Regulatory action

AI and Data | AI in Telecoms | AI Regulation | Data protection | DSIT | English law local counsel | EU | Government policy | Ofcom | Oversight and Risk | Regulatory action | Telecoms | Telecoms regulation | Transactions co-counsel | UK

EU Digital Omnibus: simplification or new complexity for digital and AI regulation?
ByRob Bratby 21 November 202521 November 2025

EU Digital Omnibus: simplification or new complexity for digital and AI regulation? What has happened and why does it matter? The European Commission has proposed a Digital Omnibus Regulation to streamline elements of the EU’s digital legislative framework, including amendments to the GDPR, ePrivacy Directive, NIS2 and the Data Act, while repealing several existing measures…

Read More EU Digital Omnibus: simplification or new complexity for digital and AI regulation?
AI in Telecoms | Broadband | Fixed | Government policy | Mobile | Ofcom | Regulatory action | Satellite | Telecoms | Telecoms regulation | UK

Five eyes regulators pledge closer telecoms security cooperation
ByRob Bratby 6 November 202524 November 2025

Five eyes regulators pledge closer telecoms security cooperation Telecoms regulators and government agencies from the UK, US, Canada, Australia, and New Zealand have issued a joint statement committing to tighter cooperation on telecoms security and resilience, following meetings hosted by Ofcom in London on 4–6 November 2025. The partners cite increasingly interconnected markets and global…

Read More Five eyes regulators pledge closer telecoms security cooperation
Regulatory action | AI Regulation | DSIT | Oversight and Risk | UK

When Regulators Regulate Themselves: The UK judiciary and data protection regulator (ICO) guidelines for internal AI use
ByRob Bratby 6 November 202521 November 2025

UK Judges and ICO publish internal AI use guidelines In the UK’s rapidly developing AI governance landscape, two institutions have taken a decisive and self-reflective step. The Judiciary of England and Wales and the Information Commissioner’s Office (ICO) have both published their internal policies on the use of artificial intelligence. These are not external consultation papers or policy statements…

Read More When Regulators Regulate Themselves: The UK judiciary and data protection regulator (ICO) guidelines for internal AI use
Regulatory action | AI Regulation | Brexit | Data protection | EU | Government policy | Oversight and Risk | UK

The Data (Use and Access) Act 2025: What It Means for UK Businesses
ByRob Bratby 28 October 202521 November 2025

The Data (Use and Access) Act 2025 (DUAA) introduces sweeping changes in UK data regimes, from smart-data schemes and digital verification services to amendments of the Data Protection Act 2018 and UK GDPR. Rob Bratby of Bratby Law guides UK businesses through compliance, strategic opportunities, and contract implications. Essential reading for counsel, transaction teams and commercial leaders.

Read More The Data (Use and Access) Act 2025: What It Means for UK Businesses
Brexit | Cloud computing | Data protection | Digital | DSIT | Government policy | Oversight and Risk | Regulatory action | UK

New UK data protection law proposals
ByRob Bratby 30 June 202217 November 2025

Government sets out response to consultation Commentary Following its September 2021 consultation on reform of UK data protection law, on 23 June 2022 the UK government published its response and proposals to move forward. Whilst the proposals for a post-GDPR data protection law in the UK contain some sensible reforms and updates, it is clear…

Read More New UK data protection law proposals
Broadband | DSIT | Fixed | Government policy | Hardware | Mobile | Ofcom | Regulatory action | Services | Technology | Telecoms | UK

New security obligations on UK telecoms providers
ByRob Bratby 27 June 202224 November 2025

On 17 November 2021, the Telecoms (Security) Act 2021, amending the Communications Act 2003, was enacted, with its provisions coming into force over time. The legislation: New primary legal obligations Primary duty on communications providers to identify, reduce and prepare for security compromise, and duty to prevent, remedy or mitigate effects of security compromise The…

Read More New security obligations on UK telecoms providers
Brexit | Cloud computing | Data protection | DSIT | Government policy | Oversight and Risk | Regulatory action | Technology | UK

Personal data export from the UK
ByRob Bratby 4 March 202217 November 2025

UK sets out two alternatives to provide adequate contractual protection for the export of personal data from the UK What happened? In February 2022, the UK government published 2 alternative sets of contracts that can be used by organisations wishing to export personal data from the UK to countries that do not otherwise provide adequate…

Read More Personal data export from the UK
Brexit | Cloud computing | Data protection | Digital | Government policy | Oversight and Risk | Regulatory action | Technology | UK

UK’s proposed new data protection law
ByRob Bratby 30 September 202117 November 2025

New UK data protection law: worthwhile divergence or political point-scoring? What is proposed? On 10 September 2021, the UK government published its proposals to reform UK data protection law. Whilst current UK data protection law in the form of UK GDPR mirrors EU data protection law, the proposals represent the UK government seizing the opportunity…

Read More UK’s proposed new data protection law
Brexit | Cloud computing | Data protection | EU | Government policy | Oversight and Risk | Regulatory action | Software | Technology | UK

EU finds UK has adequate protections for personal data
ByRob Bratby 29 June 202127 June 2022

On 28 June 2021, the EU Commission found that the UK provides adequate protection for personal data, enabling personal to freely flow from the EU (and EEA) to the UK. Background European privacy law (specifically articles 44-50 of the General Data Protection Regulation (GDPR)) prohibits the export of personal data from the EU to a third…

Read More EU finds UK has adequate protections for personal data
Brexit | Broadband | Cloud computing | Digital | DSIT | Fixed | Foreign direct investment | Government policy | Hardware | M&A | Mobile | Regulatory action | Satellite | Services | Software | Technology | Telecoms | UK | WiMax

New UK foreign investment law to impact telecoms, digital and data transactions
ByRob Bratby 24 May 202124 May 2021

Summary By the end of 2021, many corporate transactions in the communications, data infrastructure, artificial intelligence, satellite and space technologies sectors (and some others) will be subject to mandatory notification to, and national security review by, the UK government. Implementation timetable The National Security and Investment Act 2021 (“Act“) became part of UK law on…

Read More New UK foreign investment law to impact telecoms, digital and data transactions
Mobile | Ofcom | Regulatory action | Telecoms | UK

Ofcom announces UK 5G 2021 spectrum auction results
ByRob Bratby 27 April 202127 April 2021

On 27 April 2021, Ofcom announced the final results of the UK’s 2021 5G (700 MHz and 3.6-3.8 GHz bands) spectrum auction. The auction raised £1.379 bn pounds, only slightly higher than the £1.1bn reserve price. Results At the end of the assignment stage (27 April 2021), Ofcom granted the following UK spectrum licences: EE…

Read More Ofcom announces UK 5G 2021 spectrum auction results
Brexit | Fixed | Mobile | Ofcom | Regulatory action | Telecoms | UK

Ofcom sets regulatory framework for voice services in the UK
ByRob Bratby 10 April 202124 May 2021

Regulation of voice call termination in UK

Read More Ofcom sets regulatory framework for voice services in the UK