Changes to UK Data Protection Regime

The UK's Data (Use and Access) Act 2025 (DUA) has been passed, though much of it is yet to take effect. There are some important tweaks to the UK's data protection laws (Data Protection Act 2018/UK GDPR and cookies regulation (PECR)). Firms will need to reconsider their privacy policies relating to research, (direct) marketing, cookies and AI in particular. There are now the same potential fines for cookie violations as for UK GDPR breaches - note that the Information Commissioner seems to care more about cookies and automatically scans for non-compliance. If you need legal advice on any of this, please let me know.

European Commission Raids The #Cookie Jar Again... and Again

Hard on the heels of the General Data Protection Regulation, the European Commission is having another crack at cookies, which now crumble quite differently to the way they did in 2009, or in 2002 for that matter.

Don't worry. This time the boffins will get it right... until the next time.

That's the joy of regulating really innovative technology in really detailed, prescriptive ways - it's the gift that keeps on giving!