Related insights: Data, Privacy and FOI

Thumbnail

Government U-turns on Brexit Bonfire Bill - good news for UK businesses

18 May 2023
The Retained EU Law (Revocation and Reform) Bill 2022, commonly referred to as the Brexit Bonfire Bill, is intended to end the principle of the supremacy of EU law. The Bill empowers UK Government to restate, revoke and replace retained EU law. So far, in the region of 4,800 pieces of retained EU law have been identified and this total is likely to keep increasing. UK Government says the Bill will remove needless bureaucracy and encourage innovation. However, many businesses who operate across the UK and EU are less enthused about the prospect of abandoning EU laws and the resultant regulatory divergence, since complying with two different regulatory regimes adds cost and complexity.
Thumbnail

AI and liability 2023: a guide to liability rules for Artificial Intelligence in the UK and EU

09 May 2023
Businesses increasingly look to AI tools to improve efficiency, increase productivity, and find new revenue streams. However, care must also be taken as AI adoption comes with a liability risk, should anyone come to harm as a result of the technology, with tech leaders expressing concerns over the rapid development of AI. Adopting AI technologies without appropriate due diligence could lead to an onslaught of liability claims, especially if proposed legislation comes into effect in the EU.
Thumbnail

How to improve online security in your organisation - World Password Day 2023

04 May 2023
Strengthening our digital defences against cybercriminals takes centre spotlight this World Password Day (Thursday 4 May), as the gateways to our digital identities come increasingly under attack.

When it comes to avoiding a password hack, how knowledge-equipped is the UK public and are the wider implications for businesses fully understood when it comes to password security?

In our independent survey* of 3,000 people, which set out to identify how many people practice good password safeguards, we found that 25% of respondents duplicate passwords for both work and personal use. But are these just the ones who admit it?
Thumbnail

"A great opportunity to lead the tech discussion" - North East digital sector: 2023 outlook event report

21 Mar 2023
The tech sector is one of the bright spots in a somewhat wobbly UK economy, punching above its weight against the giants of the US and China, and leading the way in Europe.
In the North East, the industry is continuing to accelerate, with firms attracting inward investment and seeing record growth, with £2 billion revenue in 2022 and employment for 30,000 people across 3000 creative and digital businesses.
Thumbnail

UK data protection reform: New Data Protection and Digital Information Bill (No 2)

17 Mar 2023
The Data Protection and Digital Information Bill (DPDI Bill (No 1)) was presented to Parliament on 18 July 2022. Since then, the Government has been in consultation with the Business Advisory Group, and responsibility for DPDI Bill (No 1) passed from the Department for Digital, Culture, Media and Sport (DCMS) to the newly formed Department for Science, Innovation and Technology (DSIT). However, DPDI Bill (No 1) had not made any progress through Parliament, owing, at least in part, to the fractious political goings on of 2022.
Thumbnail

Tribunal considers lawfulness of Experian's direct marketing operations

06 Mar 2023
In a recent case, Experian Limited v the ICO [2023] UKFTT 00132 (GRC), the First-Tier Tribunal (Information Rights) provided useful judicial commentary for data controllers in relation to the appropriateness of using "legitimate interests" as a lawful basis for direct marketing purposes, what constitutes sufficient transparency of processing, and the application of Article 14 of the GDPR.
Thumbnail

Data Subject Access Requests - required to provide copies of emails?

09 Feb 2023
Following our two-part series which considered the impact of European decisions on the scope of data subject access requests (DSARs), a further opinion has been released by the AG that limits the scope of DSARs.

This opinion (in the case of Österreichische Datenschutzbehörde and CRIF - Case C-487/21) concerns whether the data subject is entitled to a "copy" of the document which contains their personal data, or if it is sufficient to provide an extract. 

This decision could have large practical impacts on how data controllers respond to DSARs both in the EU (where it is directly applicable) and in the UK (where it will be persuasive).