Hunton Andrews Kurth LLP (LexBlog United Kingdom)
-
UK ICO Publishes New Guidance on Fines
On March 18, 2024, the UK Information Commissioner’s Office published new data protection fining guidance on how the ICO decides to determine penalties and calculate fines.
-
UK ICO Issues Enforcement Notice and Warning to UK Home Office
On March 1, 2024, the UK Information Commissioner's Office announced that it had issued an enforcement notice and a warning to the UK Home Office for failing to sufficiently assess the privacy risks posed by the electronic monitoring of people arriving in the UK via unauthorized means.
-
FTC Announces $16.5 Million Settlement Against UK Service Provider and Ban from Selling Browsing Data for Advertising Purposes
On February 22, 2024, the Federal Trade Commission announced a settlement order against Avast Limited requiring the company to pay $16.5 million and prohibit the company from selling or licensing any web browsing data for advertising purposes.
-
ICO Orders Companies to Cease Using Facial Recognition Technology and Fingerprint Scanning to Monitor Attendance
On February 23, 2024, the UK Information Commissioner’s Office reported that it had ordered public service providers Serco Leisure, Serco Jersey and associated community leisure trusts to stop using facial recognition technology and fingerprint scanning to monitor employee attendance.
-
ICO Publishes Guidance on Content Moderation
On February 16, 2024, the UK Information Commissioner's Office published its first piece of guidance on content moderation.
-
UK Government Publishes Response to Consultation on AI Regulation White Paper
On February 6, 2024, the UK government published a response to the consultation on its AI Regulation White Paper. This blog entry provides key takeaways from the response.
-
UK ICO Warns Organizations to Make Advertising Cookies Compliant Following Call to Action
On January 31, 2024, the UK ICO released a statement in response to its requirement that the UK's biggest websites comply with data protection laws when using cookies. The ICO said that it received "an overwhelmingly positive response," with 38 of the 58 organizations having changed their cookie banners in order to come into compliance.
-
UK National Cyber Security Centre Warns Ransomware Threat Expected to Rise with AI
On January 24, 2024, the UK National Cyber Security Centre announced it had published a report on its assessment of the near-impact of AI on the cyber threat landscape.
-
UK ICO Publishes Updated Opinion on Age Assurance
On January 18, 2024, the UK Information Commissioner’s Office (“ICO”) published an updated Opinion on age assurance for the Children’s Code (the “Opinion”). The Children’s Code is a statutory code of practice setting out how information society services likely to be accessed by children should protect children’s information rights online. According to the ICO, the...
-
UK ICO Launches Consultation Series on Generative AI
On January 15, 2024, the UK Information Commissioner's Office announced that it has launched a consultation series on generative AI.
-
ICO Publishes Response to UK Data Protection and Digital Information Bill
On December 18, 2023, the updated response from UK Information Commissioner John Edwards to the Data Protection and Digital Information (No 2) Bill was published on the UK ICO’s website.
-
ICO Publishes Employment Guidance for Consultation
On December 12, 2023, the UK Information Commissioner’s Office announced that it is producing an online resource relating to employment practices and data protection.
-
Draft AI Bill Introduced to UK Parliament
On November 22, 2023, the Artificial Intelligence Bill was introduced into the UK Parliament’s House of Lords.
-
UK and U.S. Develop Global Guidelines for AI Security
On November 27, 2023, the UK government announced the first global guidelines to ensure the secure development of AI technology, which were developed by the UK National Cyber Security Centre and the U.S. Cybersecurity and Infrastructure Security Agency, in cooperation with industry experts and other international agencies and ministries.
-
UK and Republic of Korea Issue Warning about DPRK State-Linked Cyber Actors
On November 23, 2023, the UK government’s National Cyber Security Centre and the Republic of Korea’s National Intelligence Service issued a joint advisory detailing techniques and tactics used by cyber actors linked to the Democratic People’s Republic of Korea that are carrying out software supply chain attacks.
-
UK ICO Issues Statement on the Use of Cookies
On November 21, 2023, the UK Information Commissioner’s Office issued a statement explaining that it has recently written to companies operating some of the UK’s most visited websites regarding their compliance with data protection laws when using cookies.
-
European Data Protection Supervisor and UK ICO Sign Memorandum of Understanding
On November 8, 2023, the UK Information Commissioner’s Office and the European Data Protection Supervisor announced they have signed a Memorandum of Understanding intended to reinforce their “common mission to uphold individuals’ data protection and privacy rights, and cooperate internationally to achieve this goal”.
-
29 Countries Reach Agreement On AI Risks and Opportunities
On November 1, 2023, 29 nations, including the U.S., the UK, the EU and China, reached a ground-breaking agreement, known as the Bletchley Declaration.
-
UK Online Safety Act Becomes Law
On October 26, 2023, the UK Online Safety Act received Royal Assent, making it law in the UK.
-
UK Court Blocks UK ICO Fine and Enforcement Against Clearview AI
On October 17, 2023, The First-tier Tribunal of the UK General Regulatory Chamber allowed an appeal by Clearview AI Inc against an enforcement notice and fine issued by the UK’s Information Commissioner’s Office.
-
UK ICO Publishes Guidance on Workplace Monitoring
On October 3, 2023, the UK Information Commissioner’s Office published new Guidance on lawful monitoring in the workplace, designed to help employers comply with their obligations under the UK General Data Protection Regulation and the Data Protection Act 2018.
-
The UK ICO Publishes Opinion on UK Government’s Assessment of Adequacy for the UK Extension to the EU-U.S. DPF
On September 21, 2023, the UK Information Commissioner’s Office published an opinion on the UK Government’s assessment of adequacy for the UK Extension to the EU-U.S. Data Privacy Framework.
-
BREAKING: UK-U.S. Data Bridge Finalized
On September 21, 2023, UK Secretary of State for Science, Innovation and Technology Michelle Donelan laid regulations in the UK Parliament, giving effect to a UK-U.S. Data Bridge.
-
ICO and NCSC Sign Joint Memorandum of Understanding for Information Sharing
On September 12, 2023, the UK Information Commissioner, John Edwards, and the Chief Executive of the National Cyber Security Centre (NCSC) of the UK, Lindy Cameron, signed a joint Memorandum of Understanding (MoU) that sets forth a framework for cooperation and information sharing between the ICO and the NCSC.
-
European Travel Authorization Coming in 2024
Starting in 2024, US citizens traveling to 30 European countries (most of western Europe except for the UK), will need to get pre-approval from the EU authorities before traveling.
-
UK ICO Encourages Use of Privacy Enhancing Technologies
On June 19, 2023, the UK Information Commissioner’s Office (“ICO”) recommended that organizations start using privacy enhancing technologies (“PETs”) to share personal information safely, securely and anonymously. The ICO also has issued new guidance on PETs which is aimed at those using large data sets in finance, healthcare, money laundering and cybercrime. The guidance contains...
-
UK ICO Reminds Businesses of Privacy Risks in AI
On June 15, 2023, the UK Information Commissioner’s Office called for businesses to address the privacy risks posed by generative artificial intelligence before “rushing to adopt the technology.”
-
UK and U.S. Announce Commitment to “Data Bridge”
On June 8, 2023, the United Kingdom and the United States announced they reached a commitment in principle to establish the UK Extension to the Data Privacy Framework, which will create a “data bridge” between the two countries.
-
UK ICO Publishes New Report on Neurotechnology and Warns of “Real Danger” of Discrimination
On June 8, 2023, the UK Information Commissioner’s Office published a new report on neurotechnology.
-
UK ICO Publishes New Guidance on Subject Access Requests
On May 24, 2023, the UK Information Commissioner’s Office announced it published new guidance for business and employers on responding to subject access requests.