4/13/2026 1:52:38 PM Key FOI developments from 2025 - 2026 By Hannah Moran The past year has seen several important rulings and regulatory actions shaping how public authorities must handle Freedom of Information...
4/13/2026 12:44:37 PM Draft guidance on automated decision making issued By Electra Robinson The Information Commissioner’s Office (ICO) published updated draft guidance on automated decision‑making (ADM) and profiling on the 31...
4/9/2026 10:43:08 AM ICO guidance on compatibility and the re‑use of personal information issued By Beverley Flynn The Information Commissioner’s Office (ICO) has issued guidance on Compatibility and the reuse of personal information which provides...
4/7/2026 1:39:28 PM CJEU Russmedia: platforms responsible for personal data in advertisements By Lisa Peek On 2 December 2025, the Court of Justice of the European Union delivered an important judgment (Russmedia, C-492/23) on the...
4/3/2026 6:26:09 PM 2025 biometric data compliance updates By Abigail Walker Tyler Thompson It has been a busy year for data privacy legislation in North America, and biometric data was a major feature. Illinois made waves a few...
4/1/2026 8:57:53 PM A New Era for Child Online Privacy: Updated COPPA Rule and Maryland Kids Code Impose Additional Obligations By Christine Wilson Beth George Nema Milaninia Nina Frant Israa Saber +2 more... Show less The landscape of child online privacy is rapidly evolving, with significant new federal and state requirements coming into effect this...
4/1/2026 1:32:08 PM In Case You’ve Missed It: European Regulatory Updates from February & March 2026 By Eve Ellis Rohan Massey Edward Machin Azim Rahman Tegan Shyne Simran Gill Amanda Raad Sean Seelinger Nitish Upadhyaya +6 more... Show less Every month, our London regulatory team publish articles, alerts and blog posts on a wide range of European regulatory topics relevant to...
3/31/2026 5:51:07 PM Revisions to JMLSG Guidance By Eve Ellis Azim Rahman Edward Machin Following Board approval in January 2026, the Joint Money Laundering Steering Group (JMLSG) revised Part I of its guidance on anti-money...
3/31/2026 2:02:03 PM Quantum disentangled #4: Quantum and privacy – Why cross-border data transfers may become a quantum issue sooner than expected By Megan Kayo Christoph Werkmeister Richard Bird Cedric Lindenmann Fan Li Christian Sosna John-Markus Maddaloni +4 more... Show less When businesses send personal data across borders, they often rely on encryption to make that transfer legally defensible. But what...
3/30/2026 10:22:37 AM UK Ramps Up Underage User Restrictions and Enforcement By Elle Todd Oliver Hogg The last two weeks have seen a flurry of activity in the UK concerning the processing of children’s data by certain online services. Not...
3/26/2026 9:04:40 PM Sooner or Later: Oklahoma Joins the Data Privacy Wave By Megan Kayo Christine Chong Andres Calzada On March 20, 2026, Oklahoma Governor Kevin Stitt signed into law Senate Bill 546, the Oklahoma Computer Data Privacy Act (OCDPA). The new...
3/25/2026 4:05:31 PM Joint ICO–Ofcom Statement on Age Assurance: clear expectations for protecting children online By Alison Llewellyn The UK’s Information Commissioner’s Office (“ICO”) and Ofcom have today published a joint statement on age assurance (“Statement”). It...
3/23/2026 1:48:06 PM Access Denied: CJEU Closes The Door On Serial DSAR Litigants By Edward Machin Most organisations handling personal data will have received at least one subject access request that does not appear to have been made...
3/23/2026 1:00:27 PM UK ICO issues updated guidance on international transfers: Part 2 – transfer mechanisms for restricted transfers By Rachael Annear Philipp Roos Tochukwu Egenti Adam Gillert +1 more... Show less The UK’s General Data Protection Regulation (GDPR) regime imposes restrictions on the transfer of personal data outside the UK. In...
3/20/2026 9:06:37 PM Access denied: Even the first data subject access request can be abusive, according to the European Court of Justice By Alexander Hardinghaus Elena Diehl On 19 March 2026, the Court of Justice of the European Union (“CJEU”) delivered its long-awaited preliminary ruling in Case C-526/24. The...
3/19/2026 8:26:48 PM CJEU confirms that a single DSAR can be “excessive” if made with abusive intention By Christoph Werkmeister Satya Staes Polet Elena Brandt Quentin Fontaine Christian Sosna Adam Gillert +3 more... Show less Article 15 of the GDPR grants individuals the right to make a data subject access request (DSAR) to obtain confirmation from a controller...