Regulatory action
Copyright and AI policy in the UK reached a turning point on 18 March 2026, when the government published its Report on Copyright and Artificial Intelligence, together with an economic impact assessment. Both were required by sections 135 to 137 of the Data (Use and Access) Act 2025. The report confirms what the UK’s creative…
The EU agreed PSD3 and the Payment Services Regulation in November 2025, overhauling fraud liability, open banking and e-money rules. The UK is not bound by PSD3, but its own payments reform is heading in a similar direction. What firms operating across both regimes need to know.
Ofcom published its Telecoms Access Review 2026-31 on 17 March 2026.
EU Digital Networks Act unpacked. One rulebook for telecoms? The Commission’s plan to replace the EECC with a single, binding EU telecoms framework The European Commission has published its proposal for a Digital Networks Act (DNA), signalling the most significant reform of EU telecoms regulation in over a decade. Released on 21 January 2026, the…
EU Digital Omnibus: simplification or new complexity for digital and AI regulation? What has happened and why does it matter? The European Commission has proposed a Digital Omnibus Regulation to streamline elements of the EU’s digital legislative framework, including amendments to the GDPR, ePrivacy Directive, NIS2 and the Data Act, while repealing several existing measures…
UK Judges and ICO publish internal AI use guidelines In the UK’s rapidly developing AI governance landscape, two institutions have taken a decisive and self-reflective step. The Judiciary of England and Wales and the Information Commissioner’s Office (ICO) have both published their internal policies on the use of artificial intelligence. These are not external consultation papers or policy statements…
The Data (Use and Access) Act 2025 (DUAA) introduces sweeping changes in UK data regimes, from smart-data schemes and digital verification services to amendments of the Data Protection Act 2018 and UK GDPR. Rob Bratby of bratby.law guides UK businesses through compliance, strategic opportunities, and contract implications. Essential reading for counsel, transaction teams and commercial leaders.
Government sets out response to consultation Commentary Following its September 2021 consultation on reform of UK data protection law, on 23 June 2022 the UK government published its response and proposals to move forward. Whilst the proposals for a post-GDPR data protection law in the UK contain some sensible reforms and updates, it is clear…
On 17 November 2021, the Telecoms (Security) Act 2021, amending the Communications Act 2003, was enacted, with its provisions coming into force over time. The legislation: New primary legal obligations Primary duty on communications providers to identify, reduce and prepare for security compromise, and duty to prevent, remedy or mitigate effects of security compromise The…
UK sets out two alternatives to provide adequate contractual protection for the export of personal data from the UK What happened? In February 2022, the UK government published 2 alternative sets of contracts that can be used by organisations wishing to export personal data from the UK to countries that do not otherwise provide adequate…
New UK data protection law: worthwhile divergence or political point-scoring? What is proposed? On 10 September 2021, the UK government published its proposals to reform UK data protection law. Whilst current UK data protection law in the form of UK GDPR mirrors EU data protection law, the proposals represent the UK government seizing the opportunity…