United Kingdom: Privacy Protection

Lewis Silkin's comprehensive legal and regulatory information hub provides essential details about the firm's policies, procedures, and compliance frameworks. From accessibility standards and complaint procedures to modern slavery statements and privacy policies, this resource center addresses key operational and ethical considerations. How does a leading law firm balance transparency, regulatory compliance, and client service in its corporate governance?

The UK public sector is increasingly deploying AI chatbots to provide advice to vulnerable individuals, including carers of seriously ill relatives. While some guidance proves helpful, significant concerns are emerging about data protection compliance, legal accountability, and the ethical implications of using these systems without proper safeguards or due diligence.

BCL Partners Richard Reichman and John Binns have contributed to LexisNexis, examining the implications of section 250 of the Crime and Policing Act 2026 and whether the expansion of corporate criminal liability is likely to have the transformative effect many anticipate.

The UK Information Commissioner's Office has published final guidance on a new lawful basis for processing personal data under the UK GDPR, introduced by the Data (Use and Access) Act 2025. This recognised legitimate interest basis provides five pre-approved processing purposes deemed to be in the public interest, offering organisations an alternative pathway for lawful data processing in specific circumstances.

The National Security (State Threats) Bill 2026, introduced to Parliament on 9 June, grants the Home Secretary new powers under the National Security Act 2023 to designate bodies involved in foreign power threat activity.

The European Commission has called on Member States to accelerate the rollout of a new EU age verification app, urging that it be made available to citizens by the end of 2026.

The Information Commissioner's Office has published detailed guidance on storage and access technologies following changes to cookie rules that came into force on 5 February 2026. The guidance clarifies three new exceptions for non-intrusive cookies and explains how businesses can comply with updated regulations while maintaining robust privacy standards.

The UK's Information Commissioner's Office has proposed a framework that would permit certain low-risk online advertising activities to operate without user consent, marking a potential shift in how publishers can deliver contextual...

The UK’s Information Commissioner’s Office (“ICO”) has called on businesses to review their use of automated decision-making (“ADM”) in recruitment.