive and up to date legal information on Clauses in conflict re-visited—construing arbitration, choice of law and jurisdiction clauses (AIG EUROPE SA v John Wood Group, CA)

Comment—reforming EU GDPR enforcement is easier said than done

The following Corporate Crime news provides comprehensive and up to date legal information on Comment—reforming EU GDPR enforcement is easier said than done

Featured Information Law content

The UK General Data Protection Regulation (UK GDPR)—Navigator

The UK General Data Protection Regulation (UK GDPR)—NavigatorThis Practice Note serves as a reference guide to the Retained Regulation (EU) 2016/679...

Introduction to the EU GDPR and UK GDPR

Introduction to the EU GDPR and UK GDPRIn briefData protection law in both the EEA (the EU plus Iceland, Norway, and Liechtenstein) and UK is intended...

The Information Commissioner’s Office (ICO)

The Information Commissioner’s Office (ICO)The Information Commissioner’s Office (ICO) is the UK’s independent regulator designed to uphold...

Managing a breach of confidentiality or information security

Managing a breach of confidentiality or information securityMany companies and government bodies (such as HMRC) have been exposed to loss of...

Practice notes

What does IP completion day mean for Information Law?

What does IP completion day mean for Information Law?11 pm (GMT) on 31 December 2020 marked the end of the implementation period put in place to...

16th Nov

Practice notes

The UK General Data Protection Regulation (UK GDPR)

The UK General Data Protection Regulation (UK GDPR)This Practice Note provides a summary of the UK GDPR regime. The processing of personal data by...

16th Nov

Practice notes

Privacy law—misuse of private information

Privacy law—misuse of private informationThe tort of misuse of private information is focused on ‘the protection of human autonomy and dignity—the...

Produced in partnership with Ben Gallop and Lily Walker-Parr of 5RB and Daniel Bishop 16th Nov

Practice notes

Personal data sharing between controllers

Personal data sharing between controllersThis Practice Note explores issues and best practice relating to the sharing of personal data between...

16th Nov

Data Protection Toolkit

Precedents

Letter of claim—breach of confidence

Letter of claim—breach of confidence[Insert name and address of recipient]Dear [insert organisation name],[Name of client] and confidential...

16th Nov

Practice notes

Trade secrets and confidential information—protection and enforcement

Trade secrets and confidential information—protection and enforcementThis Practice Note sets out the protection available for trade secrets and...

Produced in partnership with William Smith of Bird & Bird LLP 16th Nov

In-house

Practice notes

UK GDPR and EU GDPR—transfers of personal data internationally and to international organisations

UK GDPR and EU GDPR—transfers of personal data internationally and to international organisationsIn briefData protection laws in both the EEA (the EU...

16th Nov

Brexit

In-house

Practice notes

Data portability

Data portabilityUK and EU data protection laws each include a right to data portability. This right allows individuals to obtain from a controller a...

Produced in partnership with Alex Brown of Simmons & Simmons 16th Nov

Data Protection Toolkit

Q&As

Is someone’s voice personal identifiable information under GDPR? If someone is to do a voice over for content of some training for a business, would a consent form be needed?

Is someone’s voice personal identifiable information under GDPR? If someone is to do a voice over for content of some training for a business, would a...

16th Nov

Practice notes

List of data protection clauses and agreements for commercial transactions and personal data processing and sharing

List of data protection clauses and agreements for commercial transactions and personal data processing and sharingThis Practice Note is a...

16th Nov

Data Protection Toolkit

Q&As

Do you have a tripartite NDA precedent?

Do you have a tripartite NDA precedent?The type of NDA/confidentiality agreement required will depend upon the circumstances of the particular...

16th Nov

Q&As

If the name of a third party supplier is disclosed under a non-disclosure agreement (NDA), is it a breach of the NDA for the recipient to contract with the named supplier directly?

If the name of a third party supplier is disclosed under a non-disclosure agreement (NDA), is it a breach of the NDA for the recipient to contract...

16th Nov

Practice notes

Determining roles under data protection law in commercial transactions between businesses (processor, independent controller or joint controller)

Determining roles under data protection law in commercial transactions between businesses (processor, independent controller or joint controller)In...

16th Nov

Q&As

What is the definition of a 'transfer' under Chapter V of the General Data Protection Regulation, Regulation (EU) 2016/679 (the EU GDPR)? Is it limited to actual movement of personal data from one place to another? If UK staff access, view and amend personal data held on a server in the EU (doing all such things on EU servers) from the UK following the end of the Brexit implementation period could that be a 'transfer' of personal data outside the EEA subject to Chapter V of the EU GDPR?

What is the definition of a 'transfer' under Chapter V of the General Data Protection Regulation, Regulation (EU) 2016/679 (the EU GDPR)? Is it...

16th Nov

Precedents

Standard contractual clauses for international transfers—2004 (set II)—controller to controller—ICO templates

Standard contractual clauses for international transfers—2004 (set II)—controller to controller—ICO templatesIn briefThis precedent links to: •a...

16th Nov

Q&As

Can a company cap its liability for breach of its data protection obligations under a contract?

Can a company cap its liability for breach of its data protection obligations under a contract?For the purposes of this Q&A:•it is assumed that the...

16th Nov