Insights
Our fresh and easy to digest take on privacy news and legislation updates.
Get our insights delivered monthly directly to your inbox.
- Claire Saunders
The Information Commissioner’s Office is today replaced by the Information Commission. From a practical standpoint (vis-à-vis changes to be made...
- Claire Saunders
The EDPB has released draft guidelines on fining under GDPR. The guidelines address the question of whether to fine rather...
- Alison Deighton
The National Cyber Security Centre has warned about the use of “shadow AI” by employees, citing a study in which...
- Jenai Nissim
In our latest article for Privacy Laws and Business, Jenai Nissim and Claire Saunders explore recurring traps in vendor governance...
- Ian Pemberton
The EU Cyber Resilience Act reporting requirements came into force on 11 September 2026. These provisions require manufacturers of products...
- Claire Saunders
The Dutch data protection authority has issued the second highest fine recorded under GDPR (EUR 825M) to Uber in relation...
- Claire Saunders
From 19 June 2026 all controllers processing personal data under UK GDPR must comply with new data protection complaints handling...
- Claire Saunders
Earlier this month, the EDPB adopted its 2026-2027 work programme which is part of its broader strategy for 2024-2027. In...
- Claire Saunders
A Record of Processing Activities (ROPA) is a cornerstone of UK GDPR compliance. Knowing what personal data you process, why...
- Claire Saunders
UK organisations are navigating an ever evolving data protection regulatory landscape. Staying compliant can feel like steering through fog, especially...
- Claire Saunders
So you are finally putting together your response to the Data Subject Access Request (DSAR), but what does it need...
- Claire Saunders
The right to access personal data is not absolute and there are situations where a controller will not need to...
Webinars
Learn the specifics of data protection legislation and key topics impacting data protection professionals.
- Ian Pemberton
As a controller, you are responsible for ensuring you only use processors who can give sufficient guarantees that they will...
- Claire Saunders
A focused webinar outlining the key updates the Digital Omnibus will make to the EU AI Act that will impact...
- Claire Saunders
Watch this webinar to understand the new UK regime. Gain insights into the legislative and regulatory expectations and guidance on...
- Claire Saunders
The Digital Omnibus announced by the EU Commission aims to help harmonise and simplify the EU digital regulatory framework. In...
- Claire Saunders
Alison Deighton and Mark Anderson from CDS discuss DSAR best practice and how to leverage AI.
...
- Claire Saunders
In this webinar, we cover key insights for businesses. Including the key impacts on UK data regime and what business...
Resources
Useful documents and links to support your data protection journey. View, download and share.
- Claire Saunders
Find the latest on the draft regulation here
...- Jenai Nissim
- Claire Saunders
In our in-depth review of the Data (Use and Access) Act 2025, we’ve distilled its key data protection provisions into...
- Claire Saunders
Our at a glance guide to the types of legislation you may need to consider when deploying AI in your...
- Claire Saunders