Following the Government’s promise to reform data protection laws in the UK post-Brexit, starting with the DCMS Consultation paper (“Data: a new direction”) in September 2021 (see our blog post on this here) and the announcement of the new Data Reform Bill in the Queen’s Speech in May 2022, the Government has now published its … Read more

Following the conclusion of the Information Commissioner’s Office (“ICO“) 2021 consultation on the UK’s draft international data transfer agreement and accompanying methodology, the Secretary of State laid before Parliament the final version of the transfer documents on 28 January 2022. Collectively, the following documents are intended to be used by organisations transferring personal data outside … Read more

A new dawn for UK data protection regulation is upon us, ushering a “golden age of growth and innovation” according to the UK Government. As Elizabeth Denham’s term as the UK Information Commissioner draws to a close at the end of this month, this is hot on the heels of the UK National AI Strategy … Read more

The new EU standard contractual clauses (New EU SCCs) came into force today for the transfer of personal data from the EEA to third countries under the EU General Data Protection Regulation (EU 2016/679) (EU GDPR). Read more

As the preferred new Information Commissioner appeared before the DCMS Select Committee for pre-appointment scrutiny today, we consider some of the key elements of the UK’s ambitious package of post-Brexit global data plans (“UK Global Data Plans“). Read more

The UK has taken its first big data protection step in a post-Brexit world with the Information Commissioner’s Office (“ICO“) publishing its own version of an international data transfer agreement and accompanying methodology for conducting international risk assessments on 11 August 2021. The ICO has published the following documents, which all inter-relate with one another: … Read more

With the interim data transfer window under the Brexit Trade Agreement expiring yesterday, on 28 June 2021 the European Commission adopted two adequacy decisions confirming the UK as an adequate jurisdiction for GDPR and Law Enforcement Directive purposes – just in time to allow the uninterrupted free flow of personal data from the European Union … Read more

Seven months after the European Commission published its draft new Standard Contractual Clauses for data transfers between EU and non-EU countries (the “Draft SCCs“) for consultation (see our blog post here (the “Draft SCCs Blog“)), they have now published a finalised set of Standard Contractual Clauses (“Final SCCs“) with little fanfare (available here). It should … Read more