United Kingdom: Privacy Protection

Understanding the mechanisms for challenging Ofcom's decisions under the Online Safety Act is crucial for regulated providers navigating this complex new regime. This guide explores the public law principles that govern potential challenges, from judicial review claims to Upper Tribunal appeals, and examines what enforcement actions can be contested and on what grounds.

IAASA has published its annual observations on selected corporate reporting issues for years ending on or after 31 December 2026 (PDF, 683 KB).

BCL Partner John Binns and Simon Haines, Head of Commercial and Integrity at Imperial Brands, explore what Star Trek can teach us about modern ethics and compliance.

On 30th July 2026, the ICO announced that they are working alongside the Financial Conduct Authority (FCA), the Advertising Standards Authority (ASA) and the Solicitors Regulation Authority (SRA) in relation to suspected nuisance marketing linked to car finance mis-selling claims.

This website uses cookies to improve user experience through personalized content delivery and traffic analysis. By accepting cookies, users consent to data collection practices that enable customized advertising and enhanced site functionality.

By 2028, more than a third of organisations are expected to have AI agents working alongside employees. This shift towards agentic AI—systems that can plan tasks, use external tools, and complete complex activities with limited human involvement—raises important legal questions around accountability, data protection, and risk management that organisations must address before deployment.

Recent EU and UK court decisions have reshaped the landscape of data protection compliance, clarifying critical boundaries around consent, data subject rights, cybersecurity obligations, and children's privacy. These rulings demonstrate that organizations must move beyond formal compliance to embed proportionality, accountability, and risk-based decision-making into their data processing activities, even when disclosures are legally required or supported by valid legal bases.

A global organization launches a critical report examining how AI transparency tools and content provenance systems, designed to promote trust and verify authenticity, could paradoxically be weaponized against journalists, human rights defenders, and documentary filmmakers in hostile political environments. The analysis explores the unintended surveillance risks embedded in digital watermarking and content credential technologies now being integrated into cameras, mobile devices, and distribution platforms.

The UK government is seeking practical insights into how current data protection frameworks interact with artificial intelligence and data-intensive technologies.