September 29, 2025

NHS DSPT: A guide to the latest requirements and avoiding common mistakes

Latest update 29 September 2025: This blog has been revised to include the most current DSPT submission requirements   In this blog, we detail the updated […]
July 3, 2025

DUAA vs UK GDPR: What businesses need to know

The UK’s Data (Use and Access) Act 2025 (DUAA) received Royal Assent on 19 June 2025. It does not replace the UK General Data Protection Regulation […]
June 23, 2025

Early overview of the Data (Use and Access) Act 2025 (DUAA)

The UK’s Data (Use and Access) Act 2025 (DUAA) received Royal Assent on 19 June 2025, introducing a series of updates to the UK GDPR, the […]
March 17, 2025

ICO’s guidance on Consent or Pay: What you need to know 

On 23 January 2025, the Information Commissioner’s Office (ICO) issued important guidance on ‘Consent or Pay‘ models for online tracking and personalised advertising. If you’re a publisher […]
October 14, 2024

Compliance with the AI Act Part 4: Essential strategies

As we wrap up our AI Act blog series, this final Part 4 explores some of the key strategies you can implement to keep your business […]
August 19, 2024

Compliance with the AI Act Part 3: Who must comply and what are the obligations?

On 1 August 2024, the European Artificial Intelligence Act (AI Act) was officially enacted – a pivotal moment in the regulation of AI technologies. Part 3 of our blog series explores […]
June 24, 2024

Compliance with the AI Act Part 2: What is ‘high-risk’ activity?

In the second part of our blog series, Compliance with the AI Act Part 2: What is ‘high-risk’ activity? we explore the AI Act’s risk-based approach […]
June 10, 2024

Compliance with the AI Act Part 1: Timeline and important deadlines

Our Compliance with the AI Act blog series explores what you need to know about the upcoming legal obligations of deploying certain artificial intelligence (AI) technologies […]
March 4, 2024

EDPB Report: Challenges faced by DPOs in Europe

On 17 January 2024, the European Data Protection Board (EDPB) published a report on a co-ordinated investigation into the role of Data Protection Officers (DPOs).  25 […]
February 20, 2023

CJEU Decision: Data subjects have the right to know who has received their personal data

In January 2023, the Court of Justice of the European Union (CJEU) in Case C-154/21, reached the decision that “every person has the right to know […]
Change your cookie consent