The Data Protection Act (DPA) 2018 is the UK’s data protection law. It brings the EU’s General Data Protection Regulation (GDPR) into the UK’s legal system and defines how personal data should be ...

On 19 June 2025, the UK Parliament enacted the Data (Use and Access) Act 2025 (DUAA), marking the most significant UK data protection reform since the UK General Data Protection Regulation (UK GDPR).

Key takeaways Start with the data that would hurt most if exposed, then apply encryption where it reduces the biggest business risk. Protect both stored data and data in transit, because laptops, ...

Most people associate data protection with legislation, most recently the Data Protection Act 1998 and the General Data Protection Regulation 2016 (GDPR). However, it should be appreciated that this ...

Data protection regulation and the data landscape continue to evolve at pace across EMEA, driven in part by the regulatory response to the ...

The General Data Protection Regulation (GDPR) came into force on 25 May 2018. This wide-ranging piece of legislation governs data protection requirements for any entity managing personal data across ...

GDPR outlines six principles that organizations need to abide by. These principles aren't new - they were already outlined in the 1995 directive, but GDPR has revised them slightly. We delve into each ...

Kai Keller (@kaimkeller) is a global leadership fellow at the World Economic Forum and leads the organization's work at the cross-section of innovation and financial stability. The Facebook-Cambridge ...

Apple on February 21 withdrew its Advanced Data Protection feature from the United Kingdom following government demands for backdoor access to encrypted user data. The move came after UK officials ...

UK data protection law has hit a structural ceiling: ICO's regulatory sandbox cannot grant AI companies live-data testing authority, and only Parliament can change that. After eight years and a ...