Electronic workplace

This document reflects the UK GDPR regime. References and links to the GDPR refer to the UK GDPR (Assimilated Regulation (EU) 2016/679) unless expressly stated otherwise.

This subtopic covers regulatory requirements relating to how your firm and staff use:

•
the internet
•
other forms of electronic communication, eg emails and telephone

Our Precedent Internet, e-comms and social media policy—law firms also deals with social media activities.

Data protection issues

The General Data Protection Regulation (GDPR) governs the processing of personal data in the UK. It obliges processors of personal data to comply with eight principles and gives individuals a right to know what information is held about them.

The GDPR applies where:

•
you collect personal data about clients and other third parties via the internet or your electronic communications system
•
you generate or collect personal data in the course of monitoring your staff's use of the internet or your electronic communications system

The GDPR imposes obligations including:

•
informing

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Practice Compliance News

New and extended fraud risk management content

Exciting news for businesses tackling fraud risk management. We are thrilled to introduce our new and expanded fraud risk management guidance and tools, now featuring resources on the new failure to prevent fraud offence, as well as how to manage the risk of being a fraud victim. With fraud being the most prevalent crime in the UK, safeguarding your business is more crucial than ever.

Key points from FCA financial crime guide updates

Law360, Expert analysis: Following its April 2024 consultation, the Financial Conduct Authority (FCA) made changes to its financial crime guide, or FCG, effective from November 2024. The updates reflect the FCA's learnings on sanctions systems and controls following Russia's invasion of Ukraine, they also highlight expectations on firms in relation to proliferation financing, set out guidance on transaction monitoring systems, and include clarifications on the consumer duty and anti-money laundering requirements for cryptoassets businesses. Written by Emma Radmore, legal director, and Laura Wiles, solicitor, at Womble Bond Dickinson.

FCDO imposes fresh sanctions on Belarus following sham election

The Foreign, Commonwealth & Development Office (FCDO) has announced a new wave of sanctions against Belarus in response to the recent sham presidential election. The measures, coordinated with Canada, target six individuals and three entities, including the Chairman of the Belarusian Central Election Commission and leaders of institutions responsible for human rights violations. The UK has also excluded Belarusian defence companies from its economy, focusing on those supporting Russia's war in Ukraine. The sanctions aim to address the ongoing political repression in Belarus, where over 1,250 political prisoners are reportedly incarcerated. The FCDO's action underscores the UK's commitment to working with international partners to protect national security and support democracy in Belarus.

Restrictions on the use of personal data by social networks for direct marketing (Schrems v Meta Platforms Ireland)

EU Law analysis: Privacy activist Maximilian Schrems brought a claim against Meta Platforms Ireland (Meta) before the Austrian courts, alleging that Meta was unlawfully processing his personal data. Meta had directed targeted advertising at Schrems that reflected his interests as perceived by Meta, including his sexual orientation. The Austrian Supreme Court referred two questions to the Court of Justice. In its judgment, the Court of Justice held that principle of data minimisation prevents unrestricted aggregation, analysis and processing of personal data obtained by a data controller from data subjects or third parties for the purposes of targeted advertising. The Court of Justice also held that data concerning sexual orientation that are manifestly made public by an individual may be processed–but that this does not amount to the individual’s consent to the processing of other data relating to their sexual orientation, obtained using partner third-party websites, for the purposes of enabling personalised advertising. Written by Rohan Massey, partner, and Cameron Grabowski, trainee solicitor, at Ropes & Gray International LLP.

View Practice Compliance by content type :

News