3/11/2026 11:01:36 AM Safeguarding the Portfolio: Incident Readiness and the Cyber Landscape in 2026 By Edward Machin Last week, Ropes & Gray’s Data, Privacy and Cybersecurity team partnered with FTI Consulting to host a roundtable breakfast in London for...
3/9/2026 4:38:04 PM UK ICO issues updated guidance on international transfers: Part 1 – identifying restricted transfers By Rachael Annear Giles Pratt Philipp Roos Tochukwu Egenti Adam Gillert +2 more... Show less The UK’s General Data Protection Regulation (GDPR) regime imposes restrictions on the transfer of personal data outside the UK. In...
3/9/2026 4:35:06 PM EDPB report on the right to erasure: Key takeaways from the 2025 Coordinated Enforcement Action and what controllers must do now By Lukas Willecke When 32 data protection authorities (DPAs) across Europe spend a year scrutinizing how organizations handle requests to delete personal...
3/9/2026 11:50:07 AM OECD Publishes Responsible AI Due Diligence Guidance for Multinational Enterprises By Michael Littenberg Samantha Elliott Kelley Murphy Responsible AI practices are a growing focus within many companies and in society at large. In late February, the Organisation for...
3/6/2026 3:30:37 PM Data (Use and Access) Act 2025: what does it mean in practice for health and social care? By Ben Pumphrey Nearly a year has passed since the Data (Use and Access) Act 2025 was brought into law, and important legislative changes to the UK GDPR...
3/6/2026 12:18:37 PM Spurgeon & Ors v Capita: High Court Refuses Application to Strike Out Data Breach Compensation Claims By Rohan Massey Spurgeon & Ors v Capita plc [2026] EWHC 241 (KB) (9 February 2026). The High Court has refused an application to strike out compensation...
3/5/2026 4:02:00 PM NDAs and Confidentiality in Joint Ventures and commercial relationships - Illiquidx v Altana: One Year On By Thomas Molony Joanna Bouloux Jonathan Corris One year on from the Illiquidx Ltd v Altana Wealth Ltd judgment (following the collapse of a joint venture between the parties), we...
3/2/2026 10:25:14 AM Reddit fined record £14.47m by ICO for children’s privacy failures By Beverley Flynn Guy Cartwright The Information Commissioner’s Office (ICO) has fined US based social news service Reddit £14.5m for using the data of children under the...
2/27/2026 3:41:42 PM Privacy Whistleblowers Eligible for Significant Awards and Protections Under Proposed California Bill By Brock Dahl Timothy Howard Megan Kayo Nema Milaninia Matthew Johnson +2 more... Show less The already demanding compliance landscape created by the California Consumer Privacy Act (CCPA) and California’s ever-expanding...
2/26/2026 4:32:07 PM ICO wins Court of Appeal ruling on scope of security duty and definition of personal data By Beverley Flynn Guy Cartwright Emma Thompson The Information Commissioner’s Office (ICO) has won an important Court of Appeal ruling on the scope of security duty and definition of...
2/26/2026 9:12:37 AM ICO continues to show teeth when it comes to protecting children's data - will this be the theme of 2026? By Alexander Milner-Smith As we predicted in our Lewis Silkin’s data, privacy & cyber team watch outs for 2026 “Children’s data remains a global priority. There is...
2/25/2026 5:17:36 PM Australia in focus: Data protection and AI in Australia By Mike Summers Tyler Thompson Introduction Australia's privacy regulatory landscape presents a distinct framework that organizations operating in or targeting the...
2/25/2026 3:36:36 PM French Court of Appeal clarifies limits on employee subject access requests By Michael Charalambous A recent decision from the French Court of Appeal (available here in French) has confirmed that employees cannot rely on their right of...
2/24/2026 4:53:07 PM Nebraska Joins the Kids Code Movement By Sarah Bruno The regulatory landmines in children’s data protection are multiplying, and in 2026, Nebraska officially steps into the field. With the...
2/24/2026 12:12:30 PM Agentic AI and data protection: guidance from the Spanish AEPD By Ceyhun Pehlivan The Spanish Data Protection Agency (AEPD) has published detailed technical guidance on agentic artificial intelligence from a data...
2/24/2026 9:58:39 AM Connected Car Services - Part 2: International Data Flows and Gibraltar. By Jerome Compson Jeremy Requena Connected car services depend on international data flows, from vehicles roaming across borders to cloud services distributed globally....