The Court of Appeal has recently handed down an important decision in respect of data protection law considerations in Farley & Others v Paymaster (trading as Equiniti) [2025] EWCA Civ 1117, providing clarity on the scope of infringement and compensation
Data Protection Blog
The Data Protection Blog, published by Kingsley Napley, focuses on issues related to data protection law within the UK legal framework. It covers topics such as the interpretation and implications of the UK GDPR and the Data Protection Act 2018, including recent legislative reforms like the Data (Use and Access) Act 2025. The blog addresses practical concerns for service providers handling personal data, confidentiality in sensitive contexts such as asylum claims, and the management of medical records. It also discusses legal claims related to data protection infringements and explores ongoing developments and challenges in data privacy regulation.
Blog Authors
Latest from Data Protection Blog
Top five takeaways from the Data (Use and Access) Act 2025
The Data (Use and Access) Act 2025 (the “DUAA”), which received Royal Assent on 19 June 2025, introduces targeted reforms to the UK data protection legal framework — particularly the UK GDPR, the Data Protection Act 2018, and the Privacy…
Requesting Medical Records after a death
Losing a loved one when you think it may be because they received poor medical care is incredibly stressful at a time when family and friends are grieving their loss. Often, people want to see a written record of the…
Are personal details in asylum claims kept confidential? Protecting the privacy of asylum seekers and safeguarding confidentiality
Asylum seekers often find themselves in a vulnerable position, sharing sensitive and confidential information with the Home Office to support their asylum claims. Their cooperation is required to substantiate their claim and they rely on the understanding that this information…
The evolving challenge of data protection laws
Emily Carter explores anticipated developments in the realm of data protection.
The UK-US Data Bridge: A Shift in Transatlantic Data Sharing
On 12 October 2023, the UK-US Data Bridge (the “Data Bridge”) came into force, transforming the way both nations handle the flow of information across their borders. In this blog we explore the position before and after the introduction of…
Data Subject Access Requests: Should organisations expect the burden of responding to ease?
Emily Carter asks whether the proposed reforms within the Data Protection and Digital Information (No. 2) Bill (‘the Bill’) are likely to simplify the challenges of responding to Data Subject Access Requests (‘DSARs’) or whether this is an area which…
UK data protection reform: Some much needed clarity
After many months waiting for further clarity, Emily Carter outlines what we now know about the direction of data protection reform in the UK following publication of the Data Protection and Digital Information (no. 2) Bill.
After the Government’s consultation…
ICO regulatory update: The only constant is change Spring 2023
The Information Commissioner’s Office (ICO) regulates every organisation which deals with personal data and official data in the UK (and sometimes overseas). Its remit extends across the public and private sector, including multinationals, SMEs, public authorities and charities.
A new police approach is needed to tackle overwhelming delays to digital forensics
A damning report published by His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services (HMICFRS) has found police forces to be “overwhelmed and ineffective” in relation to digital forensics. The HMICFRS found that there were more than 25,000 devices…