Data protection compliance

Protecting sensitive data is paramount. Legal practitioners must stay ahead of evolving regulations to ensure compliance and mitigate risks associated with data breaches. This guidance provides the latest best practices, statutory updates, and actionable insights, equipping you with the tools to navigate the demanding landscape of data protection compliance effectively.

View Risk & Compliance by content type:

News
Practice notes
Precedents
Q&As

Sub Topics We Cover

Compliance planning Data breaches Data mapping Data protection by design and default Data protection complaints Data protection impact assessment Data protection officer Data subject rights Direct marketing Handling data subject requests Identifying & assessing risks International data protection International transfers Privacy policies and notices Processing and transferring data Regulatory regime Training and awareness

Latest Risk & Compliance News

New Risk & Compliance forecast as at 15 October 2025

New Risk & Compliance forecast as at 15 October 2025

The following Risk & Compliance news provides comprehensive and up to date legal information on New Risk & Compliance forecast as at 15 October 2025

Risk & Compliance weekly highlights—16 October 2025

Risk & Compliance weekly highlights—16 October 2025

The following Risk & Compliance news provides comprehensive and up to date legal information on Risk & Compliance weekly highlights—16 October 2025

LSB announces enforcement action against SRA over handling of SSB Group prior to collapse

LSB announces enforcement action against SRA over handling of SSB Group prior to collapse
FCDO announces 90 new sanctions targeting Russian oil giants and enablers

FCDO announces 90 new sanctions targeting Russian oil giants and enablers

Featured Risk & Compliance content

Can I charge a fee for dealing with a data subject access request?

Can I charge a fee for dealing with a data subject access request?

Can I charge a fee for dealing with a data subject access request?The General Data Protection Regulation (GDPR) provides for enhanced rights for data...

How to plan and conduct an internal investigation

How to plan and conduct an internal investigation

How to plan and conduct an internal investigationAn internal investigation is a legal process undertaken by an organisation (with or without outside...

Can a limited company make a subject access request? Can a director of a limited company ask for recordings of calls with us? If yes, what personal data must we provide?

Can a limited company make a subject access request? Can a director of a limited company ask for recordings of calls with us? If yes, what personal data must we provide?

Can a limited company make a subject access request? Can a director of a limited company ask for recordings of calls with us? If yes, what personal...

Anti-bribery and corruption—post-training assessment answers

Anti-bribery and corruption—post-training assessment answers

Anti-bribery and corruption—post-training assessment answersQuestionCorrect answer1. How many new offences does the Bribery Act 2010 create? (b)...

Q&As

Who can certify identification documents (passports, driving licences, utility bills, etc)?

Who can certify identification documents (passports, driving licences, utility bills, etc)?Government guidance on Certifying a document states...
Read More >
2nd Jun
Practice notes

Money Laundering Regulations 2017—scope and application

Money Laundering Regulations 2017—scope and applicationThis Practice Note sets out the scope and application of the Money Laundering, Terrorist...
Read More >
30th May
Practice notes

Money Laundering Regulations 2017—nominated officer

Money Laundering Regulations 2017—nominated officerThis Practice Note sets out when organisations must appoint a nominated officer (sometimes referred...
Read More >
30th May
tag iconIn-house
Practice notes

Sanctions regime—Russia

Sanctions regime—RussiaThe Russia (Sanctions) (EU Exit) Regulations 2019, SI 2019/855, made under the Sanctions and Anti-Money Laundering Act 2018...
Read More >
2nd Jun
tag iconInternational sanctions
Practice notes

How to manage legal risk

How to manage legal riskIt is often said that running a business means taking risks and that the biggest risk an entrepreneur can take is not to think...
Read More >
Produced in partnership with Elizabeth Bourlet
13th Oct
Practice notes

Contract management risk management guide

Contract management risk management guideWhy you need to manage this riskContract management is often seen by the business as an activity which is...
Read More >
Produced in partnership with Elizabeth Bourlet
13th Oct
tag iconIn-house
Precedents

Competition law compliance—post-training assessment answers

Competition law compliance—post-training assessment answersQuestionCorrect answer1. Competition law protects business and consumers from...
Read More >
2nd Jun
Practice notes

SRA Code of Conduct for Solicitors, RELs and RFLs—for in-house lawyers

SRA Code of Conduct for Solicitors, RELs and RFLs—for in-house lawyersThis Practice Note provides guidance for in-house solicitors on the SRA Code of...
Read More >
30th May
Precedents

Anti-bribery and corruption—post-training assessment questions

Anti-bribery and corruption—post-training assessment questionsHow to use this testThese questions are designed to test your understanding after your...
Read More >
30th May
Practice notes

How to create a legal risk register

How to create a legal risk registerThis Practice Note is intended for in-house lawyers. It explains how to create a legal risk register, a tool that...
Read More >
30th May
Practice notes

Tipping-off and prejudicing an investigation

Tipping-off and prejudicing an investigationThere are several offences of tipping-off and prejudicing an investigation that apply to the regulated...
Read More >
30th May
Practice notes

Confidentiality risk management guide

Confidentiality risk management guideWhy you need to manage this riskConfidential information is one of the most valuable assets of any business....
Read More >
Produced in partnership with Ishika Patel of Lawyers on Demand
30th May
Precedents

Records retention schedule

Records retention schedule1Introduction1.1This Record retention schedule accompanies and is incorporated into [insert organisation’s name]’s Records...
Read More >
30th May
Practice notes

Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017—key information for businesses

Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017—key information for businessesThe Money...
Read More >
30th May
Q&As

Refusing a data subject request—what is ‘manifestly unfounded or excessive’?

Refusing a data subject request—what is ‘manifestly unfounded or excessive’?The General Data Protection Regulation (GDPR) provides for enhanced rights...
Read More >
30th May
Practice notes

Dawn raid—who can raid my organisation and why?

Dawn raid—who can raid my organisation and why?The UK Government has legislated to permit a number of UK authorities to obtain search warrants to...
Read More >
Produced in partnership with Michael Potts and Arozo Gajia of PCB Byrne
30th May
tag iconIn-house

Popular documents

Can I charge a fee for dealing with a data subject access request?

Can I charge a fee for dealing with a data subject access request?The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects including providing rights of rectification, erasure and restriction of processing, data portability, a right to object to processing and a

What is the difference between an appeal and a review?

What is the difference between an appeal and a review?What is an appeal?An appeal in insolvency proceedings is no different to an appeal in normal litigation. An appeal will be allowed only if the appeal court is satisfied that the decision of the lower court was 'wrong' or 'unjust because of a

If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal

If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal fees, will that count as a PET against their estate?A disclaimer is the refusal of a gift prior to acceptance. The refusal of the gift must take place before the beneficiary accepts any benefit

Contributory negligence in personal injury claims

Contributory negligence in personal injury claimsContributory negligence is a partial defence which can lead to a discount in damages.Other defences may also be relevant. See Practice Notes: Did the claimant consent to the risk of injury? and Was the claimant involved in an illegal activity?If a