Data protection for Private Client

Individuals, trustees, personal representatives and their advisers are subject to increasingly numerous and far reaching compliance and regulatory obligations. While seeking to navigate the regimes aimed at increasing transparency and minimising tax evasion worldwide, at the same time as ensuring compliance with data protection rules, trustees must have regard to their fiduciary duties and other trust law principles, such as confidentiality.

Data protection and the EU and UK General Data Protection Regulations

On 25 May 2018, the EU General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR) came into effect in the UK, along with many parts of the Data Protection Act 2018 (DPA 2018). The EU GDPR introduced several changes to the data protection regime, including:

•
an increase to the territorial scope of EU data protection law
•
additional and extended data subject rights
•
additional obligations and liabilities for data controllers and data processors
•
increased powers for the supervisory authorities (such as the Information Commissioner's Office)

Retained Regulation (EU) 2016/679 (UK GDPR) replaced the EU GDPR, from 11 pm (UK time) on 31 December 2020. Assimilated law ...

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Private Client News

CTJ announces non-contentious probate rules working group membership

The Courts and Tribunals Judiciary has published details of the working group reviewing the Non-Contentious Probate Rules 1987, SI 1987/2024. The group, chaired by Sir Alastair Norris, includes representatives from His Majesty's Courts and Tribunals Service (HMCTS), the Ministry of Justice (MoJ) and legal practitioners from the Bar, private client solicitors and legal executives. The review, which runs until 31 July 2025, brings together expertise from across the probate sector, including a chief master, district probate registrar, and specialists in contentious probate and trust law.

Art under scrutiny—the Ojiri case and its implications for AML obligations

Private Client analysis: Amanda Gray, partner and Katie Mackenzie, trainee solicitor, Art Law at Mishcon de Reya LLP discuss the recent prosecution of an art dealer for offences under the Terrorism Act 2000 and its implications for art market professionals.

Private Client weekly highlights—3 July 2025

This week’s edition of Private Client weekly highlights includes: (1) the case of David Peace, in which the High Court confirmed that the beneficiaries could agree to waive the forfeiture rule following Mr Peace’s assisted death; (2) the Court of Protection case of Neath Port Talbot County Borough Council v A, in which the court found that an elderly dementia sufferer was moved from Spain to Wales unlawfully and continued to have habitual residence in Spain; (3) Mudan v Revenue and Customs Commissioners, in which the Court of Appeal confirmed the FTT and UT decisions that property requiring significant renovations should still be treated as residential property for SDLT purposes; (4) Khatun v Hasan, in which the Chancery Division held that the defendants failed to establish on the balance of probabilities that the disputed Will was genuine; and (5) Haworth v HMRC, in which The Court of Appeal dismissed the taxpayers’ appeal and upheld the decisions of the FTT and UT that the place of effective management of certain family trusts was in the UK, and not Mauritius.

ICAEW reports HMCTS advances in probate processing and digital enhancements

The Institute of Chartered Accountants in England and Wales (ICAEW) reports on HM Courts and Tribunals Service (HMCTS) probate service developments as of June 2025. HMCTS data for April 2025 indicates that although caseloads have stabilised at approximately 35,000 cases as of 31 May 2025, digital grant applications are now processed in 4.9 weeks compared to 12.3 weeks for paper applications. Service enhancements include improved case ownership by support officers, the continued availability of surgery appointments for complex cases, streamlined phone support through merged lines, and targeted improvements in the scanning process to reduce document errors. The update also notes recent Law Commission recommendations from May 2025 proposing the acceptance of electronic Wills and signatures—however, implementation remains the responsibility of the Ministry of Justice policy teams, and HMCTS is monitoring these potential changes.

Most recent Data protection for Private Client content

Practice notes

The UK General Data Protection Regulation (UK GDPR)—Private Client Q&As

The UK General Data Protection Regulation (UK GDPR)—Private Client Q&AsThis Practice Note, in the form of Q&As, sets out some of the most...

6th Jul

Practice notes

UK GDPR—the basics

UK GDPR—the basicsThis Practice Note explains, in simple terms, the key features of the UK General Data Protection Regulation (UK GDPR). See also...

6th Jul

Practice notes

Data protection principles

Data protection principlesFORTHCOMING CHANGE: On 19 June 2025, the Data (Use and Access) Bill received Royal Assent, becoming the Data (Use and...

6th Jul

Precedents

Privacy notice for trustees—UK GDPR compliant

Privacy notice for trustees—UK GDPR compliantWe take your privacy very seriously. Please read this privacy notice carefully as it contains important...

6th Jul

Practice notes

Charities and data protection

Charities and data protectionFor obvious reasons, the information that charities hold about donors and potential donors is of critical importance to...

6th Jul

Practice notes

The UK General Data Protection Regulation (UK GDPR)

The UK General Data Protection Regulation (UK GDPR)FORTHCOMING CHANGE: On 19 June 2025, the Data (Use and Access) Bill received Royal Assent, becoming...

6th Jul

Practice notes

Introduction to the EU GDPR and UK GDPR

Introduction to the EU GDPR and UK GDPRThis Practice Note provides an introduction to both the EU’s General Data Protection Regulation, Regulation...

6th Jul

Practice notes

Brexit—implications for data protection [Archived]

Brexit—implications for data protection [Archived]ARCHIVED: This archived Practice Note provides information on the Data Protection, Privacy and...

6th Jul

Practice notes

Trustees and data protection—part two

Trustees and data protection—part twoThis Practice Note should be read alongside Practice Note: Trustees and data protection—part one. It considers...

6th Jul

Checklists

Data protection and trustees—checklist

Data protection and trustees—checklistThis Checklist is designed to assist trustees to review and amend their working practices in relation to the...

5th Jul

Precedents

Privacy notice for personal representatives—UK GDPR compliant

Privacy notice for personal representatives—UK GDPR compliantWe take your privacy very seriously. Please read this privacy notice carefully as it...

5th Jul

Practice notes

Trust disputes—beneficiaries' rights to information

Trust disputes—beneficiaries' rights to informationA distinction should be drawn between disclosure by the trustees under trust law, due to the rights...

4th Jul

Practice notes

Trustees and data protection—part one

Trustees and data protection—part oneThis Practice Note is the first of two Practice Notes covering the data protection regime and its application to...

4th Jul