The draft Adequacy Agreement (the “Agreement”) published by the European Commission last month contains seven basic errors of analysis which calls into question whether the Agreement accurately reflects the current state of UK data protection law. This is important because

I have just realised that the Data (Access and Use) Bill (DAUB), which returns for its Commons Report stage today, degrades two Data Protection Principles in Article 5 of the UK_GDPR; namely the Principles dealing with lawfulness and incompatibility [A.5(1)(a)

This is the second instalment of my list of nineteen areas where the Data Use and Access Bill (DUAB) provisions act to the detriment of data subjects. In Part 1 (blog of 25 Feb 2025), I listed a summary of

The following is a summary list of nineteen Data Use and Access Bill (DUAB) provisions which act to the detriment of data subjects. Because of its length, I have split these issues in two blogs. Part 2 of this set

The Prime Minister and the Chancellor of the Exchequer have gone “all in” with Artificial Intelligence (AI) in the expectation that it generates economic growth. It has told the main UK Regulators, including the ICO, to ease-off on general enforcement

This blog is the promised second instalment that deals with the powers in the Data (Use and Access) Bill (DUAB “Bill”). These powers give Ministers the ability to sweep aside key elements of the UK_GDPR that protects data subjects from

There is a current debate as to whether “legitimate interests” can be reliably used as a lawful basis by a controller when using personal data to train/test AI algorithms/systems and when AI systems are deployed. This blog explains how the