https://s1-uk.practicallaw.thomsonreuters.com/WLN-PLCUK-SC_2605.1.2002/productViews/plcuk/Legal updateshttps://uk.practicallaw.thomsonreuters.comData Protectionhttps://uk.practicallaw.thomsonreuters.com/Document/I9bd13f34634111f1a83fe84dcd0bf6af/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I9bd13f34634111f1a83fe84dcd0bf6af/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Tue, 09 Jun 2026 00:00:00 CDTThe Department for Science, Innovation and Technology (DSIT) has launched a consultation, seeking views on options to address legal uncertainty about the delegation of data subject rights and build trust in the data intermediaries sector in the UK. The consultation closes on 31 August 2026.https://uk.practicallaw.thomsonreuters.com/Document/I9bd13f34634111f1a83fe84dcd0bf6af/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I35e8c4cc601611f18ebba5f5b5f97226/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I35e8c4cc601611f18ebba5f5b5f97226/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Fri, 05 Jun 2026 00:00:00 CDTIn Coombs v Information Commissioner [2026] UKFTT 785 (GRC), the First-tier Tribunal (FTT) (General Regulatory Chamber) found that Kent County Council was not entitled to rely on section 40(2) of the Freedom of Information Act 2000 (FOIA) (unlawful processing of personal data) to withhold anonymised test score data. In upholding the refusal, the Information Commissioner had not demonstrated identifiability by means reasonably likely to be used. Public authorities may find the FTT's distinction between identification by reliable connection and identification resting on conjecture illuminating.https://uk.practicallaw.thomsonreuters.com/Document/I35e8c4cc601611f18ebba5f5b5f97226/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I635104bb5dc511f1a83fe84dcd0bf6af/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I635104bb5dc511f1a83fe84dcd0bf6af/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Fri, 05 Jun 2026 00:00:00 CDTPLC Magazine articles are available online. The June 2026 issue includes an article that may be of interest to data protection subscribers.https://uk.practicallaw.thomsonreuters.com/Document/I635104bb5dc511f1a83fe84dcd0bf6af/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/Ic81718b25e9511f1a83fe84dcd0bf6af/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/Ic81718b25e9511f1a83fe84dcd0bf6af/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Wed, 03 Jun 2026 00:00:00 CDTOn 3 June 2026, the General Court partially annulled the European Commission's September 2023 decision that Facebook Messenger and Marketplace were core platform services that are individually important gateways for business users to reach end users, under the Digital Markets Act.https://uk.practicallaw.thomsonreuters.com/Document/Ic81718b25e9511f1a83fe84dcd0bf6af/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I75f8fc535db911f18ebba5f5b5f97226/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I75f8fc535db911f18ebba5f5b5f97226/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Tue, 02 Jun 2026 00:00:00 CDTThe European Commission has announced the appointment of a Scientific Panel and an Advisory Forum to support enforcement of the EU AI Act.https://uk.practicallaw.thomsonreuters.com/Document/I75f8fc535db911f18ebba5f5b5f97226/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I56cd5f615a7c11f18ebba5f5b5f97226/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I56cd5f615a7c11f18ebba5f5b5f97226/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Fri, 29 May 2026 00:00:00 CDTOn 28 May 2026, the European Commission issued a EUR200 million fine to Temu under the Digital Services Act ((EU) 2022/2065) (DSA) for failing to properly identify, analyse and assess the risks of illegal products being disseminated on its marketplace.https://uk.practicallaw.thomsonreuters.com/Document/I56cd5f615a7c11f18ebba5f5b5f97226/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I56cd5e505a7c11f18ebba5f5b5f97226/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I56cd5e505a7c11f18ebba5f5b5f97226/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Fri, 29 May 2026 00:00:00 CDTPractical Law provides free training on how to use Practical Law more effectively. This is available in a variety of formats, including live webinars and training videos.https://uk.practicallaw.thomsonreuters.com/Document/I56cd5e505a7c11f18ebba5f5b5f97226/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I36393e9c58e911f1a83fe84dcd0bf6af/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I36393e9c58e911f1a83fe84dcd0bf6af/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Wed, 27 May 2026 00:00:00 CDTWe have published Practice note, Litigating and defending claims following a cyber incident or data breach by Stephenson Harwood LLP.https://uk.practicallaw.thomsonreuters.com/Document/I36393e9c58e911f1a83fe84dcd0bf6af/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I68128f2557ec11f1a83fe84dcd0bf6af/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I68128f2557ec11f1a83fe84dcd0bf6af/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Tue, 26 May 2026 00:00:00 CDTWe have published an article highlighting what's on the agenda for in-house lawyers in June 2026.https://uk.practicallaw.thomsonreuters.com/Document/I68128f2557ec11f1a83fe84dcd0bf6af/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I6450a404557711f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I6450a404557711f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Fri, 22 May 2026 00:00:00 CDTOn 22 May 2026, the European Commission published its third annual report to the Council and European Parliament on the implementation of Regulation 2022/1925 on contestable and fair markets in the digital sector (Digital Markets Act (DMA)).https://uk.practicallaw.thomsonreuters.com/Document/I6450a404557711f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/Ibe09ebb453ab11f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/Ibe09ebb453ab11f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Wed, 20 May 2026 00:00:00 CDTThe European Commission has launched a consultation on draft guidelines for the classification of high-risk AI systems to support providers, deployers and market surveillance authorities in assessing whether an AI system should be classified as high-risk under Article 6 of the EU AI Act.https://uk.practicallaw.thomsonreuters.com/Document/Ibe09ebb453ab11f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I18460d13536d11f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I18460d13536d11f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Tue, 19 May 2026 00:00:00 CDTOn 18 May 2026, Ofcom published its statement Detecting Intimate Image Abuse (Online Safety – Additional Safety Measures), recommending that certain service providers use hash matching technology to detect intimate image abuse as part of the Illegal Content Codes of Practice under the Online Safety Act 2023.https://uk.practicallaw.thomsonreuters.com/Document/I18460d13536d11f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I9949195d529a11f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I9949195d529a11f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Tue, 19 May 2026 00:00:00 CDTThe Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law has been ratified by the European Union.https://uk.practicallaw.thomsonreuters.com/Document/I9949195d529a11f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I7fd6e5774f9411f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I7fd6e5774f9411f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Mon, 18 May 2026 00:00:00 CDTWe have updated our code of conduct and ethics.https://uk.practicallaw.thomsonreuters.com/Document/I7fd6e5774f9411f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/Idd2110f5503b11f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/Idd2110f5503b11f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Fri, 15 May 2026 00:00:00 CDTThe government has published its response to the House of Lords Digital and Communications Committee's March 2026 report on AI, copyright and the creative industries.https://uk.practicallaw.thomsonreuters.com/Document/Idd2110f5503b11f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I250fee994ec911f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I250fee994ec911f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Fri, 15 May 2026 00:00:00 CDTThe Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law has been published in the Official Journal of the European Union.https://uk.practicallaw.thomsonreuters.com/Document/I250fee994ec911f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I4ad67fbb4ec911f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I4ad67fbb4ec911f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Thu, 14 May 2026 00:00:00 CDTThe Department for Science, Innovation & Technology (DSIT) has published its response to a call for evidence on smart data opportunities in digital markets, setting out stakeholder views and confirming that the government will consult shortly on the design of a digital markets smart data scheme.https://uk.practicallaw.thomsonreuters.com/Document/I4ad67fbb4ec911f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/If5e30983422b11f18619811f89168d29/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/If5e30983422b11f18619811f89168d29/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Tue, 12 May 2026 00:00:00 CDTThe European Commission has published draft guidelines to help providers and deployers implement the transparency obligations under Article 50 of the EU AI Act. At the same time, it has published feedback from a stakeholder consultation on the transparency rules.https://uk.practicallaw.thomsonreuters.com/Document/If5e30983422b11f18619811f89168d29/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/Ia5717a1f4b6d11f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/Ia5717a1f4b6d11f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Mon, 11 May 2026 00:00:00 CDTThe Information Commissioner's Office (ICO) has announced it will hold its annual Data Protection Practitioner's Conference (DPPC) on 13 October 2026.https://uk.practicallaw.thomsonreuters.com/Document/Ia5717a1f4b6d11f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I8b62729049b411f18619811f89168d29/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I8b62729049b411f18619811f89168d29/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Thu, 07 May 2026 00:00:00 CDTOn 7 May 2026, the EU institutions reached a provisional agreement on the European Commission's Digital Omnibus on AI proposal, which seeks to simplify and streamline certain requirements under the AI Act ((EU) 2024/1689).https://uk.practicallaw.thomsonreuters.com/Document/I8b62729049b411f18619811f89168d29/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I86e327a449d911f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I86e327a449d911f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Thu, 07 May 2026 00:00:00 CDTThe European Data Protection Supervisor (EDPS), Wojciech Wiewiórowski, has published his office's 2025 Annual Report highlighting key activities in AI governance, supervision and enforcement, and legislative consultation, including preparations for its forthcoming role as a market surveillance authority under the AI Act ahead of the August 2026 deadline for high-risk AI provisions.https://uk.practicallaw.thomsonreuters.com/Document/I86e327a449d911f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I8db6f3e643d811f18619811f89168d29/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I8db6f3e643d811f18619811f89168d29/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Thu, 30 Apr 2026 00:00:00 CDTThe ICO has published updated guidance on its approach to the extension of the "soft opt-in" exemption to charities under the Data (Use and Access) Act 2025, following a 2025 consultation.https://uk.practicallaw.thomsonreuters.com/Document/I8db6f3e643d811f18619811f89168d29/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I542b14a0440111f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I542b14a0440111f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Thu, 30 Apr 2026 00:00:00 CDTPractical Law provides free training on how to use Practical Law more effectively. This is available in a variety of formats, including live webinars and training videos.https://uk.practicallaw.thomsonreuters.com/Document/I542b14a0440111f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I5ab1ec2f437511f18619811f89168d29/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I5ab1ec2f437511f18619811f89168d29/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Wed, 29 Apr 2026 00:00:00 CDTOn 29 April 2026, the Information Commissioner's Office (ICO) published its updated guidance on storage and access technologies, clarifying how the Privacy and Electronic Communications Regulations 2003 (SI 2003/2426) (PECR) and, where relevant, the UK GDPR apply to cookies, tracking pixels, device fingerprinting and similar technologies used on websites, mobile apps and connected devices.https://uk.practicallaw.thomsonreuters.com/Document/I5ab1ec2f437511f18619811f89168d29/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I3bcae7ec430011f18619811f89168d29/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I3bcae7ec430011f18619811f89168d29/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Tue, 28 Apr 2026 00:00:00 CDTOn 28 April 2026, the European Commission published its report on its first review of the Digital Markets Act.https://uk.practicallaw.thomsonreuters.com/Document/I3bcae7ec430011f18619811f89168d29/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I300712433fc611f1a34ac71bb9879c27/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I300712433fc611f1a34ac71bb9879c27/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Tue, 28 Apr 2026 00:00:00 CDTWe have published new Standard document, Data protection complaint handling policy (UK).https://uk.practicallaw.thomsonreuters.com/Document/I300712433fc611f1a34ac71bb9879c27/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/Ia10bfc1a417d11f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/Ia10bfc1a417d11f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Mon, 27 Apr 2026 00:00:00 CDTWe have published an article highlighting what's on the agenda for in-house lawyers in May 2026.https://uk.practicallaw.thomsonreuters.com/Document/Ia10bfc1a417d11f1bf8d82e776af4c9e/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I357f9ee73f6811f1839deddf1c806e4b/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I357f9ee73f6811f1839deddf1c806e4b/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Fri, 24 Apr 2026 00:00:00 CDTOn 24 April 2026, the European Commission, the Council of the EU and the European Parliament agreed and signed the One Europe, One Market Roadmap. The Roadmap is a political and operational commitment under which the EU institutions aim to deliver on a series of legislative and policy measures to strengthen the Single Market and improve the EU's competitiveness by the end of 2027 at the latest.https://uk.practicallaw.thomsonreuters.com/Document/I357f9ee73f6811f1839deddf1c806e4b/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I830a94ad3e8b11f1a34ac71bb9879c27/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I830a94ad3e8b11f1a34ac71bb9879c27/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Fri, 24 Apr 2026 00:00:00 CDTIn RTM v Bonne Terre Ltd and Hestview Ltd [2026] EWCA Civ 488, the Court of Appeal allowed an appeal by online gambling operators against a High Court finding that a problem gambler had not given legally valid consent to cookies, data processing and direct marketing under the GDPR, DPA 1998 and PECR. The court held that consent under Article 4(11) of the GDPR is an entirely objective concept, constituted by an outward indication of the data subject's wishes, and does not require proof of the data subject's actual state of mind or autonomous decision-making capacity. The case is remitted to the High Court.https://uk.practicallaw.thomsonreuters.com/Document/I830a94ad3e8b11f1a34ac71bb9879c27/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I790101333e6211f1839deddf1c806e4b/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29https://uk.practicallaw.thomsonreuters.com/Document/I790101333e6211f1839deddf1c806e4b/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29Thu, 23 Apr 2026 00:00:00 CDTThe government has published a voluntary Cyber Resilience Pledge for organisations to demonstrate their commitment to taking key steps to improve their cyber resilience.https://uk.practicallaw.thomsonreuters.com/Document/I790101333e6211f1839deddf1c806e4b/View/FullText.html?transitionType=Default&contextData=%28sc.Default%29