Information Law analysis: This case involved an appeal of a judicial review judgment of the High Court, holding that the government's second attempt to produce an immigration exemption under section 16 of the Data Protection Act 2018 (DPA 2018) (‘the Immigration Exemption’) from the rights of data subjects contained in the United Kingdom General Data Protection Regulation, Retained Regulation (EU) 201/679 (UK GDPR) was unlawful as it did not comply with Article 23(2)–(3) of the UK GDPR. The appeal was dismissed. The case also draws upon the interpretation of the UK GDPR as retained EU law. The guidance provided by the judge is especially topical given the introduction of the Retained EU Law (Revocation and Reform) Act 2023 (REUL(RR)A 2023) which alters the legal context which built the foundations of the claim. In the present case, if brought after the implementation of REUL(RR)A 2023, the decision may have been different, as no longer would the claim have relied on the principles of retained EU law. Written by Alexander Dittel, partner and Scarlet Mitchell, paralegal at Wedlake Bell LLP.