United Kingdom: Data Protection

The UK Court of Appeal has clarified the test for valid consent under GDPR, ruling that an objective approach should be taken rather than examining an individual's subjective state of mind. This decision has significant implications for how data controllers assess consent from vulnerable individuals, particularly in sectors like online gambling where addiction concerns arise.

OpenAI's integration of advertisements into ChatGPT marks a significant shift in how retailers can reach consumers through conversational AI. As this emerging channel offers contextual relevance at moments of genuine purchasing intent, retailers must navigate complex advertising regulations, data protection requirements, and sector-specific rules to ensure compliance while capitalizing on this novel marketing opportunity.

What happens when a disgruntled employee from a notorious brokerage firm decides to exercise their data protection rights? This podcast episode examines the intersection of privacy law and corporate misconduct through the lens of one of cinema's most infamous financial scandals, exploring how a simple data subject access request could have exposed a web of illegal activity.

Understanding how websites use cookies to enhance user experience and collect analytics data is essential for modern web browsing. This notice explains the cookie policy and tracking preferences available to visitors, including options to accept or decline non-essential tracking while maintaining preference settings.

Regulatory fines from UK and Spanish data protection authorities reveal divergent approaches to penalising the same 2023 cyber incident at genetic research company 23andMe.

Keystone Law explores the evolving landscape of data protection rights, focusing on new complaint mechanisms that businesses must understand and implement.

Explore comprehensive guidance on artificial intelligence disclosure requirements across multiple jurisdictions worldwide. This resource examines how different countries and regions approach transparency obligations for AI systems, helping organizations navigate the complex landscape of emerging AI regulations and compliance frameworks.

Recent EU and UK court decisions have reshaped the landscape of data protection compliance, clarifying critical boundaries around consent, data subject rights, cybersecurity obligations, and children's privacy. These rulings demonstrate that organizations must move beyond formal compliance to embed proportionality, accountability, and risk-based decision-making into their data processing activities, even when disclosures are legally required or supported by valid legal bases.

A global organization launches a critical report examining how AI transparency tools and content provenance systems, designed to promote trust and verify authenticity, could paradoxically be weaponized against journalists, human rights defenders, and documentary filmmakers in hostile political environments. The analysis explores the unintended surveillance risks embedded in digital watermarking and content credential technologies now being integrated into cameras, mobile devices, and distribution platforms.