Region: United Kingdom

UK's post-Brexit data transfer regime to enter into force in March

The UK's Parliament has been presented with the country's replacement for standard contractual clauses, with the UK data regulator saying the new transfer mechanism can be used immediately.

01 February 2022

UK falling behind on digital market regulation, experts say

Experts in favour of digital markets regulation have said delays to the rollout of new Competition and Markets Authority powers to intervene in digital markets have allowed the EU to pull ahead.

01 February 2022

Vicarious liability data breach claim fails

An English court has cited Morrisons in its decision to reject a data breach claim against a local authority.

31 January 2022

Wise facing legal action over GDPR SAR breach claims

A claimant says Wise – formerly known as TransferWise – failed to provide all of his personal data in a response to his subject access request, including copies of suspicious activity reports the company filed about him.

27 January 2022

LexisNexis article 27 liability case settles

A lawsuit about the liability of GDPR article 27 representatives has settled out of court ahead of its January appeal date.

25 January 2022

UK finance regulator to probe competition in wholesale data markets

The UK’s Financial Conduct Authority said it will examine the state of competition in two separate data markets after benchmark providers and investment companies raised concerns related to high entry barriers for new entrants.

21 January 2022

ICO issues SAR sanction

The Information Commissioner’s Office has sanctioned the UK justice ministry for its failure to process thousands of subject access requests for several years.

18 January 2022

Hospital operator denies Bounty data breach liability

Hampshire Hospitals NHS Foundation Trust has told an English judge that it is not responsible for parent support club Bounty’s allegedly unlawful collection and distribution of patients’ personal data.

12 January 2022

High Court hears Bounty data breach lawsuit

A trial has begun in a claim following up on a regulatory finding that pregnancy and parenting club Bounty UK illegally sold personal data to marketers without obtaining parental consent.

11 January 2022

Oracle and Salesforce dodge €10 billion Dutch claim

A Dutch court has ruled that an NGO’s mass claim was inadmissible because it relied on ‘likes’ as its mandate to represent class members – the latest blow to GDPR representative action litigants.

06 January 2022

Unlock unlimited access to all Global Data Review content