Data protection compliance

Protecting sensitive data is paramount. Legal practitioners must stay ahead of evolving regulations to ensure compliance and mitigate risks associated with data breaches. This guidance provides the latest best practices, statutory updates, and actionable insights, equipping you with the tools to navigate the demanding landscape of data protection compliance effectively.

View Risk & Compliance by content type:

News
Practice notes
Precedents
Q&As

Sub Topics We Cover

Compliance planning Data breaches Data mapping Data protection by design & default Data protection complaints Data protection impact assessment Data protection officer Data subject rights Direct marketing Handling data subject requests Identifying & assessing risks International data protection International transfers Privacy policies & notices Processing & transferring data Regulatory regime Training & awareness

Latest Risk & Compliance News

OFSI imposes £390,000 penalty on Apple Distribution International Limited for financial sanctions breach

OFSI imposes £390,000 penalty on Apple Distribution International Limited for financial sanctions breach

The Office of Financial Sanctions Implementation (OFSI) has published a report detailing the imposition of a £390,000 penalty on Apple Distribution...

OFSI extends General Licence INT/2023/2824812

OFSI extends General Licence INT/2023/2824812

The Office of Financial Sanctions Implementation (OFSI) has extended General Licence INT/2023/2824812, which relates to bond amendments and...

Risk & Compliance weekly highlights—26 March 2026

Risk & Compliance weekly highlights—26 March 2026

This week's edition of Risk & Compliance weekly highlights includes the ICO's guidance on the new lawful basis of recognised legitimate interest and...

ICO updates data protection guidances following D(UA)A 2025 and publishes guidance on recognised legitimate interest

ICO updates data protection guidances following D(UA)A 2025 and publishes guidance on recognised legitimate interest

The Information Commissioner’s Office (ICO) has updated three guidances:...

Featured Risk & Compliance content

Can I charge a fee for dealing with a data subject access request?

Can I charge a fee for dealing with a data subject access request?

Can I charge a fee for dealing with a data subject access request?The General Data Protection Regulation (GDPR) provides for enhanced rights for data...

How to plan and conduct an internal investigation

How to plan and conduct an internal investigation

How to plan and conduct an internal investigationAn internal investigation is a legal process undertaken by an organisation (with or without outside...

Can a limited company make a subject access request? Can a director of a limited company ask for recordings of calls with us? If yes, what personal data must we provide?

Can a limited company make a subject access request? Can a director of a limited company ask for recordings of calls with us? If yes, what personal data must we provide?

Can a limited company make a subject access request? Can a director of a limited company ask for recordings of calls with us? If yes, what personal...

Anti-bribery and corruption—post-training assessment answers

Anti-bribery and corruption—post-training assessment answers

Anti-bribery and corruption—post-training assessment answersQuestionCorrect answer1. How many new offences does the Bribery Act 2010 create? (b)...

Q&As

Who can certify identification documents (passports, driving licences, utility bills, etc)?

Who can certify identification documents (passports, driving licences, utility bills, etc)?Government guidance on Certifying a document states...
Read More >
2nd Jun
Practice notes

Money Laundering Regulations 2017—scope and application

Money Laundering Regulations 2017—scope and applicationThis Practice Note sets out the scope and application of the Money Laundering, Terrorist...
Read More >
30th May
Practice notes

Money Laundering Regulations 2017—nominated officer

Money Laundering Regulations 2017—nominated officerThis Practice Note sets out when organisations must appoint a nominated officer (sometimes referred...
Read More >
30th May
tag iconIn-house
Practice notes

Sanctions regime—Russia

Sanctions regime—RussiaThe Russia (Sanctions) (EU Exit) Regulations 2019, SI 2019/855, made under the Sanctions and Anti-Money Laundering Act 2018...
Read More >
2nd Jun
tag iconInternational sanctions
Practice notes

How to manage legal risk

How to manage legal riskIt is often said that running a business means taking risks and that the biggest risk an entrepreneur can take is not to think...
Read More >
Produced in partnership with Elizabeth Bourlet
13th Oct
Practice notes

Contract management risk management guide

Contract management risk management guideWhy you need to manage this riskContract management is often seen by the business as an activity which is...
Read More >
Produced in partnership with Elizabeth Bourlet
13th Oct
tag iconIn-house
Precedents

Competition law compliance—post-training assessment answers

Competition law compliance—post-training assessment answersQuestionCorrect answer1. Competition law protects business and consumers from...
Read More >
2nd Jun
Practice notes

SRA Code of Conduct for Solicitors, RELs and RFLs—for in-house lawyers

SRA Code of Conduct for Solicitors, RELs and RFLs—for in-house lawyersThis Practice Note provides guidance for in-house solicitors on the SRA Code of...
Read More >
30th May
Precedents

Anti-bribery and corruption—post-training assessment questions

Anti-bribery and corruption—post-training assessment questionsHow to use this testThese questions are designed to test your understanding after your...
Read More >
30th May
Practice notes

How to create a legal risk register

How to create a legal risk registerThis Practice Note is intended for in-house lawyers. It explains how to create a legal risk register, a tool that...
Read More >
30th May
Practice notes

Tipping-off and prejudicing an investigation

Tipping-off and prejudicing an investigationThere are several offences of tipping-off and prejudicing an investigation that apply to the regulated...
Read More >
30th May
Practice notes

Confidentiality risk management guide

Confidentiality risk management guideWhy you need to manage this riskConfidential information is one of the most valuable assets of any business....
Read More >
Produced in partnership with Ishika Patel of Lawyers on Demand
30th May
Precedents

Records retention schedule

Records retention schedule1Introduction1.1This Record retention schedule accompanies and is incorporated into [insert organisation’s name]’s Records...
Read More >
30th May
Practice notes

Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017—key information for businesses

Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017—key information for businessesThe Money...
Read More >
30th May
Q&As

Refusing a data subject request—what is ‘manifestly unfounded or excessive’?

Refusing a data subject request—what is ‘manifestly unfounded or excessive’?The General Data Protection Regulation (GDPR) provides for enhanced rights...
Read More >
30th May
Practice notes

Dawn raid—who can raid my organisation and why?

Dawn raid—who can raid my organisation and why?The UK Government has legislated to permit a number of UK authorities to obtain search warrants to...
Read More >
Produced in partnership with Michael Potts and Arozo Gajia of PCB Byrne
30th May
tag iconIn-house

Popular documents

If a rentcharge is shown as being informally exonerated on title information, does this apply to the

If a rentcharge is shown as being informally exonerated on title information, does this apply to the current registered owner? Or does the informal exoneration only apply to the parties to the document which informally exonerated the rentcharge?This Q&A considers the situation where, at some

If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal

If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal fees, will that count as a PET against their estate?A disclaimer is the refusal of a gift prior to acceptance. The refusal of the gift must take place before the beneficiary accepts any benefit

Strike out—making an application to strike out a statement of case

Strike out—making an application to strike out a statement of caseA strike out order can be made either following an application by the parties or on the court's own initiative. This Practice Note deals with the scenario of the order being made following a party's application.Making an application

Can shares in a limited company that have not been paid-up at all be cancelled?

Can shares in a limited company that have not been paid-up at all be cancelled?A limited company having a share capital may not alter that share capital, except in the ways listed in section 617 of the Companies Act 2006 (CA 2006). Shares in a company cannot simply be cancelled without following an