New UK data protection law proposals

Government sets out response to consultation Commentary Following its September 2021 consultation on reform of UK data protection law, on 23 June 2022 the UK government published its response and proposals to move forward. Whilst the proposals for a post-GDPR data protection law in the UK contain some sensible reforms and updates, it is clear …

Read more

New security obligations on UK telecoms providers

On 17 November 2021, the Telecoms (Security) Act 2021, amending the Communications Act 2003, was enacted, with its provisions coming into force over time. The legislation: imposes new primary security obligations on communications providers; enables the UK to make the (currently draft) ‘Designated Vendor Direction’ in respect of Huawei; and will be further operationalised by …

Read more

Personal data export from the UK

UK sets out two alternatives to provide adequate contractual protection for the export of personal data from the UK What happened? In February 2022, the UK government published 2 alternative sets of contracts that can be used by organisations wishing to export personal data from the UK to countries that do not otherwise provide adequate …

Read more

UK’s proposed new data protection law

New UK data protection law: worthwhile divergence or political point-scoring? What is proposed? On 10 September 2021, the UK government published its proposals to reform UK data protection law. Whilst current UK data protection law in the form of UK GDPR mirrors EU data protection law, the proposals represent the UK government seizing the opportunity …

Read more

EU finds UK has adequate protections for personal data

On 28 June 2021, the EU Commission found that the UK provides adequate protection for personal data, enabling personal to freely flow from the EU (and EEA) to the UK. Background European privacy law (specifically articles 44-50 of the General Data Protection Regulation (GDPR)) prohibits the export of personal data from the EU to a third …

Read more

Using the new EU standard clauses to enable cross-border data export

From 27 June 2021, organisations will be able to adopt new ‘standard contractual clauses’ (SCCs) to permit lawful export of personal data from the EU to ‘third countries’. This post: recommends what companies should do now describes the background to the EU’s data export rules explains how the new SCCs differ from prior versions What …

Read more

New UK foreign investment law to impact telecoms, digital and data transactions

Summary By the end of 2021, many corporate transactions in the communications, data infrastructure, artificial intelligence, satellite and space technologies sectors (and some others) will be subject to mandatory notification to, and national security review by, the UK government. Implementation timetable The National Security and Investment Act 2021 (“Act“) became part of UK law on …

Read more

EU and UK set out digital plans for coming decade

The European Commission has proposed a ‘digital compass’ to set its course for a digitally empowered Europe by 2030. The UK’s Department for Culture Media and Sport (DCMS) has also set out its top ten priorities for a technology driven future to ‘build back better’ following the Covid19 pandemic. European Digital Compass At a press …

Read more

UK proposes statutory backing for Huawei 5G ban

On 24 November 2020, the UK Government started the legislative process for a new Telecoms (Security) law which will, when passed into law, provide statutory backing for their already announced policy objective to exclude Huawei (and potentially other ‘high risk vendors’) from the UK’s 5G (and other) networks on the grounds on national security. This …

Read more