Data protection

Data protection is paramount in today's digital age, requiring legal experts to stay ahead of evolving regulations and technologies. This topic provides practical insights into compliance, risk management, and safeguarding personal data, empowering practitioners to navigate the complexities of data protection law effectively.

View Information Law by content type:

News
Practice notes
Precedents
Q&As

Sub Topics We Cover

Accountability, governance and compliance Data breaches, sanctions and enforcement Data protection in specific activities Data protection regime Data protection regime—DPA 1998 Data sharing and transactions EU GDPR regime International transfers Rights of data subjects Thought leadership—Data Protection Intelligence Group Transparency, privacy policies and notices

Latest Information Law News

Testing the limits of confidentiality—when does use become misuse? (Illiquidx Ltd v Atlana Wealth Ltd and others)

Testing the limits of confidentiality—when does use become misuse? (Illiquidx Ltd v Atlana Wealth Ltd and others)

The following Information Law news provides comprehensive and up to date legal information on Testing the limits of confidentiality—when does use become misuse? (Illiquidx Ltd v Atlana Wealth Ltd and others)

DSIT launches enterprise IoT security consultation with vulnerability research

DSIT launches enterprise IoT security consultation with vulnerability research
ICO consults on draft updated guidance on encryption

ICO consults on draft updated guidance on encryption
DSIT opens user engagement for 2026 UK Business Data Survey

DSIT opens user engagement for 2026 UK Business Data Survey

Featured Information Law content

The UK General Data Protection Regulation (UK GDPR)—Navigator

The UK General Data Protection Regulation (UK GDPR)—Navigator

The UK General Data Protection Regulation (UK GDPR)—NavigatorThis Practice Note serves as a reference guide to the Retained Regulation (EU) 2016/679...

Managing a breach of confidentiality or information security

Managing a breach of confidentiality or information security

Managing a breach of confidentiality or information securityMany companies and government bodies (such as HMRC) have been exposed to loss of...

Are recorded conversations between lay people legal and can they be used in legal proceedings?

Are recorded conversations between lay people legal and can they be used in legal proceedings?

Are recorded conversations between lay people legal and can they be used in legal proceedings?The law relating to the recording of conversations...

What are the differences between joint controllers and controllers in common under the GDPR? What is the difference in liability if a party is a joint controller with another, compared to where the parties are controllers in common?

What are the differences between joint controllers and controllers in common under the GDPR? What is the difference in liability if a party is a joint controller with another, compared to where the parties are controllers in common?

What are the differences between joint controllers and controllers in common under the GDPR? What is the difference in liability if a party is a joint...

Practice notes

The Information Commissioner’s Office (ICO)

The Information Commissioner’s Office (ICO)The Information Commissioner’s Office (ICO) is the UK’s independent regulator designed to uphold...
Read More >
2nd Mar
Practice notes

Privacy law—misuse of private information

Privacy law—misuse of private informationThe tort of misuse of private information is focused on ‘the protection of human autonomy and dignity—the...
Read More >
Produced in partnership with Ben Gallop and Lily Walker-Parr of 5RB and Daniel Bishop
1st Mar
Practice notes

Data protection, privacy and confidential information case law tracker

Data protection, privacy and confidential information case law trackerThis Practice Note tracks noteworthy High Court, Court of Appeal and Supreme...
Read More >
1st Mar
Q&As

Is someone’s voice personal identifiable information under GDPR? If someone is to do a voice over for content of some training for a business, would a consent form be needed?

Is someone’s voice personal identifiable information under GDPR? If someone is to do a voice over for content of some training for a business, would a...
Read More >
2nd Mar
Practice notes

Introduction to the EU GDPR and UK GDPR

Introduction to the EU GDPR and UK GDPRThis Practice Note provides a high-level introduction to the EU’s General Data Protection Regulation,...
Read More >
2nd Mar
tag iconIn-house
Practice notes

Key definitions under data protection law

Key definitions under data protection lawThis Practice Note provides further guidance on key definitions used in the EU’s General Data Protection...
Read More >
2nd Mar
Practice notes

UK GDPR—extra-territorial reach

UK GDPR—extra-territorial reachThis Practice Note discusses the territorial scope of the regime established by the United Kingdom General Data...
Read More >
Produced in partnership with Aaron Simpson of Hunton Andrews Kurth and Bridget Treacy of Hunton Andrews Kurth
28th Mar
Precedents

Letter of claim—breach of confidence

Letter of claim—breach of confidence[Insert name and address of recipient]Dear [insert organisation name],[Name of client] and confidential...
Read More >
1st Mar
Practice notes

Confidential information, privacy and injunctions

Confidential information, privacy and injunctionsThis Practice Note deals with the general principles of obtaining an injunction relating to...
Read More >
2nd Mar
Practice notes

What does IP completion day mean for Information Law? [Archived]

What does IP completion day mean for Information Law? [Archived]ARCHIVED: This Practice Note has been archived and is not maintained.11 pm (GMT) on 31...
Read More >
2nd Mar
Practice notes

List of data protection clauses and agreements for commercial transactions and personal data processing and sharing

List of data protection clauses and agreements for commercial transactions and personal data processing and sharingThis Practice Note is a...
Read More >
1st Mar
tag iconData Protection Toolkit
Q&As

Can a company cap its liability for breach of its data protection obligations under a contract?

Can a company cap its liability for breach of its data protection obligations under a contract?For the purposes of this Q&A:•it is assumed that...
Read More >
1st Mar
Practice notes

The UK General Data Protection Regulation (UK GDPR)

The UK General Data Protection Regulation (UK GDPR)This Practice Note provides a summary of the UK GDPR regime. For a higher-level introduction to UK...
Read More >
1st Mar
Practice notes

Trade secrets and confidential information—protection and enforcement

Trade secrets and confidential information—protection and enforcementThis Practice Note sets out the protection available for trade secrets and...
Read More >
Produced in partnership with Will Smith of Anglo American
2nd Mar
tag iconIn-house
Q&As

If the name of a third party supplier is disclosed under a non-disclosure agreement (NDA), is it a breach of the NDA for the recipient to contract with the named supplier directly?

If the name of a third party supplier is disclosed under a non-disclosure agreement (NDA), is it a breach of the NDA for the recipient to contract...
Read More >
2nd Mar
Practice notes

The EU NIS Directive and UK NIS Regulations—timeline

The EU NIS Directive and UK NIS Regulations—timelineThis timeline sets out key dates and information relating to:•the EU’s Network and Information...
Read More >
2nd Mar

Popular documents

TikTok sues European Data Protection Board at EU General Court

MLex: TikTok has sued the European Data Protection Board (EDPB) at the EU General Court, not long after it was fined €345m in a case involving the board. The EDPB, which is the umbrella body of EU data protection watchdogs, played a role in the case because it went through the EU General Data

Is someone’s voice personal identifiable information under GDPR? If someone is to do a voice over for

Is someone’s voice personal identifiable information under GDPR? If someone is to do a voice over for content of some training for a business, would a consent form be needed?Is someone’s voice personal identifiable information under GDPR?A voice recording is likely, in almost all circumstances, to

If planning permission imposes restrictions on a licensed premises opening hours, once operational can

If planning permission imposes restrictions on a licensed premises opening hours, once operational can the personal licence holder apply for a Temporary Events Notice (TEN) to open for longer hours than those permitted in the planning permission?To use any property for a licensable activity both

What is the difference between an appeal and a review?

What is the difference between an appeal and a review?What is an appeal?An appeal in insolvency proceedings is no different to an appeal in normal litigation. An appeal will be allowed only if the appeal court is satisfied that the decision of the lower court was 'wrong' or 'unjust because of a