Get a good background to data protection law and view practical guidance focused on data protection matters for commercial transactions. See also our UK GDPR compliant pro-party clauses for use in commercial agreements.
Protect trade secrets and know-how using the law of confidentiality. Get information and a set of pro-party confidentiality agreements here.
View a range of trackers to enable horizon scanning and monitoring of key developments. The trackers are maintained - making them useful for keeping up-to-date and for business development.
It’s our online practical guidance product for contentious and non-contentious lawyers dealing with Data Protection, Confidential Information, Privacy, Cybersecurity and Freedom of Information issues.
The Information Commissioner's Office (ICO), together with Nesta's Centre for Collective Intelligence (CCI), has published a report setting out the...
This week’s edition of Information Law weekly highlights includes a hand-picked summary of news analysis, updates and new content related to laws...
The Information Commissioner's Office (ICO) has published its annual report for 2025–26, marking what it describes as the final full year before...
The Information Commissioner’s Office (ICO) has updated its guidance on the right of access to reflect changes introduced by the Data (Use and Access)...
MLex: Senior lawmakers have warned that the UK’s Cyber Resilience and Security Bill does not effectively incorporate AI, as the government faces...
This Practice Note provides an overview of retained EU law as it applied from 2021–23, including the key definitions and concepts with reference to...
IntroductionThe body of domestic law derived originally from EU obligations and established by the European Union (Withdrawal) Act 2018 (EU(W)A 2018)...
What is the World Trade Organization (WTO)?The WTO administers the WTO trade agreements which govern trade between states. It is also a forum for...
ARCHIVED: This Practice Note has been archived and is not maintained.As of 31 January 2020 (exit day), the UK is no longer an EU Member State and its...
ARCHIVED: This Practice Note has been archived and is not maintained. It tracks the progress of UK primary legislation introduced as part of the...
ARCHIVED: This Precedent has been archived and is not maintained.These training materials consist of template PowerPoint slides that can be used as...
This Agreement is made on [date]Parties1[insert name of Party A][ of OR a company incorporated in [England and Wales] under number [insert registered...
ARCHIVED: This Precedent has been archived and is not maintained.[Name][Address]Ref No: [number][Date]...
In briefChapter V (Transfers of personal data to third countries or international organisations) of the United Kingdom General Data Protection...
This Agreement is dated [insert date]Parties1[insert name] [of OR a company incorporated in [England and Wales] under number [insert registered...
The UK General Data Protection Regulation (UK GDPR)—NavigatorThis Practice Note serves as a reference guide to the Retained Regulation (EU) 2016/679...
Privacy law—misuse of private informationThe tort of misuse of private information is focused on ‘the protection of human autonomy and dignity—the...
Confidentiality agreement—mutualThis Agreement is made on [date]Parties1[insert name of party] [of [insert details ] OR a company incorporated in...
The Information Commissioner’s Office (ICO)The Information Commissioner’s Office (ICO) is the UK’s independent regulator designed to uphold...
The UK General Data Protection Regulation (UK GDPR)This Practice Note provides a summary of the UK GDPR regime. For a higher-level introduction to UK...
Letter of claim—breach of confidence[Insert name and address of recipient]Dear [insert organisation name],[Name of client] and confidential...
Trade secrets and confidential information—protection and enforcementThis Practice Note sets out the protection available for trade secrets and...
Introduction to the EU GDPR and UK GDPRThis Practice Note provides a high-level introduction to the EU’s General Data Protection Regulation,...
Data protection, privacy and confidential information case law trackerThis Practice Note tracks noteworthy High Court, Court of Appeal and Supreme...
Commercial use of photographs—data protection and privacy issuesThis Practice Note addresses issues affecting professional photographers taking...
Letter of claim—breach of data protection law[Insert name and address of recipient]Dear [insert organisation name],[Name of client] and breach of data...
What does IP completion day mean for Information Law? [Archived]ARCHIVED: This Practice Note has been archived and is not maintained.11 pm (GMT) on 31...
Confidential information, privacy and injunctionsThis Practice Note deals with the general principles of obtaining an injunction relating to...
The Data Protection Act 2018This Practice Note introduces the UK’s Data Protection Act 2018 (DPA 2018).For higher-level introductions to data...
means all information of a confidential nature (in whatever form) which relates to the Purpose and is received or acquired (whether directly or indirectly) by a party[, its Authorised Persons][ or its Affiliates] including: (a) any know-how, trade secrets, financial, commercial, technical, tactical or strategic information of any kind; (b) all information produced, developed or derived from information disclosed pursuant to this Agreement; (c) all information agreed to be, or marked as, confidential; (d) [the information specified in Schedule [insert Schedule number] to this Agreement;] (e) any information a party[, its Affiliates][ or [its OR their] Authorised Persons] knows, or could reasonably be expected to know, is confidential; and (f) [the terms and existence of this Agreement.] but excluding any information which: (a) is, or was already known or available to a party, otherwise than pursuant to or through breach of any confidentiality obligation owed to the other party; (b) is, or becomes, in the public domain other than through any breach of this Agreement (save that any publicly available information shall be classified as Confidential Information where it is compiled in a form that is not in the public domain); (c) is disclosed to a party without any obligation of confidence to the other party by an individual or entity which is not itself under or in breach of any obligation of confidentiality; (d) is developed by or on behalf of a party in circumstances where the developing party has not had direct or indirect access to the information disclosed by the other party, provided that satisfactory evidence of the same is provided to the disclosing party; (e) the parties agree in writing does not constitute Confidential Information.
means: a service within the meaning of point (b) of Article 1(1) of Directive (EU) 2015/1535 which is of any the following kinds: ? online market place ? online search engine ? cloud computing service
the ability of network and information systems to resist, at a given level of confidence, any action that compromises the availability, authenticity, integrity or confidentiality of stored, transmitted or processed data, or the related services offered by, or accessible via, those systems. As noted in the ICO’s guidance, this definition essentially refers to the concept of ‘information security’, and aligns closely with established standards such as ISO/IEC 27000: 2018