³ÉÈËÓ°Òô

Data protection in specific activities


This subtopic addresses compliance with the United Kingdom General Data Protection Regulation, Assimilated Regulation (EU) 2016/679 (UK GDPR) and the Data Protection Act 2018 (DPA 2018) in relation to specific activities carried out by organisations.

For an introduction to the data protection regime generally, including the data protection principles, the UK GDPR’s ‘assimilated law’ status, and the legislative terminology, territorial scope, applicability and exemptions, see: Data protection regime—overview and its associated subtopic.

For further guidance on the following general topics under the UK GDPR, see the relevant overview and its associated subtopic:

TopicOverview
Accountability, governance and complianceAccountability, governance and compliance—overview
Rights of data subjectsRights of data subjects—overview
Transparency, privacy policies and noticesTransparency and privacy policies and notices—overview
Sharing of personal data and personal data in commercial transactionsData sharing and transactions—overview
International

To view the latest version of this document and thousands of others like it, sign-in with ³ÉÈËÓ°Òô or register for a free trial.

TAKE A FREE TRIAL
Powered by Lexis+®
Latest Information Law News

Information Law weekly highlights—19 December 2024

Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. Each week these highlights focus on developments in key topics such as data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

ICO warns against Google's fingerprinting policy change, issues draft guidance

The Information Commissioner's Office (ICO) has responded to Google's announcement permitting fingerprinting techniques from February 2025, warning that businesses must still comply with data protection laws. The ICO has published draft guidance on how data protection law, including PECR, applies to storage and access technologies such as fingerprinting. The ICO emphasises that organisations must provide transparency, obtain consent, and ensure fair processing when using fingerprinting for advertising purposes. The regulator plans to release a comprehensive strategy in the new year to give users meaningful control over personalised advertisement. A consultation on this guidance opens on Friday, 20 December 2024.

MI5 wins case against lawyer accused of being Chinese spy

Law360, London: A solicitor accused of being a Chinese spy has lost her legal challenge against MI5, after a tribunal found 17 December 2024 that the UK security service acted lawfully when it warned parliamentarians that she was trying to interfere with the political process.

OpenAI, X, Google can use legitimate interest for AI models, EDPB says

MLEX: OpenAI, X, Google and Meta will be able to use legitimate interests as a legal basis for processing personal data for developing and deploying AI models provided that adequate mitigation measures are in place, the European Data Protection Board (EDPB) said in an influential opinion today. The EDPB opinion also touched upon how to address unlawful data processing for AI model development, and in what circumstances AI models can be considered anonymised.

View Information Law by content type :  
News
Practice notes
Precedents
Q&As

Popular documents

TikTok sues European Data Protection Board at EU General Court

MLex: TikTok has sued the European Data Protection Board (EDPB) at the EU General Court, not long after it was fined €345m in a case involving the board. The EDPB, which is the umbrella body of EU data protection watchdogs, played a role in the case because it went through the EU General Data

The UK General Data Protection Regulation (UK GDPR)

The UK General Data Protection Regulation (UK GDPR)STOP PRESS—Impact of the Retained EU Law (Revocation and Reform) Act 2023: This document contains references to retained EU law (REUL) and associated terms introduced by the European Union (Withdrawal) Act 2018 in connection with Brexit. From 1

If planning permission imposes restrictions on a licensed premises opening hours, once operational can

If planning permission imposes restrictions on a licensed premises opening hours, once operational can the personal licence holder apply for a Temporary Events Notice (TEN) to open for longer hours than those permitted in the planning permission?To use any property for a licensable activity both

What is the difference between an appeal and a review?

What is the difference between an appeal and a review?What is an appeal?An appeal in insolvency proceedings is no different to an appeal in normal litigation. An appeal will be allowed only if the appeal court is satisfied that the decision of the lower court was 'wrong' or 'unjust because of a
TikTok sues European Data Protection Board at EU General Court

TikTok sues European Data Protection Board at EU General Court

MLex: TikTok has sued the European Data Protection Board (EDPB) at the EU General Court, not long after it was fined €345m in a case involving the board. The EDPB, which is the umbrella body of EU data protection watchdogs, played a role in the case because it went through the EU General Data

The UK General Data Protection Regulation (UK GDPR)

The UK General Data Protection Regulation (UK GDPR)

The UK General Data Protection Regulation (UK GDPR)STOP PRESS—Impact of the Retained EU Law (Revocation and Reform) Act 2023: This document contains references to retained EU law (REUL) and associated terms introduced by the European Union (Withdrawal) Act 2018 in connection with Brexit. From 1

If planning permission imposes restrictions on a licensed premises opening hours, once operational can

If planning permission imposes restrictions on a licensed premises opening hours, once operational can

If planning permission imposes restrictions on a licensed premises opening hours, once operational can the personal licence holder apply for a Temporary Events Notice (TEN) to open for longer hours than those permitted in the planning permission?To use any property for a licensable activity both

What is the difference between an appeal and a review?

What is the difference between an appeal and a review?

What is the difference between an appeal and a review?What is an appeal?An appeal in insolvency proceedings is no different to an appeal in normal litigation. An appeal will be allowed only if the appeal court is satisfied that the decision of the lower court was 'wrong' or 'unjust because of a