10/29/2026 10:01:37 AM France – Tech Law Insights #2: Email tracking pixels: What the CNIL’s guidance means in practice By Laéna Bouafy Jérôme Philippe Thomas Retière On 14 April 2026, following a public consultation held from 12 June to 24 July 2025, the CNIL published a recommendation it had adopted...
10/23/2026 5:44:05 PM How far will Farley go? Drawing the line on the threshold for GDPR compensation By Alex Buchanan Emily Thornton Richard Jeens Earlier this month, the Supreme Court heard Equiniti’s appeal in the Farley case, concerning compensation claims by police officers after...
10/22/2026 2:03:40 PM AI agents and UK data protection law: ICO sets out its expectations and calls for views By Giles Pratt Joseph Mason Catherine Lally On 8 October 2026, the UK Information Commission’s Office (ICO), which regulates privacy law in the UK, opened a call for evidence on how...
10/22/2026 10:52:08 AM The Cybersecurity Reality Check: Ten Myths That Matter By Edward Machin Comparatively few serious cyber incidents begin with a failure of sophisticated technology. Far more often, they start with a misplaced...
10/21/2026 3:13:05 PM Personal Data Breaches: When Does the GDPR Entitle Individuals to Compensation? By Caroline Bouvier In guidance published on 2 October 2026, the French Data Protection Authority (CNIL) clarifies an important point: a personal data breach...
10/16/2026 1:10:10 PM SDAIA Consults on Extensive Amendments to the Saudi PDPL Implementing Regulation By Alex Mackay Jamie Ryder On 6 October 2026 the Saudi Data and Artificial Intelligence Authority (SDAIA) published draft amendments to the Implementing Regulation...
10/16/2026 10:21:39 AM The new Information Sharing Duty to safeguard children: when should we share our information? By Ben Pumphrey Practitioners working with children have always been careful to keep safeguarding information confidential and not share it unless...
10/14/2026 8:42:37 PM To fine or not to fine? What the EDPB's new guidelines on imposing fines mean for organizations By Lukas Willecke When a data protection infringement comes to light, the first question most organizations ask is: What is our exposure to a fine? New...
10/14/2026 5:14:39 PM Ten Takeaways From the UK Government’s Strategy For AI Regulation in Healthcare By Edward Machin Artificial intelligence is moving from the margins of healthcare into its everyday operation — from tools that summarise clinical records...
10/5/2026 9:17:45 AM Stevens & Bolton tops South East for individual recognition in Legal 500 2027 By James Waddell Stevens & Bolton has secured 54 individual rankings in the South East in the newly published Legal 500 2027, the highest number of any...
9/30/2026 3:16:58 PM STAIRs publication scheme requirements go live on 01 October: Is your organisation ready? By Hetal Ruparelia Georgia Maskell Daisy Tremlett The publication requirements under the Social Tenant Access to Information Requirements (STAIRs) come into force tomorrow, 01 October...
9/28/2026 2:03:58 PM Choosing the Right RMC Starts Long Before the RFP Goes Out By Chris Pardo If your RMC contract is coming up for renewal, or you're building a program from scratch, it can be easy to treat the RFP as the starting...
9/25/2026 1:05:40 PM AI, Regulation, and Human Rights: "Patchy and Confused"? By Cian Murphy Parliament’s Joint Committee on Human Rights (“JCHR”), made up of members of both the House of Commons and the House of Lords, has...
9/23/2026 1:27:08 PM Lessons From Spain's First Reported Agentic AI Data Breach By Edward Machin Earlier this month, the Spanish data protection regulator (AEPD) disclosed that it had received the first notification of a personal data...
9/14/2026 5:57:37 PM The Data (Use and Access) Act 2025: transition from the Information Commissioner to the Information Commission By Beverley Flynn The UK government's programme of implementing the Data (Use and Access) Act 2025 (DUAA) continues with the making of the Data (Use and...
9/14/2026 9:47:12 AM The Vulnerability Was Real; The Exploit Was Impossible; The EU Cyber Resilience Act Reporting Obligation Was … Unclear? By Edward Machin Beginning last Friday (11 September 2026), manufacturers of products with digital elements that are made available on the European Union...