Now that the deadlines have passed for implementing: EU Standard Contractual Clauses (“EU SCCs”) into all new and existing contractual arrangements involving restricted transfers of data under the EU GDPR; and the UK equivalent to the EU SCCs (the UK specific International Data Transfer Agreement (“IDTA“) or the EU SCCs in combination with the UK … Read more

On 13 January 2022, the draft Guidelines for Identification of Critical Data (“Draft Guidelines“) were released. The public consultation period will end on 13 March 2022.  This is a key step for the full enforcement of the Data Security Law (“DSL“) which came into force on 1 September 2021. Read more

Following the conclusion of the Information Commissioner’s Office (“ICO“) 2021 consultation on the UK’s draft international data transfer agreement and accompanying methodology, the Secretary of State laid before Parliament the final version of the transfer documents on 28 January 2022. Collectively, the following documents are intended to be used by organisations transferring personal data outside … Read more

Happy International Data Privacy Day! And what better day than today, to explore what 2022 is likely to have in store for data and privacy? One year on from the introduction of the UK GDPR in a post-Brexit Britain. Two years on from the start of a global pandemic which forced a discussion around the … Read more

Executive Summary On 12 October 2021, the Information Commissioner’s Office (“ICO“) opened its consultation in relation to the use of the beta version of its AI and data protection risk mitigation and management toolkit (the “Consultation“). The Consultation runs until 1 December 2021 and the ICO is seeking responses from all industry sectors and from … Read more

 G20 nation moves to modernised privacy code for online platforms, including binding rules. The proposed scope – and stakes for industry players – is substantial. On 25 October 2021, the Australian Attorney-General’s department released, for public consultation, an exposure draft bill introducing amendments to the Privacy Act 1988 (Cth) (the Privacy Legislation Amendment (Enhancing Online Privacy and … Read more

A new dawn for UK data protection regulation is upon us, ushering a “golden age of growth and innovation” according to the UK Government. As Elizabeth Denham’s term as the UK Information Commissioner draws to a close at the end of this month, this is hot on the heels of the UK National AI Strategy … Read more

Two recent publications by the Australian Attorney-General’s Department mark significant steps forward on the long road to reform of Australian privacy legislation: An Online Privacy Bill Exposure Draft introducing amendments to the Privacy Act 1988 (Cth) (“Online Privacy Bill”), which will strengthen penalties and enforcement measures and introduce a binding privacy code for online platforms. … Read more