UK Report - November 2025

Issue 142

Includes:

- DUAA introduces a new complaints-handling requirement
- Navigating the new ‘recognised legitimate interest’ lawful basis of public task disclosure
- Beyond cyber – beware of human error and process pitfalls
- Is it time for a UK Data Protection Ombudsman?
- UK GDPR certification under Art. 42

International Report - October 2025

Issue 197

Includes:

- Defending MAGA-speech: Trump’s war on global data privacy
- Australia seeks real-world privacy protections for children
- EU AI Act and GDPR: CJEU case law on automated processing and ADM
- France: CNIL’s latest AI guidance sets practical standards
- GDPR enforcement trends for companies in all sectors

UK Report - September 2025

Issue 141

Includes:

- DUAA data protection aspects in force by the end of this year
- ICO fines 23andMe £2.31 million – what have we learned?
- Meeting the demands of overlapping regulatory requirements
- Half-baked no more: Reheated rules on cookies and consent
- New Act enhances enforcement and investigatory powers

International Report - August 2025

Issue 196

Includes:

- Germany: Landmark case on using publicly available data for AI development
- Ireland imposes half of all EU GDPR fines in 2024
- GDPR simplification starts with one step at a time
- Data damage claims cause business headaches in the EU
- Malaysia’s complex new guidelines on cross-border data transfers

UK Report - July 2025

Issue 140

Includes:

- Data (Use and Access) Act 2025 becomes law
- Getting it right handling complex DSARs and how AI can help
- Mind the gap: Content Moderation in UK vs. EU
- What will the Cyber Security and Resilience Bill mean for you?
- The M&S cyber attack: Lessons for UK retailers

International Report - June 2025

Issue 195

Includes:

- Appeal Court upholds Belgian DPA decision against Real-Time Bidding
- Malta’s DPA backs EU GDPR record-keeping simplification
- EDPB advises on pseudonymisation
- Africa’s regional privacy culture
- 172 Countries with data privacy laws

UK Report - May 2025

Issue 139

Includes:

- Cross-border data transfers in turbulent times: The global impact of shifting policies
- ICO issued just 18 fines in 2024, and mostly under PECR
- EU delays the review of UK adequacy until the end of 2025
- Monitoring private communications under the Online Safety Act
- Lessons from the first ICO-approved UK GDPR Code of Conduct

International Report - April 2025

Issue 194

Incudes:

- Global data privacy laws 2025: 172 countries, 12 new in 2023/24
- The next chapter on the legal requirements for profiling
- Australia continues to push forward on online safety policy
- Ireland’s DP Commissioner Des Hogan: We expect more from large tech companies
- Biometrics at the crossroads of the AI Act and the GDPR