English High Court Issues Subject Access Guidance

Explore comprehensive legal insights and expert commentary across diverse practice areas and industries. Access thought leadership through written articles and podcast discussions that address current legal developments and emerging trends.

The Data Protection Commission (DPC), Ireland's data protection regulator, has fined TikTok Technology Limited (TikTok) €345 million for breaching the...

The Data (Use and Access) Act 2025 (the DUAA) officially became law in June 2025, with a phased enforcement model under which different provisions take effect at different times.

The UK's Information Commissioner's Office has opened a public consultation on draft guidance addressing anonymisation and pseudonymisation techniques for processing personal data in research, archiving, and statistical contexts. The guidance explores critical distinctions between anonymous and pseudonymous data, outlines required safeguards under UK GDPR, and examines emerging technologies including synthetic data and privacy-enhancing tools.

A recent fine of €525,000 by the Autoriteit Persoonsgegevens (AP), the Dutch Data Protection Authority, has focused attention on one of the least discussed provisions of the GDPR – Article 27.

The UK Information Commissioner's Office has finalized its guidance on storage and access technologies, expanding compliance requirements beyond traditional cookies to include tracking pixels, device fingerprinting, and web storage. Organizations must now navigate stricter consent standards and three new narrow exceptions introduced by the Data (Use and Access) Act 2025, while facing significantly increased enforcement penalties of up to £17.5 million or 4% of annual worldwide turnover.

On October 9, the nation's first data breach class action trial began.

An IP address is a unique identifier assigned to a device. Google has always collected and used IP addresses. The change from 3 August 2026, is in relation to new purposes for which they may be used. Google has now started using users’ IP addresses for ad measurement and personalisation across the EEA, UK and Switzerland.

From 2 August 2026, the EU AI Act requires businesses to disclose when people are interacting with AI systems, mark synthetic content for detection, label deepfakes, and inform individuals...

When making decisions or processing personal data, it is important to understand whether your role is a controller or processor as each have different duties and obligations when dealing with personal data.

The Code is voluntary, but it will likely become an important reference point for demonstrating compliance with Article 50 of the AI Act.

The Ninth Circuit Court of Appeals vacated a preliminary injunction against Perplexity AI, determining that when an AI agent acts at a user's direction, it is the user—not the AI company—who "accesses" computer systems under federal and California computer fraud statutes. This landmark appellate decision addresses how existing computer-access laws apply to agentic artificial intelligence and has significant implications...

The Situation: Surging interest in digital tokens has caught the attention of regulators in Hong Kong.

A federal court has struck down New York's Climate Change Superfund Act, which sought to recover $75 billion from fossil fuel companies based on historical emissions. The ruling found the Act preempted by the Clean Air Act, marking the first judicial decision on state climate superfund legislation and establishing that EPA's rescission of the endangerment finding does not alter preemption analysis.

China has recently taken several actions showing its commitment to counter trade restrictions imposed by other countries. In March 2025, it released regulations implementing the 2021 Anti-Foreign Sanctions Law.

On April 9, 2018, the PDPC issued new advisory guidelines on in-vehicle recordings by transport services for hire.

On December 3, a federal court in the Central District of California granted plaintiffs' request for preliminary approval of a proposed $22 million settlement ...

On July 16, plaintiffs in a putative class action filed a motion for preliminary approval of their settlement agreement with a video game ...

The European Commission has adopted final Guidelines on exclusionary abuses of dominance under Article 102 TFEU, introducing a "workable effects approach" that narrows presumptions while expanding guidance on objective justifications and recognizing sustainability benefits as valid efficiencies for the first time. These Guidelines replace the 2008 Enforcement Priorities Guidance and are expected to significantly impact enforcement practices across EU Member States and beyond, particularly for digital market

On August 23, 2024, the HKEx and the SFC jointly announced temporary modifications to the Hong Kong Listing Rules. These modifications, effective from September 1, 2024...