Ireland’s Data Protection Commission has today announced a €403 million fine on Google for its processing of location data in connection with certain services and products

The settlement does not include an admission of liability. The group action, brought by London-based law firm Austen Hays on behalf of Grindr users

Includes:<br> - UK should apply a mix of adequacy decisions and alternative data transfer tools<br> - Friend and Foe: AI is taking over DSARs<br> - Have we missed the Secretary of State in the room?<b...

The House of Lords has launched an inquiry to examine the enforcement of the OSA. The Communications and Digital Committee will consider Ofcom

France’s Constitutional Council has stopped the Act to intended to protect minors from the risks posed by the use of social media

Includes:<br> <br> - PIPEDA reform 3.0: Radical changes to Canadian privacy protection policy in new Bill<br> - China intensifies its enforcement of data protection<br> - DPA role in enforcing the EU ...

Includes:<br> <br> - When is AI ‘high-risk’? The EU’s draft guidelines<br> - Data protection documentation – and where it fails<br> - Beyond OSA/DSA: Age assurance as a data privacy duty<br> - When pr...

Carolina Foglia of the EDPB Secretariat invited organisations to flag any inconsistencies of GDPR application either at the Board or national level via the EDPB website

Speaking at Parliament’s Science, Innovation and Technology Committee today, Liz Kendall, Secretary of State announced that the government will launch the recruitment drive for a new Chair of the Info...

Mandated by the Data (Use and Access) Act 2025, UK organisations need to have a proper complaints process in place as from today

In February, Information Commissioner John Edwards voluntarily stepped back from his duties to enable an independent workplace investigation to take place

Includes:<br> <br> - Ireland DPC prioritises AI<br> - Vietnam’s AI law now in force<br> - Korea’s PIPA: Still Asia’s toughest<br> - Demystifying EU Digital Identity<br> - Generative AI and children

Includes:<br> <br> - Data mapping and AI compliance What it can do for you<br> - Deepfake image-based sexual abuse and the limits of regulation<br> - Automated decision-making in a post-DUAA world<br>...

The EDPS proposes to form Digital Clearinghouse 2.0. PL&B’s Nel Anna Krzeslowska reports on the future of possible cross-regulatory cooperation on new EU digital laws

The European Parliament adopted on 26 March its final negotiating position on the Digital Omnibus on AI which is intended to amend the EU Artificial Intelligence Act

Hybrid<br> <br> McCann FitzGerald, Dublin<br>

Includes:<br> <br> - The ICO’s new enforcement toolkit: Breaking down the draft guidance<br> - When an incident is just the tip of the cyber iceberg<br> - Psychological toll of data breaches<br> - Age...

Under the Data (Use and Access) Act, organisations must have a process for handling data protection complaints within their organisation

The EU Data Protection Board and the European Data Protection Supervisor strongly urge the co-legislators not to adopt the proposed changes to the definition of personal data

Workshop<br> <br> Browne Jacobson, Birmingham

Includes:<br> <br> - Data privacy mass claims: Emerging risks and procedural shifts in Europe and the US - The EU Digital Omnibus Package: Key GDPR reforms - Rules expand India’s DP law - Italy’s DPA ...

The EU and Brazil adopted, on 27 January, mutual adequacy decisions which confirm that their levels of data protection are comparable. This recognition allows for personal data to flow freely between ...

The European Commission says that TikTok has agreed to provide advertising repositories in which data is stored and managed to ensure full transparency around ads on its services, as required by the D...

The government has launched a consultation to seek views on whether under 16s should be banned from accessing social media

The ICO has issued a consultation to seek organisations’ views on the processes the ICO follows when it suspects a breach of the UK GDPR or the Data Protection Act 2018

Includes: <br> <br> - Paying compensation under UK data protection law<br> - How the Online Safety Act and UK DP laws converge on protecting children<br> - Cyber Security and Resilience Bill<br> - UK ...

The European Commission is currently seeking views on the establishment and operation of AI regulatory sandboxes as mandated by the EU AI Act

Following the EDPB opinion in October and the green light by Member States in comitology procedure last week, the Commission is now finalising preparations with a view to having the new adequacy decis...

A new completely different market mechanism to tackle privacy issues, which addresses the absence of personal data markets and bargaining power imbalance between companies and consumers, has been prop...

Includes:<br> <br> - Pseudonymised data is not always personal data, CJEU says<br> - LinkedIn will limit the volume and nature of user data for AI training<br> - Asia-Pacific privacy advocates discuss...

<br> Stephenson Harwood, London

Academics, legal practitioners and civil society representatives have written to the Science, Innovation and Technology Committee at the House of Commons with their concerns about the ICO’s performanc...

The EU Commission is proposing targeted amendments to the GDPR, for example to narrow the definition of personal data and to allow organisations the option to refuse

Includes: <br> <br> - DUAA introduces a new complaints-handling requirement<br> - Navigating the new ‘recognised legitimate interest’ lawful basis<br> - Beyond cyber – beware of human error and proces...

The ICO has issued a consultation to seek organisations’ views on the processes the ICO follows when it suspects a breach of the UK GDPR or the Data Protection Act 2018

Conference<br> <br> Latham & Watkins, London

The EDPB has published mostly positive opinions on the UK’s draft GDPR adequacy decisions published in July 2025, saying that it welcomes the continuing alignment between the UK and EU data protection...

The ICO issued, on 15 October, a fine of £14m to Capita (Capita plc for £8m and Capita Pension Solutions Limited £6m) for a data security breach

Addressing Non-compliance, Circumvention, and Unintended Consequences<br> <br> University of Nottingham

The European Data Protection Board’s new coordinated enforcement action will look into organisations’ compliance with the transparency and information obligations under the GDPR

Includes:<br> <br> - Defending MAGA-speech: Trump’s war on global data privacy<br> - Australia seeks privacy protections for children<br> - EU AI Act and GDPR: CJEU case law on automated processing an...

Conference<br> <br> Stephenson Harwood, London

Conference<br> <br> Latham & Watkins, London

While it has long been recognised that the ePrivacy Directive is outdated and attempts to adopt a regulation in this field have failed, the Commission recognises cookie consent fatigue, and the need t...

On 4 September, the European Commission launched the process towards the adoption of a data protection adequacy decision with Brazil declaring that it ensures an adequate level of data protection

France’s Data Protection Authority, the CNIL, has fined Google €325 million and SHEIN (e-commerce platform specialising in fast fashion) €150 million

Includes: <br> <br> - DUAA data protection aspects in force by end of 2025<br> - ICO fines 23andMe £2.31 million<br> - Meeting the demands of overlapping regulatory requirements<br> - Half-baked no mo...