United Kingdom: Privacy

Lewis Silkin's Technology Law Report for Autumn 2026 examines current market trends and their implications for technology businesses. The report features insights on the EU Data Act's requirements and practical impacts, alongside analysis of how new UK political leadership under Andy Burnham may reshape technology policy and the business landscape.

Artificial Intelligence presents both unprecedented opportunities and significant risks for businesses worldwide. As AI-enabled breaches increase and concerns mount over data security, misinformation, and liability, organizations must navigate complex challenges while harnessing AI's beneficial applications in healthcare, climate prediction, and accessibility.

The European Commission has proposed the EU KIDS Act, a comprehensive regulatory framework that will fundamentally reshape how digital services interact with minors across the Union. Building on existing legislation like the DSA and AI Act, this proposal introduces age-based access restrictions, mandatory safety-by-design requirements, and strict age assurance obligations that will affect far more businesses than traditional social media platforms. Companies offering online games, app stores, operating syst

The European Data Protection Board has published draft guidelines proposing a fundamental shift in GDPR enforcement: a presumption that fines should be imposed for non-minor infringements, with a deliberately low bar for establishing negligence. Organizations will need to demonstrate robust compliance programs and documented decision-making to potentially avoid penalties, as regulators move from asking "should we fine?" to "can we justify not fining?"

Joint expert meetings are often pivotal in litigation. Their importance should not be underestimated. A focused expert discussion can narrow the issues, clarify disagreement...

The UK Information Commissioner’s Office (ICO) has published the findings of a two-year supervision programme examining leading generative AI foundation model developers. The report sets out the ICO’s expectations for organisations using personal data to train AI models and identifies key areas of regulatory concern.