Region: United Kingdom

ICO hits out at Clearview’s “extremely powerful monitoring tool”

The UK data regulator has urged a tribunal to reject Clearview AI’s narrow interpretation of the UK GDPR’s extraterritoriality provision, stressing that the company’s conduct constituted monitoring that is caught by the country’s regulatory framework.

23 November 2022

Saudi Arabia and NSO to face another spyware challenge in UK

A British-Jordanian journalist has launched another legal challenge against the Kingdom of Saudi Arabia and the company behind the Pegasus spyware, joining three other individuals bringing similar claims in the UK.

23 November 2022

UK finalises Korea adequacy

The UK has finalised its first post-Brexit data adequacy agreement, in a deal which the UK claims goes beyond that achieved by the EU.

23 November 2022

“The ICO is not the world’s data protection policeman” – Clearview counsel

Clearview AI’s barrister has attacked the UK data regulator’s assertion that it had extraterritorial jurisdiction over the company.

22 November 2022

ICO plans fine against public sector body

The UK’s data protection authority is due to issue a fine against an unnamed public sector entity for “repeated and egregious breaches” of data protection law despite the watchdog stepping back from imposing punitive action on government bodies.

22 November 2022

ECJ limits beneficial ownership register access

The European Court of Justice has said the general public should not be able to access public registers of beneficial ownership, in a move that severely restricts the dissemination of corporate ownership data and could complicate due diligence and investigations.

22 November 2022

Meta faces UK claim over ad profiling and objection rights

A UK-based digital rights campaigner claims Meta violated her right to object under the UK GDPR, despite the company’s argument that the right does not apply as it processes data for the performance of a contract.

21 November 2022

"Swamped" ICO defends judicial review about failure to investigate SAR complaint

A businessman taking the ICO to court over its position on complaints handling has said the regulator is in breach of its GDPR obligations when it fails to reach a decision on whether a breach has taken place.

17 November 2022

Children’s data breach reveals potential UK enforcement gap

The UK’s privacy regulator has reprimanded a ministry for granting an employment screening company improper access to children’s data, but its investigation into the company was forced to end once it was dissolved.

11 November 2022

Lloyd v Google: one year on

Now the dust has settled, GDR analyses the effect of the landmark Lloyd v Google judgment on the UK data protection litigation landscape.

10 November 2022

Unlock unlimited access to all Global Data Review content