United Kingdom: Privacy Protection

The draft SECURE Data Act (also known under the longer title of The Securing and Establishing Consumer Uniform Rights and Enforcement over Data Act) is officially on the table in the US.

The Information Commissioner's Office has updated its guidance on direct marketing using electronic mail which now includes a substantial section regarding the 'charitable purposes soft opt-in'.

The King has opened the new parliamentary session and announced a number of Bills that may be relevant from a commercial, technology and regulatory perspective.

From 19 June 2026, all organisations that act as data controllers must have a formal process in place for individuals to raise data protection complaints directly with them

The European Data Protection Board has released a unified DPIA template for public consultation, marking a significant shift from fragmented national practices to coordinatead EU-wide compliance. This standardization effort aims to transform data protection impact assessments from procedural documents into substantive design accountability tools, requiring organizations to demonstrate not just that they conducted assessments, but that their processing activities can withstand rigorous evaluation.

This monthly update examines critical regulatory changes affecting DC pension scheme trustees, including the Finance Act's introduction of inheritance tax on pension benefits from April 2027, new data protection complaint processes under...

As we predicted in our Lewis Silkin's data, privacy & cyber team watch outs for 2026 "Children's data remains a global priority. There is a clear expectation that platforms popular with children will demonstrate end-to-end...

Further to our update here, several significant provisions of the UK's Data (Use and Access) Act 2025 (the "Act") that are relevant for employers came into force on February 5, 2026, with further measures scheduled for June 19, 2026. We summarize these below.

Organisations need to ensure that their processes for handling data protection complaints meet new rules under the Data (Use and Access) Act 2025 (DUAA) ahead of a 19 June 2026 deadline.