United Kingdom: Privacy

Whilst the Data (Use and Access) Act 2025 ("DUA Act 2025") received Royal Assent back in June 2025, the most significant changes under the UK's long-awaited data protection...

On 18 March 2026, we marked the publication of our Commercial, Technology and Regulatory Annual Handbook 2026 with a panel event in Manchester attended by in-house lawyers...

On 19 June 2026, one year after the Data (Use and Access) Act 2025 (“DUAA”) received Royal Assent, all data controllers subject to UK data protection law will be required...

In the latest edition of our A&M series, Bryony Long, Rupam Davé and Mark Hersey (Lewis Silkin LLP) were joined by Gary Kibel (Davis + Gilbert LLP) to discuss regulatory changes...

The UK Information Commissioner’s Office (ICO) published its Tech Futures: Agentic AI report on Jan. 8, 2026, offering its first analysis of AI agents. The report underscores that agentic AI introduces fundamentally new data protection challenges and that agentic capabilities magnify existing risks from generative AI.

In a two-pronged approach covering online safety and data protection laws, both Ofcom and the ICO have written to major tech platforms to ask them to enforce their minimum age rules with highly effective age checks.