UK
Quick answer. The Judicial Office and the Information Commissioner’s Office have each published internal AI use guidelines for their own staff. The guidance is operational, not directed at industry. It illustrates the UK’s sectoral approach to AI governance: existing bodies publishing rules for their own use within their existing remits, rather than a horizontal AI…
Quick answer. The Online Safety Act 2023 imposes a statutory duty of care on UK-accessible user-to-user services, search services and online publishers. Ofcom is the regulator and has moved into phased enforcement: illegal harms codes from March 2025, child safety codes from July 2025. Operators must classify their services, complete illegal harms and children’s access…
The Data (Use and Access) Act 2025 (DUAA) introduces sweeping changes in UK data regimes, from smart-data schemes and digital verification services to amendments of the Data Protection Act 2018 and UK GDPR. Rob Bratby of bratby.law guides UK businesses through compliance, strategic opportunities, and contract implications. Essential reading for counsel, transaction teams and commercial leaders.
Quick answer. In June 2022 the UK government set out proposals to reform UK data protection law across five areas: reducing barriers to responsible innovation, reducing burdens on business, boosting international data flows, delivering better public services, and reforming the ICO. These proposals became the Data Protection and Digital Information Bill, which was later reworked…
This article was published in June 2022 and reflects the regulatory position at that time. For current guidance on this topic, contact Bratby Law or see our latest insights. Quick answer. The Telecommunications (Security) Act 2021 amended the Communications Act 2003 to impose new network security duties on UK communications providers, with detailed requirements set…
This article was published in March 2022 and reflects the regulatory position at that time. For current guidance on this topic, contact Bratby Law or see our latest insights. Quick answer. In February 2022 the UK published two alternative sets of contracts for exporting personal data from the UK to non-adequate countries: the International Data…
This article was published in September 2021 and reflects the regulatory position at that time. For current guidance on this topic, contact Bratby Law or see our latest insights. Quick answer. The UK government published proposals on 10 September 2021 to reform UK data protection law, using post‑Brexit freedom to set separate UK rules. The…
On 28 June 2021, the EU Commission found that the UK provides adequate protection for personal data, enabling personal to freely flow from the EU (and EEA) to the UK. Editorial note (April 2026): The EU adequacy decision for the UK was adopted on 28 June 2021 for a period of four years, expiring on…
Quick answer. From 27 June 2021 exporters of personal data from the EU to third countries could adopt the new EU Standard Contractual Clauses under Commission Implementing Decision (EU) 2021/914. Existing contracts using the pre‑2021 SCCs had to transition to the new clauses by 27 December 2022. From 27 June 2021, organisations will be able…
Summary By the end of 2021, many corporate transactions in the communications, data infrastructure, artificial intelligence, satellite and space technologies sectors (and some others) will be subject to mandatory notification to, and national security review by, the UK government. Implementation timetable The National Security and Investment Act 2021 (“Act“) became part of UK law on…
This article was published in April 2021 and reflects the regulatory position at that time. For current guidance on this topic, contact Bratby Law or see our latest insights. On 27 April 2021, Ofcom announced the final results of the UK’s 2021 5G (700 MHz and 3.6-3.8 GHz bands) spectrum auction. The auction raised £1.379…
Regulation of voice call termination in UK