Our solicitors advise organisations across the public, private and third sectors on a wide range of issues related to data protection and freedom of information compliance.
The General Data Protection Regulation (GDPR) and the Data Protection Act 2018 are the key pieces of data protection legislation governing personal data.
In order to remain compliant, it is important to take legal advice from expert solicitors who specialise in this particular area of law. Our data protection lawyers regularly advise on GDPR and Data Protection Act 2018 matters such as drafting and negotiating amendments to existing contracts, drafting data sharing agreements, providing advice relating to Data Subject Access Requests, international data transfers, advising on Data Protection Impact Assessments, updating and drafting privacy notices and preparing records of processing activities.
Our expertise in the public sector means we also frequently advise on compliance with the Freedom of Information Act, the Environmental Information Regulations (EIR) and similar legislation.
This ranges from advising on responses to requests for information, conducting audits of information which is potentially disclosable, advising on the applicability of statutory exemptions, responding to Information Commissioner investigations/complaints handling and dealing with vexatious requests.
30 August 2023
In recent news there have been reports of personal data breaches that have resulted from the release of information in response to a freedom of information request. Recently there was a news report that both Norfolk and Suffolk Constabularies have suffered personal data breaches as a result of releasing information in response to a freedom…
Read more13 April 2023
In brief: TikTok Information Technologies UK Limited and TikTok Inc (“TikTok”) have been issued a £12.7 million fine by the Information Commissioner’s Office (“ICO”) for personal data breaches involving: Providing information society services to children under the age of 13 without the consent of their parents or guardians. Failing to provide information to users on…
Read more28 November 2022
Executive Summary: Do public bodies need to release the names of parties who took part in a procurement exercise and failed to secure a bid? Greenwood v Information Commissioner [2022] UKFTT 00333 (GRC), explores this and held it was not in the public interest to release the names of companies who had made unsuccessful bids…
Read more
