United Kingdom: Data Protection

The Family Justice Council's May 2025 guidance addresses the increasingly common practice of making covert recordings in family proceedings involving children. While smartphones have made secret recording easier than ever, the legal and welfare implications of using such evidence in court are complex and potentially serious. Understanding when recordings may be admissible, and when they might actually harm your case, is crucial for anyone involved in family proceedings.

The UK government has launched consultations on data protection law in the age of AI, seeking practical examples of what works and where clarity is lacking. With the EU shifting its regulatory approach following the Draghi Report, the UK now has an opportunity to demonstrate how data protection rules can be simplified while maintaining high standards, potentially using the FCA's Consumer Duty as a blueprint for clearer, more intelligible regulations.

The UK's data protection regulator is preparing a formal Code of Practice on AI and automated decision-making, expecting businesses to assess their AI use well before it takes effect. Organizations subject to UK GDPR that develop or use AI tools—including those purchased from third parties—face significant compliance obligations that extend far beyond AI developers to any business making decisions about individuals through automated systems.

Recent advances in AI have made it possible to produce near-identical digital replicas of real people, yet the UK has no specific legal protection for an individual's likeness.

The Court of Appeal has rejected Meta's challenge to Dr Liza Lovdahl Gormsen's amendment of her pleadings to include a claim for 'user damages' in a competition law case concerning Facebook's collection of personal data. This decision opens up another potential claim against tech companies for alleged misuse of consumer data, with the question of whether such damages will be awarded to be decided at trial in October 2028.

As hybrid and flexible working arrangements become increasingly common, employees seeking to work remotely from abroad face a complex web of legal requirements that differ significantly from domestic arrangements. This analysis explores the critical distinctions between working from home in the UK versus relocating to work in Spain, examining visa requirements, employment rights, data protection obligations, and the essential policies employers must implement to manage cross-border remote working arrangemen

Lewis Silkin's website provides essential information about accessibility standards, complaint procedures, contact details, cookie policies, legal and regulatory disclosures, modern slavery statements, payment options through Legl, privacy policies, and terms and conditions. These resources help clients and visitors understand the firm's operational framework and compliance commitments.

Shadow AI—the use of unapproved artificial intelligence tools within organizations—poses significant risks for legal departments handling confidential and privileged information. This article examines how legal teams can identify shadow AI usage, understand the regulatory and ethical implications under frameworks like the EU AI Act, and implement governance strategies that balance innovation with compliance and data protection.

The UK's data protection and cyber security landscape is undergoing significant transformation through three major developments: the Cyber Security and Resilience Bill expanding regulatory scope to managed service providers and data centres, the Data (Use and Access) Act 2025 modernising UK GDPR provisions, and the NCSC's voluntary Cyber Governance Code of Practice for boards.