Introduction The UK’s Court of Appeal has given a significant ruling concerning the role of the UK data protection regulator the Information Commissioner’s Office (ICO) when a  handling a data protection law complaint, deciding in particular that the ICO has broad discretion. This article looks at this latest ruling in brief. What’s this all about? Read more »

Introduction The UK’s Upper Tribunal (“the Tribunal”) recently rejected an appeal in the case of Doorstep Dispensaree Limited v The Information Commissioner (“the ICO”), including on the basis that the decision of the First-tier Tribunal did not involve an error on a point of law concerning the legal issue of which standard of proof should Read more »

What’s this all about? With the rise of remote working and developments in the technology available, many employers are looking to carry out checks on staff. This type of monitoring includes tracking calls, emails, messages, internet activity and keystrokes, taking screenshots, webcam footage or audio recordings, using specialist monitoring software to track activity, tracking staff Read more »

What’s this all about? The UK data protection regulator the Information Commissioner’s Office (“the ICO”) recently started a consultation concerning new draft guidance about fines (“the draft Guidance”), which this article looks at in brief. What’s in the draft Guidance in a nutshell? The ICO is consulting on new draft guidance about how it decides Read more »

What’s this all about? The UK government recently announced and put into motion the next steps concerning the so-called “UK-US Data Bridge” which aim at providing smoother personal data flows from the UK to the US, which this article looks at in brief. What has the UK government announced? The UK government Department for Science, Read more »

What’s this all about? The much-awaited EU-US Data Privacy Framework (“the DPF”) finally arrived earlier in the summer. Following the European Court of Justice’s ruling over three years ago that the EU-US Privacy Shield data transfer system was invalid the EU and the US have been working to find a replacement system. The result is Read more »

Introduction In the recent decision concerning the UK law firm Swinburne, Snowball and Jackson (“the law firm”) the UK Information Commissioner’s Office (“the ICO”) issued an official reprimand with regard to various infringements of UK GDPR security provisions committed by the law firm and also expressed its concerns about the firm’s late reporting to the Read more »