Compliance planning

Compliance planning

The challenge of complying with the UK General Data Protection Regulation (UK GDPR) should not be underestimated, nor should the consequences of failing to do so—the potential for fines of £17.5m or 4% of annual global turnover.

Does the UK GDPR apply to your business?

Assimilated Regulation (EU) 2016/679 (UK GDPR) applies to all organisations that handle personal data. As it is virtually impossible to operate a business without handling personal data, it's probably safe to assume your organisation is caught by the UK GDPR.

The GDPR also applies to organisations outside

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Risk & Compliance News

Asset-freeze target lists and General Licences updated for new UK global migration and trafficking sanctions regime

In response to the commencement of the Global Irregular Migration and Trafficking in Persons Sanctions Regulations 2025, SI 2025/902, OFSI has published a list of designated persons under this new sanctions regime. OFSI has also updated two existing General Licences—INT/2025/5632740 and INT/2022/1679676—to incorporate the latest designations. These licences allow designated individuals to receive payments for basic necessities such as food and housing, under clearly defined conditions and reporting obligations, helping prevent unintended humanitarian consequences. General Licence INT/2025/5632740, issued in January 2025, and INT/2022/1679676, issued in April 2022, both remain active and now reflect the expanded sanctions list. They apply across multiple regimes, including those concerning irregular migration, anti-corruption, and Russia-related measures.

Home Office publishes response to ransomware consultation on new legislative proposals to tackle cybercrime

The Home Office has published its response to the public consultation on legislative proposals to address ransomware. The consultation ran from 14 January to 8 April 2025 and sought views on three measures: a targeted ban on ransomware payments for public sector and regulated critical national infrastructure (CNI); a ransomware payment prevention regime; and a mandatory incident reporting regime. A total of 273 responses were received and 36 engagement events were held. The response confirms ransomware is considered the most serious organised cybercrime threat to UK national security. Feedback was broadly supportive and highlighted several cross-cutting themes, including the need for clarity on scope and definitions, proportionate penalties that avoid revictimising victims, tailored guidance and support, and improved cyber resilience. The government intends to continue to develop the proposals in collaboration with stakeholders, explore appropriate enforcement mechanisms and publish guidance to support implementation.

HMT consults on reforms to civil enforcement of financial sanctions

HM Treasury (HMT) has launched a consultation on proposed reforms to the civil enforcement processes of the Office of Financial Sanctions Implementation (OFSI), aimed at improving the efficiency, transparency and effectiveness of financial sanctions enforcement in the UK. Key proposals include the introduction of a settlement scheme for monetary penalties, an Early Account Scheme (EAS) to allow subjects to provide a full factual account early in investigations, a streamlined process with indicative penalties for minor breaches such as reporting or licensing offences, updates to OFSI’s public guidance on case assessments and penalty discounts for voluntary disclosure and cooperation as well as changes to statutory penalty maximums. These reforms would apply only to OFSI’s civil enforcement powers in relation to financial sanctions and the UK Maritime Services Ban and Oil Price Cap and would not affect criminal enforcement or non-financial sanctions. Responses are sought by 13 October 2025.

OFSI issues three General Licences for shipping and trading entities

The Office of Financial Sanctions Implementation (OFSI) has issued three General Licences under regulation 64 of the Russia (Sanctions) (EU Exit) Regulations 2019, SI 2019/855. General Licence INT/2025/6403704 permits the continuation of business operations for vessels owned or operated by, or on behalf of, the Government of the Gabonese Republic. General Licences INT/2025/6488808 and INT/2025/6397444 allow persons to wind down transactions involving Litasco Middle East DMCC and Intershipping Services LLC, respectively.

View Risk & Compliance by content type :

News