Privacy

The Data Act goes live: what now?

From 12 Sept 2025, the Data Act sets strict rules on access, portability, and cloud switching. Learn what companies must...

Operational checklist: Pseudonymised Data under GDPR

Discover our practical GDPR checklist following the CJEU’s SRB v. EDPS ruling (Sept. 4, 2025). Learn how to assess pseud...

CJEU: Are pseudonymised data always personal?

The Court ruled that pseudonymized data should not automatically be treated as personal data if, in practice, the recipi...

EU–U.S. Data Flows Secured by Court Ruling

On 3 September 2025, the EU General Court dismissed Latombe’s challenge and upheld the EU–U.S. Data Privacy Framework. D...

What the DUAA means for your organisation

The Data (Use and Access) Act of 2025 received royal assent on June 19, 2025 (DUAA). As it reforms the UK data protectio...