The UK data protection regulator, the Information Commissioner’s Office (ICO), has issued its first enforcement notice under the EU’s new strict data protection law, the General Data Protection Regulation (679/2016/EU) (GDPR). The notice is particularly noteworthy because it has been… Read more

In anticipation of the GDPR, various guidance has been published by the Article 29 Working Party, the body of national EU data regulators. Of most relevance in the cyber context is the guidance on personal data breach notifications; the Article… Read more

Model Services Contract: On 1 January 2018, the Cabinet Office, Crown Commercial Service ("CCS") and the Government Legal Service ("GLS") published an updated version of the Model Services Contract ("MSC"). This version is stated to reflect developments in government policy,… Read more

The post below was first published on our Employment blog Last week the UK Government released its negotiating position paper on international transfers of personal data within the EEA (The Exchange and Protection of Personal Data). Once the UK leaves… Read more

On 18 July 2017 the House of Lords European Union Committee (the "Committee") published a report covering the impact of Brexit on four aspects of the EU Data Protection Package: the General Data Protection Regulation (the "GDPR") which will become… Read more

On 12 July 2016 the European Commission adopted an "adequacy decision" allowing for the transatlantic transfer of personal data from the EU to the US in accordance with the framework and principles of the EU-US Privacy Shield (the "Privacy Shield").… Read more

The European Commission published its first draft of the EU General Data Protection Regulation ("GDPR") in January 2012, which set out a comprehensive reform of the current existing EU regime. The reform was designed to give citizens more control and… Read more