United Kingdom: Privacy

The UK's proposed social media ban for under-16s is driving platforms to implement highly effective age assurance, with facial age estimation emerging as the market standard. However, compliance requires navigating two distinct regulatory frameworks - the Online Safety Act and UK GDPR - where satisfying one regime does not automatically ensure compliance with the other, creating significant legal and technical challenges for online services.

IAASA has published its annual observations on selected corporate reporting issues for years ending on or after 31 December 2026 (PDF, 683 KB).

Mishcon de Reya's Data team explores the critical challenges of managing personal data breaches across multiple jurisdictions, examining how notification obligations, regulatory expectations, and personal liability for directors vary significantly between markets. Drawing from a hypothetical cross-border incident scenario, the firm's experts reveal why preparation, local counsel networks, and understanding jurisdictional differences are essential before a breach occurs.