Case studies

"A lot of the work that I do is historic-the maximum sentences change at different points of time. It's really complicated and people get it wrong all the time. That's when having a timeline is really useful."

1 High Pavement

Access all 212 documents on Personal data

GET ACCESS NOW

GLOSSARY

Personal data definition

/ˈpəːs(ə)n(ə)l/ /ˈdeɪtə/

Published by a LexisNexis Commercial expert

What does Personal data mean?

Personal data means data relating to a living individual who can be identified from such data, either alone or with other information in the data controller’s possession. It includes opinions about, and intentions in relation to the data subject.

Personal data can thus include names, addresses, National Insurance numbers, CCTV images of individuals, car registration numbers and details of company directors (not of the companies themselves).

Commercial

Personal data can thus include names, addresses, National Insurance numbers, CCTV images of individuals, car registration numbers and details of company directors (not of the companies themselves).

Speed up all aspects of your legal work with tools that help you to work faster and smarter. Win cases, close deals and grow your business–all whilst saving time and reducing risk.

Website terms and conditions for supply of services to consumers—checklist

Website terms and conditions for supply of services to consumers—checklist This Checklist sets out the essential points that should be considered when drafting or updating online terms and conditions for the supply of services to consumers. It should be used where a lawyer wants to make sure that such terms and conditions comply with consumer protection legislation (and any guidance issued under it). This Checklist should be used in addition to the following: • Key consumer information requirements—checklist • Information requirements under the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013—checklist • Consumer cancellation rights under the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013—Services—Flowchart • General information to be disclosed by e-commerce websites—checklist • Drafting consumer contracts—checklist For a discussion on the key legal issues to consider when designing and developing a business-to-consumer (B2C) e-commerce website for trading with consumers, see Practice Note: Business to consumer e-commerce—legal issues. Introduction Businesses that transact with consumers are subject to more onerous legislative requirements and, consequently, need to pay close...

Planning a digital marketing campaign—checklist

Planning a digital marketing campaign—checklist This Checklist is for use when planning a digital marketing campaign. The focus is on marketing-specific requirements and the Checklist does not consider general issues in relation to transactional activity (eg contract formation, distance selling). It covers media selection, territorial targeting, agency contracts, data protection, advertising compliance, user-generated content, influencer engagement, prize and price promotions, and behavioural advertising. It also considers compliance with legislative and self-regulatory regime in the UK, including the unfair commercial practices provisions of the Digital Markets, Competition and Consumers Act 2024 (DMCCA 2024) and the UK Code of Non-broadcast Advertising and Direct & Promotional Marketing (CAP Code). Digital marketing can reach consumers at home, at work and, through their mobiles, tablets and video game consoles, virtually everywhere else. Alongside unrivalled potential audience numbers, it offers brands the opportunity to target individuals on the basis of their specific interests, locations or habits. It is no surprise, then, that brands are diverting more and more of their marketing spend from traditional media to...

Discover our 6 Checklists on Personal data

Key definitions under the DPA 1998 [Archived]

ARCHIVED: This archived Practice Note provides information on the data protection regime before 25 May 2018 and reflects the position under the Data Protection Act 1998 (DPA 1998). This Practice Note is for background information only and is not maintained.BackgroundThe DPA 1998 governs processing of personal data in the UK. It obliges processors of such data to comply with eight principles, and gives individuals a right to know what information is held about them. For further information on the principles, see Practice Note: Data protection principles under the DPA 1998.The Information Commissioner's Office (ICO) supervises and enforces the implementation of the DPA 1998. For more information, see Practice Notes: The Information Commissioner’s Office (ICO) and Sanctions and enforcement under the DPA 1998.Sections 1 and 2 of the DPA 1998 contain definitions for the key terms used throughout the act and within the Information Commissioner's codes of practice or other guidance. Key statutory definitions include:•Data•Personal data•Sensitive personal data•Data subject•Data controller•Data processor•Processing•Relevant filing systemChanges as a result of the General Data Protection...

Rights of data subjects under the DPA 1998 [Archived]

ARCHIVED: This archived Practice Note provides information on the data protection regime before 25 May 2018 and reflects the position under the Data Protection Act 1998 (DPA 1998). This Practice Note is for background information only and is not maintained.Changes as a result of the General Data Protection RegulationThe General Data Protection Regulation, Regulation (EU) 2016/679 (the GDPR) (applicable from 25 May 2018) introduces substantial amendments to EU and UK data protection law and replaces the DPA 1998 and Directive 95/46/EC (the Data Protection Directive) from that date.For further information, see Practice Notes: Introduction to the EU GDPR and UK GDPR and Rights of data subjects.A data subject is a living individual who is the subject of personal data, ie data from which he can be identified. For key definitions under the DPA 1998, see Practice Note: Key definitions under the DPA 1998. For a comprehensive introduction to the GDPR, collating key practical guidance, see: Data protection toolkit.Right of access to personal dataAn individual has a right to be informed...

Discover our 50 Practice Notes on Personal data

Consultancy agreement—company and individual—pro-client (short form)

Consultancy agreement—company and individual—pro-client (short form) [ON HEADED NOTEPAPER OF CLIENT COMPANY] [Insert consultant’s name] [Insert consultant’s address] [Insert date] Dear [insert consultant’s name] [ Consultancy agreement OR Insert name of project ] Further to our recent discussions, I am pleased to confirm the terms of our agreement regarding the provision of your consultancy services to [insert name of client company] (Company). 1 Term 1.1 [Subject to the terms set out in this letter, your engagement [will commence OR commenced] on [insert date] and will continue unless or until either party gives to the other not less than [insert number] [weeks’ OR months’] prior notice in writing. OR 1.2 Your engagement will be for a fixed period of [insert number] months from [insert date], subject to the terms of this letter and subject to the right of either the Company or you to give to the other not less than [number] [weeks’ OR months’] notice in writing during such fixed period terminating the...

Individual image release waiving rights in photographs

Individual image release waiving rights in photographs From: [insert name and address of individual] To: [insert name and address of photographer] Date: [insert date] This Release relates to photographs of me taken on [insert date] at [insert location and/or event name] (‘Photographs’). In consideration of the payment of [insert amount or form of payment] (the receipt of which I acknowledge) I warrant, confirm and agree with you as follows: 1 You have the irrevocable right to use, publish, reproduce, display or otherwise exploit the Photographs [for a period of [insert time period]] from the date of this Release, for the following purpose[s]: 1.1 [public display [specify event if appropriate]] 1.2 [non-commercial publication in any media[, including social media] ] 1.3 [commercial publication in any media[, including social media] ] 1.4 [for the purpose as specified in the Schedule] 1.5 [any purpose without limitation] 2 You shall have the right to edit, modify, crop, add to or subtract from the Photographs at your entire discretion and without my approval[...

Dive into our 142 Precedents related to Personal data

Public Law weekly highlights—1 May 2025

This week's edition of Public Law weekly highlights includes further coverage of the Supreme Court’s landmark ruling in For Women Scotland Ltd v Scottish Ministers on the legal definition of the terms ‘man’, ‘woman’ and ‘sex’ under the Equality Act 2010. Also in this edition, a joint statement on the implementation of the Windsor Framework; updates to Procurement Policy Notes 006, 010, 013, 020 and 021; the new King's Bench Guide 2025; plus the Ministry of Housing, Communities and Local Government’s annual report on devolution. Case updates include further analysis on the Supreme Court’s ruling in Abbasi on anonymity for clinicians following the withdrawal of life-sustaining treatment for children, a Court of Appeal ruling on Article 14 ECHR challenges to employment legislation, and a Privy Council ruling on the constitutional right to be heard before resentencing. This edition features further updates on Brexit SIs, post-Brexit transition guidance, Ukraine conflict, equality and human rights, constitutional and administrative law, information law, judicial review, public procurement, State security and intelligence, and subsidy control...

Competition weekly highlights—1 May 2025

This week's edition of Competition weekly highlights includes, from a UK perspective: (1) the CMA’s decision to launch a consultation on proposed changes to the CMA’s guidance on applications for leniency and no-action in cartel cases, (2) publication by the CMA of guidance on how mergers are investigated, and (3) publication of guidance by the CMA on how it will deliver the 4Ps to support growth under the new digital markets competition regime. This week's highlights also includes, from an EU perspective: (1) the Commission’s decision to fine Apple €500m for breaching its anti-steering obligation under the DMA, (2) the Commission’s decision to close its investigation into Apple's user choice obligations under the DMA, (3) the Commission’s decision to issue its preliminary findings in relation to its non-compliance investigation into whether Apple’s new contractual requirements for alternative app distribution breach the DMA, (4) the Commission’s decision to fine Meta €200m for breaching the DMA obligation to give consumers the choice of a service that uses less of their personal data,...

Read the latest 20 News articles on Personal data