Holiday law changes from 2026 — what employers need to know & do

We explore what the new record-keeping requirements mean for employers, the risks of non-compliance and steps that organisations should take now.
Talk to us: 0333 004 4488 | hello@brabners.com | Contact us
AuthorsEleanore Beard
3 min read
Commercial & Contracts, Technology, Media & Telecoms, Regulatory & Professional Conduct, Data Protection

Every year, 28 January marks Data Protection Day. Intended to raise awareness of consumer rights under data protection and privacy legislation, Data Protection Day also serves as a reminder for organisations to assess and prioritise their data security and internal practices to ensure regulatory compliance and build trust with customers.
Here, Senior Associate and data protection law expert Eleanore Beard explains how the data protection landscape has changed and what businesses need to do to stay on top.
Recent years have seen the data protection landscape continually evolve, with the introduction of regulations like the General Data Protection Regulation (GDPR) and various privacy laws globally, including (post-Brexit) the UK GDPR.
These regulations now set minimum standards for the collection, processing and storage of personal data — empowering individuals to have greater control over their information.
Last year, things developed further. In July 2023, the EU adopted its decision on the EU to US Data Privacy Framework. A few months later, the UK to US Data Bridge was approved as an extension to the Data Privacy Framework — providing a mechanism for businesses in the UK to transfer personal data to US businesses certified under the EU to US framework.
There are still concerns over this international transfer framework and further advice should always be sought for international transfers to ensure that the relevant protections are in place.
We also saw new data protection provisions like the Online Safety Act 2023 and other data protection initiatives being discussed, such as the regulation of AI — and there is no sign of this evolution slowing down.
The proposed new UK Data Protection and Digital Information Bill was debated in December 2023. Many believe that this is likely to start coming into UK law mid-2024 — so businesses need to prepare now.
2023 saw an increase in public awareness around data protection, with individuals encouraged to take proactive steps to protect their privacy. This is likely to have played a role in the increased number of civil actions, claims and calls for class action lawsuits around data protection breaches.
To stay protected, businesses must implement robust data protection and cybersecurity measures, conduct regular audits and educate their people on correct data protection practices.
By prioritising privacy and staying informed about the evolving landscape of data protection, every business can contribute to a more secure and trustworthy digital world.
And while technological innovations can enhance security measures — such as encryption, biometrics and artificial intelligence — it’s important to be mindful of the potential risks and ethical considerations of failing to be compliant.
If you’re not sure where to start in terms of data protection, privacy and compliance, our experienced team can help.
With cost-effective and fixed-fee solutions, we can provide training and establish a compliant data privacy culture, implementing the principles of data protection and effective safeguarding.

We explore what the new record-keeping requirements mean for employers, the risks of non-compliance and steps that organisations should take now.

With the sports sponsorship landscape evolving rapidly, we explore the key legal considerations for rights holders when negotiating agreements.

Our data protection team examines the risks of relying on oversimplified legal arguments in DSAR disputes and highlights key lessons for data controllers.

We outline the legal protections that may be available if you face a threat to expose personal information such as your sexual orientation.

We examine the key changes introduced by the Digital Omnibus on AI, what remains unchanged and how businesses should respond.

We explore the legal issues under consideration by the ICO and Ofcom and what the case tells us about the UK's future regulation of AI-generated content.

We lay out how the Code will work in practice and what organisations should be wary of when it comes to facilities, participation and verification.

Football clubs are facing heightened scrutiny over their commercial partnerships. We explore the risks and steps that they should take to stay compliant.

What can we learn from the BrewDog shareholder emails? We outline key compliance risks and practical steps to consider before sending communications.

We explore the ESPR’s implications for M&A and outline what businesses should be doing in response.

A recent Upper Tribunal tax decision has changed the VAT treatment of clear dental aligners and will affect dentists, dental technicians and laboratories.

We outline some of the key commercial and legal considerations for parties considering a franchise arrangement.

We explore the allegations against Roblox, wider challenges of protecting children online and steps that platforms are expected to take.

We've announced our largest-ever round of Partner promotions, with six lawyers joining the partnership following another year of sustained growth.

We explore what Stargate UK reveals about the hidden energy cost of AI and break down what this means in practice.

We examine the issues at the heart of the claim and outline what the decision could mean for franchise businesses.

We explore how the Housing Ombudsman’s role is changing and outline the practical steps to remain compliant.

We explore the key insights shaping the future of games, digital creative and tech from this year’s FORMAT Group Summit.

Live from Old Trafford, we explored the realities of geopolitical risk, security threats, commercial sustainability and the growing role of technology.

We explore the key changes and outline the practical steps that retailers need to take ahead of 2027.

We explore the tension between AI‑driven optimism and growing fears of an overinflated tech bubble.

We explore how commercial partnerships in motorsport are evolving and outline the practical considerations for sponsors and rights holders.

We explore what the HFSS regime means in practice, break down how the ASA is applying the rules and outlines the steps that retailers should take now.

We explore the decision, its legal context and its implications for selective distribution and online sales controls.

We explain why uncontrolled use of public AI tools creates real confidentiality and data protection risks and outline how you can manage them safely.