October 27, 2025

Pseudonymisation under the GDPR: What the latest EU ruling means for organisations

On 4 September, the Court of Justice of the European Union (CJEU) delivered an important judgement in European Data Protection Board (EDPS) vs Single Resolution Board (SRB), providing fresh clarification on the status of pseudonymised data under the EU General Data Protection Regulation (GDPR). 
September 29, 2025

NHS DSPT: A guide to the latest requirements and avoiding common mistakes

Latest update 29 September 2025: This blog has been revised to include the most current DSPT submission requirements   In this blog, we detail the updated […]
July 3, 2025

DUAA vs UK GDPR: What businesses need to know

The UK’s Data (Use and Access) Act 2025 (DUAA) received Royal Assent on 19 June 2025. It does not replace the UK General Data Protection Regulation […]
June 23, 2025

Early overview of the Data (Use and Access) Act 2025 (DUAA)

The UK’s Data (Use and Access) Act 2025 (DUAA) received Royal Assent on 19 June 2025, introducing a series of updates to the UK GDPR, the […]
March 17, 2025

ICO’s guidance on Consent or Pay: What you need to know 

On 23 January 2025, the Information Commissioner’s Office (ICO) issued important guidance on ‘Consent or Pay‘ models for online tracking and personalised advertising. If you’re a publisher […]
October 14, 2024

Compliance with the AI Act Part 4: Essential strategies

Updated July 2026  Compliance with the EU AI Act requires ongoing action. Meeting requirements should be part of how AI systems are selected, developed, used and […]
August 19, 2024

Compliance with the AI Act Part 3: Who must comply and what are the obligations?

Updated July 2026  The EU AI Act has extra-territorial reach, which means it can apply to organisations both inside and outside the EU. Obligations depend on the AI […]
June 24, 2024

Compliance with the AI Act Part 2: What is ‘high-risk’ activity?

Updated July 2026  Could the way your organisation uses an AI system be classed as high-risk under the EU AI Act?  High-risk AI systems are permitted, but […]
June 10, 2024

Compliance with the AI Act part 1: Timeline and important deadlines

Updated July 2026 Compliance with the AI Act part 1: Timeline and important deadlines The EU AI Act is now in force, with its requirements taking effect in phases.  It applies to public […]
March 4, 2024

EDPB Report: Challenges faced by DPOs in Europe

On 17 January 2024, the European Data Protection Board (EDPB) published a report on a co-ordinated investigation into the role of Data Protection Officers (DPOs).  25 […]
Change your cookie consent