7/15/2026 12:28:08 PM Lessons From The European Supervisory Authorities’ First DORA Major Incident Report By Edward Machin On 3 June 2026, the European Supervisory Authorities — the European Banking Authority, the European Insurance and Occupational Pensions...
7/15/2026 9:08:38 AM Data Protection Changes Now in Effect: What Gibraltar Needs to Know By Michael Nahon The Data Protection Regulations 2026 came into force at midnight last night on the Implementation Date of the EU–UK Treaty on Gibraltar....
7/14/2026 7:27:37 PM Anonymous or not? The EDPB's new draft guidelines on anonymisation By Christoph Werkmeister Philipp Roos Julian Boatin On 7 July 2026, the European Data Protection Board (EDPB) adopted a draft version of the long-waited Guidelines 02/2026 on Anonymisation...
7/14/2026 12:49:06 PM EDPB web scraping guidelines for AI: Making the impossible possible? By Andy Splittgerber The EDPB’s new Guidelines 03/2026 address web scraping by private entities for generative AI training. They apply whenever personal data...
7/13/2026 9:01:09 AM The evolution of data protection By Joanne Bone Whilst UK GDPR continues to form the backbone of UK data protection laws in 2026, real estate businesses must now grapple with...
7/10/2026 10:32:10 AM Regulatory Frontier: Cybersecurity In A World Of New AI Models By Rohan Massey Maya Song Briana Fasone What You Need to Know — and Do — Now Frontier AI capabilities can now weaponise IT weaknesses in “a matter of minutes or hours,” the...
7/9/2026 9:34:40 AM NIS2 and GDPR Reporting Templates: Harmonising Content, Not Process in EU Incident Reporting By Rohan Massey New NIS2 and GDPR reporting templates promise to standardise the information organisations must provide to regulators following cyber...
7/9/2026 8:53:09 AM Telling the FCA about operational outages: the new incident reporting regime By Eve Ellis Edward Machin Lauren Aurelius Background Earlier this year, the Financial Conduct Authority (“FCA”) published details of its new framework of rules and guidance...
7/2/2026 4:19:08 PM Max Schrems Strikes Again: A Recent SCOTUS Decision Jeopardizes EU/U.S. Data Sharing By Matthew Richardson Morgan Jones Jase Panebianco As the 2026 World Cup progresses into the Round of 32, international rivalries are heating up. But while fans are debating whose sports...
6/30/2026 11:21:08 AM To converge or not to converge? That is the question: post-Brexit UK policy on digital regulation By Eleonor Duhs Last week the EU postponed two meetings: the first was the EU-UK summit, which was pushed back following Kier Starmer’s resignation as...
6/19/2026 2:05:49 PM Data (Use and Access) Act 2025 Update: Mandatory data protection complaints processes now in force By Hetal Ruparelia Georgia Maskell The new requirement for organisations to have a formal data protection complaints process in place comes into force today, 19 June 2026,...
6/16/2026 9:16:07 AM Social media to be banned for under-16s in landmark government move By Beverley Flynn Following on from our recent article on children’s online data: regulatory change and enforcement risk in 2026, the government has...
6/9/2026 2:05:37 PM Workplace Data Privacy quarterly report - Ius Laboris By Alexander Milner-Smith Sean Illing Lee Ramsay The first half of 2026 has seen workplace privacy developments gather pace worldwide. With our expert colleagues at Ius Laboris, we...
6/5/2026 7:51:37 PM Trump Executive Order on AI: Voluntary Framework, Cybersecurity Focus, and Key Takeaways By Beth George Megan Kayo Anna Gressel Timothy Howard Austin Evers Nema Milaninia Andres Calzada +4 more... Show less On June 2, 2026, President Trump issued a new Executive Order (EO), "Promoting Advanced Artificial Intelligence Innovation and Security."...
5/26/2026 9:57:25 AM Body worn cameras and CCTV: What to watch for By Hetal Ruparelia Georgia Maskell Daisy Tremlett There will be situations where organisations decide to use body worn cameras (BWCs) or CCTV, for example, to protect staff, manage risk...
5/22/2026 1:50:15 PM Data protection complaints - are you ready? By Ben Pumphrey From 19 June 2026, under an amendment to the Data Protection Act introduced by the Data (Use and Access) Act, organisations must have a...