The ICO concluded that DSG Retail Limited had implemented poor security measures and failed to take adequate steps to protect personal data. This included vulnerabilities such as inadequate software ...

A new nonprofit organization in the UK wants to develop the first regulator-approved privacy-compliance certification for ad tech – and it’s got the UK’s data protection authority on board. The group, ...

The Information Commissioner’s Office (ICO) has issued a £66,000 fine and a reprimand to Police Scotland following a series of data protection failures that resulted in the excessive collection, ...

In this short series of podcasts, senior knowledge lawyer, Emma Keeling, and A&O Shearman’s data consultant and former ICO Deputy Commissioner, Steve Wood, take a look at some of the key data ...

The UK’s data protection regulator has warned that a reluctance among organizations to share customers’ personal information is worsening a fraud epidemic in the country. Fraud is now the most common ...

The Information Commissioner’s Office (ICO) approach of only fining public sector organisations “in the most serious cases” is under fire from privacy campaigners at Open Rights Group (ORG), who say ...

Free AI acceptable use policy template for UK SMBs. Covers ChatGPT, Copilot, Gemini, ICO data protection rules and a practical ten-point checklist.

In response to the UK’s new Data (Use and Access) Act 2025 (DUA Act) coming into force, the UK Information Commissioner (ICO) has launched two public consultations. The consultations, which aim to ...

We collaborate with the world's leading lawyers to deliver news tailored for you. Sign Up for any (or all) of our 25+ Newsletters. Some states have laws and ethical rules regarding solicitation and ...

The UK’s data protection watchdog has warned that a new investigation into TikTok and others over their use of children’s data should be viewed as a “warning shot” by smaller digital firms.

The Court of Appeal (CoA) has ruled in favour of the Information Commissioner’s Office (ICO) in an appeal against a previous decision regarding the data protection responsibilities of businesses that ...