Technology and Telecoms Transactions

Brexit | Cloud computing | Data protection | Digital | DSIT | Government policy | Oversight and Risk | Regulatory action | UK

New UK data protection law proposals
ByRob Bratby 30 June 202217 November 2025

Government sets out response to consultation Commentary Following its September 2021 consultation on reform of UK data protection law, on 23 June 2022 the UK government published its response and proposals to move forward. Whilst the proposals for a post-GDPR data protection law in the UK contain some sensible reforms and updates, it is clear…

Read More New UK data protection law proposals
Broadband | DSIT | Fixed | Government policy | Hardware | Mobile | Ofcom | Regulatory action | Services | Technology | Telecoms | UK

New security obligations on UK telecoms providers
ByRob Bratby 27 June 202224 November 2025

On 17 November 2021, the Telecoms (Security) Act 2021, amending the Communications Act 2003, was enacted, with its provisions coming into force over time. The legislation: New primary legal obligations Primary duty on communications providers to identify, reduce and prepare for security compromise, and duty to prevent, remedy or mitigate effects of security compromise The…

Read More New security obligations on UK telecoms providers
Brexit | Cloud computing | Data protection | DSIT | Government policy | Oversight and Risk | Regulatory action | Technology | UK

Personal data export from the UK
ByRob Bratby 4 March 202217 November 2025

UK sets out two alternatives to provide adequate contractual protection for the export of personal data from the UK What happened? In February 2022, the UK government published 2 alternative sets of contracts that can be used by organisations wishing to export personal data from the UK to countries that do not otherwise provide adequate…

Read More Personal data export from the UK
Brexit | Cloud computing | Data protection | Digital | Government policy | Oversight and Risk | Regulatory action | Technology | UK

UK’s proposed new data protection law
ByRob Bratby 30 September 202117 November 2025

New UK data protection law: worthwhile divergence or political point-scoring? What is proposed? On 10 September 2021, the UK government published its proposals to reform UK data protection law. Whilst current UK data protection law in the form of UK GDPR mirrors EU data protection law, the proposals represent the UK government seizing the opportunity…

Read More UK’s proposed new data protection law
Brexit | Cloud computing | Data protection | EU | Government policy | Oversight and Risk | Regulatory action | Software | Technology | UK

EU finds UK has adequate protections for personal data
ByRob Bratby 29 June 202127 June 2022

On 28 June 2021, the EU Commission found that the UK provides adequate protection for personal data, enabling personal to freely flow from the EU (and EEA) to the UK. Background European privacy law (specifically articles 44-50 of the General Data Protection Regulation (GDPR)) prohibits the export of personal data from the EU to a third…

Read More EU finds UK has adequate protections for personal data
Cloud computing | Data protection | EU | Oversight and Risk | UK

Using the new EU standard clauses to enable cross-border data export
ByRob Bratby 16 June 202127 June 2022

From 27 June 2021, organisations will be able to adopt new ‘standard contractual clauses’ (SCCs) to permit lawful export of personal data from the EU to ‘third countries’. This post: recommends what companies should do now describes the background to the EU’s data export rules explains how the new SCCs differ from prior versions What…

Read More Using the new EU standard clauses to enable cross-border data export
Brexit | Broadband | Cloud computing | Digital | DSIT | Fixed | Foreign direct investment | Government policy | Hardware | M&A | Mobile | Regulatory action | Satellite | Services | Software | Technology | Telecoms | UK | WiMax

New UK foreign investment law to impact telecoms, digital and data transactions
ByRob Bratby 24 May 202124 May 2021

Summary By the end of 2021, many corporate transactions in the communications, data infrastructure, artificial intelligence, satellite and space technologies sectors (and some others) will be subject to mandatory notification to, and national security review by, the UK government. Implementation timetable The National Security and Investment Act 2021 (“Act“) became part of UK law on…

Read More New UK foreign investment law to impact telecoms, digital and data transactions
Brexit | Broadband | Cloud computing | EU | Government policy | Hardware | Mobile | Regulatory action | Services | Software | Technology | Telecoms | UK

EU and UK set out digital plans for coming decade
ByRob Bratby 18 March 2021

The European Commission has proposed a ‘digital compass’ to set its course for a digitally empowered Europe by 2030. The UK’s Department for Culture Media and Sport (DCMS) has also set out its top ten priorities for a technology driven future to ‘build back better’ following the Covid19 pandemic. European Digital Compass At a press…

Read More EU and UK set out digital plans for coming decade
Brexit | Cloud computing | EU | Government policy | Regulatory action | Services | Software | Telecoms | UK

Europe progresses revised ePrivacy rules
ByRob Bratby 15 February 202115 February 2021

EU progresses revised ePrivacy Regulation

Read More Europe progresses revised ePrivacy rules
Broadband | Fixed | Foreign direct investment | Government policy | Hardware | Mobile | Regulatory action | Software | Technology | Telecoms | UK | US

UK proposes statutory backing for Huawei 5G ban
ByRob Bratby 7 December 20207 December 2020

On 24 November 2020, the UK Government started the legislative process for a new Telecoms (Security) law which will, when passed into law, provide statutory backing for their already announced policy objective to exclude Huawei (and potentially other ‘high risk vendors’) from the UK’s 5G (and other) networks on the grounds on national security. This…

Read More UK proposes statutory backing for Huawei 5G ban
Brexit | Cloud computing | Court decision | Data protection | EU | Regulatory action | Services | Technology | UK | US

Data export: EU provides more clarity after Schrems II
ByRob Bratby 17 November 202017 November 2020

In documents published last week, the EU provided some welcome clarity on how organisations should address the invalidation of Privacy Shield as a basis for exporting personal data from the EU. On 10 November 2020, the European Data Protection Board (EDPB) adopted recommendations on ‘supplemental measures’, which can be considered to ensure compliance with the…

Read More Data export: EU provides more clarity after Schrems II
Cloud computing | Court decision | Data protection | EU | Regulatory action | Services | UK | US

EDPB guidance on ‘supplemental measures’ for data export
ByRob Bratby 17 November 202024 November 2020

On 10 November, the European Data Protection Board adopted a recommendation on supplemental measures which might be used to ensure compliance with the EU level of protection of personal data when exported to third countries with an insufficient level of protection. The recommendation both sets out a process to be followed by data exporters and,…

Read More EDPB guidance on ‘supplemental measures’ for data export