Since our previous blog on this subject, the Home Office has announced a further temporary change to the British National (Overseas) Visa until 19th July 2021. Up until this date, individuals can make...
Obtain valid consent for direct marketing to avoid fines
American Express has been fined £90,000 by UK data protection regulator, the ICO, for unlawfully sending more than 4 million unsolicited direct marketing emails, without having first obtained valid c...
Mandatory climate change reporting for organisations from 2022
The UK Government is proposing that from 2022 all large UK private companies and LLPs must include a report on climate change in their annual report. In this case, “large” means organisations with...
EU grants data adequacy decision in favour of UK (for now)…
With the temporary bridging period ending, the EU has finally ruled that UK data protection laws are ‘adequate’ for the purposes of transfers of personal data across borders. This will come as a h...
Key Documents your Company Needs to Demonstrate GDPR Compliance
Under the UK General Data Protection Regulation (GDPR) there are hefty fines for non-compliance, of up to 4% of global annual turnover or £17.5 million, whichever is the higher. Data protection is th...
What to do in the event of a personal data breach (hint: you have 72 hours to act, but don’t panic)
A breach of security which leads to the destruction, loss, alteration, unauthorised disclosure of, or access to, personal data, constitutes a data breach, whether accidental or deliberate. The breach ...
Replacement Standard Contractual Clauses Adopted for Personal Data Transfers
The European Commission (‘EC’) has announced its adoption of a new version of Standard Contractual Clauses (‘SCCs’) for use between entities transferring personal data to countries outside of ...
Check whether you need to appoint a Data Protection Representative post-Brexit and avoid fines
Earlier this month, a company based outside of the EU, Locatefamily.com, was fined €525,000 for failing to appoint a Data Protection Representative (DPR). This highlights the importance of not overl...
Copy cat…erpillar? Colin vs Cuthbert
Marks & Spencer has begun legal action against fellow-supermarket chain, Aldi, arguing that Aldi’s ‘Cuthbert the Caterpillar’ cake, infringes its own ‘Colin the Caterpillar’ intellectual...
One step closer to personal data flowing freely between the EU and UK
The UK is eagerly awaiting an ‘adequacy decision’ by the EU Commission (EC) to confirm that UK laws provide an adequate level of protection of personal data. If this is not granted, businesses wil...
