SC hearing 7-8 October 2026
This week, the UK Supreme Court heard argument in Farley v Paymaster on whether a claim for non-material damage under Article 82 of the GDPR must meet a threshold of seriousness before compensation can be
From 10 December 2026, the new Australian Privacy Principle (APP) 1.7 in the Privacy Act 1988 (Cth) will require entities to disclose the use of automated (or substantially automated) decision-making (ADM) in their privacy policies.
Disclosure is required where computer
The UK GDPR establishes a robust framework for the protection of personal data, requiring organisations to give due regard to individuals’ data protection rights. Importantly, it recognises that the consequences of a data breach may extend beyond financial loss. Article
On 17 September 2026, the European Commission unveiled its proposal for the EU KIDS Act (EU Keeping Internet Digital Spaces Accountable and Trustworthy), a harmonised EU framework designed to reshape how children engage with online services. The proposal goes well
Artificial intelligence has quietly become an increasingly common feature of customer communication. Across industries, companies are using AI-powered chatbots, virtual assistants, and automated customer journeys to support or replace traditional customer support. In some cases, AI is a first point
Across the Asia-Pacific region, privacy and cybersecurity regulation continues to evolve rapidly, with regulators increasingly moving from legislative build-out to practical compliance and enforcement. Recent developments in Vietnam, South Korea and Indonesia illustrate this trend and signal heightened regulatory expectations
In October we wrote a piece discussing the difficulties in bringing a criminal case for submarine cable damage, looking at the Eagle S case in Finland. Our colleague Pia Bräysy from our Helsinki office has informed us of the following
A consultation draft has been published outlining a number of major reforms to the Australian privacy framework. If implemented in its current form, the Privacy Amendment (Personal Data Protection) Bill 2026 (Amendment Bill) would significantly reshape how Australian businesses collect,
On 15 July 2026, Ofcom published a statement setting out its decision to introduce a new Condition C9 into the General Conditions of Entitlement which sets out how Ofcom will require mobile operators and business messaging aggregators to protect mobile
The first major EU Cyber Resilience Act (the “CRA”) compliance deadline is fast approaching. From 11 September 2026, manufacturers within scope of the CRA must comply with new reporting obligations for actively exploited vulnerabilities and severe incidents. These requirements take
