Data protection essentials

Data protection laws in both the UK and EEA (the EU plus Iceland, Norway, and Liechtenstein) are intended to ensure information about living individuals (within the definition of ‘personal data’) is used fairly and responsibly.

To help ensure that, both the UK and data protection laws impose a large number of obligations on those ‘processing’ personal data (and on controllers of such processing) and grant rights to those whose personal data is processed (the ‘data subjects’). In summary, ‘processing’ includes doing almost anything with personal data, including storing, sharing, deleting or using it.

UK data protection law is largely derived from EEA data protection laws and is therefore generally based on similar principles, although there are some detailed differences.

This subtopic provides certain core resources commonly required by commercial lawyers when addressing UK and EEA data protection laws under:

•
the EU’s General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR) regime, which applies under the laws of

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Commercial News

Commercial weekly highlights—21 November 2024

This week's edition of Commercial weekly highlights includes: analysis of the statutory guidance on the failure to prevent fraud offence which was introduced under the Economic Crime and Corporate Transparency Act 2023, commentary on Advertising Standard Agency's strategy to proactively pursue ‘greenwashing’ claims which explains the risks posed to businesses and what they can do to minimise their exposure, and news that the Department for Business and Trade has launched a consultation on implementing the new subscription contracts regime to be introduced under the Digital Markets, Competition and Consumers Act 2024.

ASA rulings—20 November 2024

The Advertising Standards Authority (ASA) has upheld a ruling on two paid-for Google ads for The Pure Gold Company, a gold and silver retail dealer. The ads were identified through the ASA's proactive monitoring as part of its wider work on unregulated investments. The ASA found the ads were misleading as they failed to illustrate the risks of gold investments. The ASA upheld the complaint.

Failure to prevent fraud—Statutory guidance

Corporate Crime analysis: Following a wait of nearly 12 months since the failure to prevent fraud (FTPF) offence was enacted, the government has now issued the statutory guidance on the procedures which companies are expected to implement for the purpose of preventing the relevant underlying fraudulent conduct by persons associated with them and, where such conduct occurs, providing a potential defence to the offence . Written by John Binns and Alexander Gorst at BCL Solicitors LLP.

Consumer contract—unfair terms (legal sector) (Glaser KC and Miller v Atay)

Commercial analysis: Barristers failed in their appeal from a finding that a term in their contract with a direct access client was unfair under the Consumer Rights Act 2015 (CRA 2015). A term providing that the full fee was payable where a hearing was adjourned for any reason, regardless of whether any work had been done or benefit was received by the client, was found to be unfair and unenforceable. Further, no quantum meruit claim (contractual or for unjust enrichment) was made out. As a result, no fee was payable. This case gives guidance as to the evaluative task undertaken by the court in assessing whether a consumer contract term is unfair; and is a salutary warning to legal professionals to ensure that their contract terms are carefully considered so that they do not unfairly balance the risks in favour of the lawyer. Written by Morwenna Macro, barrister at Five Paper.