In February, Information Commissioner John Edwards voluntarily stepped back from his duties to enable an independent workplace investigation to take place. The investigation has now concluded. www.privacylaws.com/news/john-ed...

June International Report is out now, includes: • Ireland DPC prioritises AI • Vietnam’s AI law now in force • Korea’s PIPA: Still Asia’s toughest • Demystifying EU Digital Identity • Generative AI and children + much more... www.privacylaws.com/reports-gate...

May UK Report: - Data mapping & AI compliance - Deepfake image-based sexual abuse & the limits of regulation - Automated decision-making in a post-DUAA world - Court of Appeal upholds ICO’s position in DSG case - Gamification enhances DP training + much more... www.privacylaws.com/reports-gate...

With the intersections between consumer protection, competition law and data protection law becoming ever more pronounced over time, Nel Anna Krzeslowska analyses how cross-regulatory cooperation at the EU level can aid in the development of new digital laws. www.privacylaws.com/reports-gate...

International Report April 2026 is out now This bumper edition marks our 200th International Report, a milestone which serves as a testament to PL&B Reports’ unique status as the longest-running publication in the field of privacy law www.privacylaws.com/reports-gate...

The European Parliament adopted on 26 March its final negotiating position on the Digital Omnibus on AI which is intended to amend the EU Artificial Intelligence (AI) Act, for example, by postponing certain high-risk AI obligations www.privacylaws.com/news/europea...

Join us in Dublin or online on 14 May for our Ireland conference Speakers include: - Michael McGrath, European Commissioner for Democracy, Justice, the Rule of Law and Consumer Protection - Dr Des Hogan, Ireland’s Commissioner for Data Protection www.privacylaws.com/events-gatew...

March UK Report is out now, includes: - ICO’s new enforcement toolkit - When an incident is just the tip of the cyber iceberg - Psychological toll of data breaches - Agentic AI: The ICO’s early signals on data protection risk - DUAA: Greater certainty on SARs www.privacylaws.com/reports-gate...

Under the DUAA, organisations must have a process for handling data protection complaints within their organisation. While this requirement is not in force until 19 June 2026, the ICO issued guidance on 12 Feb to help organisations meet their legal obligations www.privacylaws.com/news/ico-iss...

As we enter our 40th year, maybe we’re feeling celebratory or maybe we’re just getting old. Either way, take advantage and claim a 50% introductory discount to PL&B Reports! Not only will you get the Reports but you can also attend PL&B events for FREE www.privacylaws.com/reports-gate...

The EU Data Protection Board and the European Data Protection Supervisor strongly urge the co-legislators not to adopt the proposed changes to the definition of personal data, as they go far beyond a targeted or technical amendment of the GDPR www.privacylaws.com/news/edpb-an...

Under pressure to harness the benefits of Artificial Intelligence — without compromising data privacy? Join us on 5 March for our practical workshop for privacy professionals who want to confidently adopt AI technologies within legal and regulatory boundaries www.privacylaws.com/events-gatew...

February International Report is out now, includes - Data privacy mass claims: Emerging risks & procedural shifts in Europe & US - EU Digital Omnibus Package: Key GDPR reforms - Rules expand India’s DP law -Italy’s DPA fines Verisure -Protecting decisional privacy www.privacylaws.com/reports-gate...

The EU and Brazil adopted, on 27 January, mutual adequacy decisions which confirm that their levels of data protection are comparable. This recognition allows for personal data to flow freely between the EU and Brazil www.privacylaws.com/news/eu-and-...

The European Commission says that TikTok has agreed to provide advertising repositories (central locations) in which data is stored and managed to ensure full transparency around ads on its services, as required by the Digital Services Act www.privacylaws.com/news/tiktok-...

UK government has launched a consultation to seek views on whether under 16s should be banned from accessing social media. Other proposed measures include inspecting schools’ mobile phone policies www.privacylaws.com/news/governm...

The ICO has issued a consultation to seek organisations’ views on the processes the ICO follows when it suspects a breach of the UK GDPR or the Data Protection Act 2018 www.privacylaws.com/news/ico-con...

UK Report Jan 2026 out now: - Paying compensation under UK data protection law - Online Safety Act and UK DP laws converge on protecting children - Cyber Security and Resilience Bill - How to run a successful data champions programme + much more www.privacylaws.com/reports-gate...

The European Commission is currently seeking views on the establishment and operation of AI regulatory sandboxes as mandated by the EU AI Act www.privacylaws.com/news/eu-cons...

The European Commission’s spokesperson has today confirmed to PL&B that the European Commission is now finalising preparations with a view to having the new adequacy decisions in place before the end of the month www.privacylaws.com/news/uk-s-eu...

A new completely different market mechanism to tackle privacy issues, which addresses the absence of personal data markets and a bargaining power imbalance between companies and consumers, has been proposed by the Global Initiative for Digital Empowerment www.privacylaws.com/news/strengt...

December International Report out now: - Pseudonymised data is not always personal data, CJEU says - LinkedIn will limit the volume & nature of user data for AI training - Australia’s privacy payouts escalate - Where does robot data go? + much more... www.privacylaws.com/reports-gate...

Looking forward to our inaugural Meet the Correspondents event next week, 3 December, at Stephenson Harwood LLP in London It will be a great afternoon of talks central to the work of privacy law professionals and networking. Only a few places remain www.privacylaws.com/events-gatew...

Academics, legal & civil society representatives have written to the Science, Innovation & Technology Committee calling for an enquiry into the ICO’s enforcement, pointing out the ICO's shift away from enforcement in the public sector www.privacylaws.com/news/call-fo...

The EU Commission is proposing targeted amendments to the GDPR, for example to narrow the definition of personal data and to allow organisations the option to refuse an access request if it not made for data protection purposes, or charge a reasonable fee www.privacylaws.com/news/eu-star...

November UK Report out now: - DUAA introduces a new complaints-handling requirement - Navigating the new ‘recognised legitimate interest’ lawful basis - Beyond cyber – beware of human error & process pitfalls - UK GDPR certification under Art. 42 + much more... www.privacylaws.com/reports-gate...

The UK's ICO has issued a consultation to seek organisations’ views on the processes the ICO follows when it suspects a breach of the UK GDPR or the Data Protection Act 2018 www.privacylaws.com/news/ico-con...

We are excited to announce that our Student Essay Competition 2026 is now live! We invite university students worldwide to submit a 1500-word essay for a chance to win great prizes, such as free access to PL&B’s 39th International Conference in Cambridge www.privacylaws.com/reports-gate...

Join us next week on 4 Nov and get to grips with the common elements of principle and many differences in practice between US and European privacy laws Gain practical strategies for managing the fast developing privacy laws and privacy elements in other laws www.privacylaws.com/events-gatew...

The EDPB has published mostly positive opinions on the UK’s draft GDPR adequacy decisions published in July 2025, saying that it welcomes the continuing alignment between the UK and EU data protection frameworks www.privacylaws.com/news/edpb-is...

The ICO issued, on 15 October, a fine of £14m to Capita (Capita plc for £8m and Capita Pension Solutions Limited £6m) for a data security breach www.privacylaws.com/news/ico-fin...

Join us on 4 November for an illuminating panel event where leading voices from academia and industry will discuss how to respond to emerging challenges for age assurance www.privacylaws.com/events-gatew...

The European Data Protection Board’s new coordinated enforcement action will look into organisations’ compliance with the transparency and information obligations under the GDPR www.privacylaws.com/news/edpb-to...

October International Report is out now: - Defending MAGA speech: Trump’s war on global data Privacy - Australia seeks real-world privacy protections for children - CNIL’s AI guidance sets practical standards - GDPR enforcement trends for companies + much more www.privacylaws.com/reports-gate...

Join us on 3 December at Stephenson Harwood LLP for an afternoon of informative data protection talks and networking www.privacylaws.com/events-gatew...

Join us on 4 November at Latham & Watkins and get to grips with the common elements of principle and many differences in practice between US and European privacy laws. www.privacylaws.com/events-gatew...

While it has long been recognised that the ePrivacy Directive is outdated and attempts to adopt a regulation in this field have failed, the Commission recognises cookie consent fatigue, and the need to strengthen users’ digital rights online www.privacylaws.com/news/eu-laun...

The European Commission launched the process towards the adoption of a data protection adequacy decision with Brazil declaring that it ensures an adequate level of data protection on a similar basis to that of the EU www.privacylaws.com/news/eu-puts...

France’s Data Protection Authority, the CNIL, has fined Google €325 million & SHEIN €150 million, in particular for failing to comply with the rules on cookies www.privacylaws.com/news/cnil-fi...

UK Report Sept 2025 is out now, includes: - DUAA data protection aspects in force by end of 2025 - ICO fines 23andMe £2.31 million - Half-baked no more: Reheated rules on cookies & consent - New Act enhances enforcement and investigatory powers + much more www.privacylaws.com/reports-gate...

Join us on 1 Oct and hear from DSIT and ICO speakers on how the UK's DUAA 2025 will make it easier for businesses in the UK to develop products and services while ensuring a high standard of rights for individuals regarding their personal data www.privacylaws.com/events-gatew...

August International Report out now, inc: - Germany: Landmark case on using publicly available data for AI - Ireland imposes half of all EU GDPR fines in 2024 - GDPR simplification starts with one step at a time - Malaysia’s complex new guidelines www.privacylaws.com/reports-gate...

The UK government has issued the commencement dates for various parts of the Data (Use and Access) Act 2025, starting from 20 August 2025: www.privacylaws.com/news/data-us...

The European Commission has indicated in a draft decision that the UK remains adequate for EU-UK data flows under the new Data (Use and Access) Act 2025 www.privacylaws.com/news/eu-show...

The European Data Protection Board will be helping organisations to understand their GDPR obligations better by issuing simplified guidance #dataprotection #privacylaws #gdpr www.privacylaws.com/news/edpb-to...

Paul Arnold MBE is the first CEO of the future Information Commission which is created under the Data (Use and Access) Act 2025 (DUAA) www.privacylaws.com/news/paul-ar...

In its review of the economic impact of the GDPR, the CNIL chose to study the benefits of the GDPR. Its analysis focused on cybersecurity reveals that the GDPR has generated benefits between €585 million in identity theft cases and €1.4 billion in cyber damages www.privacylaws.com/news/cnil-sa...

July UK Report includes: - Data (Use and Access) Act 2025 - Handling complex DSARs, how AI can help - Mind the gap: Content Moderation in UK vs. EU - Cyber Security & Resilience Bill - M&S cyber attack: Lessons for retailers - ‘Is My Boss a Bot’? AI in recruitment www.privacylaws.com/reports-gate...

The UK Data (Use and Access) Bill has today received Royal Assent. The Department of Science and Technology will issue guidance and a commencement schedule in due course #dataprotection #privacylaws www.privacylaws.com/news/data-us...

The ICO has today issued a fine of £2.31million on 23andMe for failing to implement appropriate data security measures. Highly sensitive data of 155,592 people in the UK was compromised by the incident which affected seven million people globally www.privacylaws.com/news/ico-fin...