Holiday law changes from 2026 — what employers need to know & do
We explore what the new record-keeping requirements mean for employers, the risks of non-compliance and steps that organisations should take now.
Data Protection
Related insights
DSARs in the age of AI — why you should resist the siren call of simplicity
Our data protection team examines the risks of relying on oversimplified legal arguments in DSAR disputes and highlights key lessons for data controllers.
Outing & threats to disclose sexual orientation — your legal protections explained
We outline the legal protections that may be available if you face a threat to expose personal information such as your sexual orientation.
Digital Omnibus on AI to delay EU AI Act — what businesses need to know
We examine the key changes introduced by the Digital Omnibus on AI, what remains unchanged and how businesses should respond.
ICO & Ofcom investigations into Grok — what they mean for AI regulation
We explore the legal issues under consideration by the ICO and Ofcom and what the case tells us about the UK's future regulation of AI-generated content.
Marketing to existing contacts — what the BrewDog story tells us about UK GDPR & PECR
What can we learn from the BrewDog shareholder emails? We outline key compliance risks and practical steps to consider before sending communications.
Roblox & child safety — lessons for online gaming platforms
We explore the allegations against Roblox, wider challenges of protecting children online and steps that platforms are expected to take.
STAIRs & Housing Ombudsman changes — what housing associations must do to prepare
We explore how the Housing Ombudsman’s role is changing and outline the practical steps to remain compliant.
5 confidentiality & data protection risks that businesses face when using public AI tools
We explain why uncontrolled use of public AI tools creates real confidentiality and data protection risks and outline how you can manage them safely.
DUA: data protection complaints process explained & how to prepare
We delve into the key changes coming into force on 19 June 2026 and explain how businesses should prepare.
Data centres under attack — what Iran’s strikes mean for UK businesses & how to respond
We explore the implications of the attacks for UK businesses and outline the practical measures that can help to mitigate similar disruption.
Deepfakes & AI fraud — what retailers need to know about the new digital battlefield
We explore why retailers are particularly affected by deepfakes and the implications around data protection, IP, advertising compliance and more.