United Kingdom: Privacy Protection

Recent UK legislation has dramatically expanded public access to trust information for overseas entities holding UK real estate, removing the previous requirement to know the trust's name. Any individual can now obtain detailed information about settlors, trustees, beneficiaries, and protectors for just £55, raising significant privacy and security concerns for families using trust structures.

The United Kingdom's Data (Use and Access) Act 2025 introduces a statutory requirement for organisations to establish documented data protection complaints procedures by June 2026. This reform reflects a broader regulatory shift towards demonstrable accountability in data protection, with implications extending beyond UK borders to organisations engaged in cross-border data processing, particularly in jurisdictions like Nigeria where data protection frameworks are still evolving.

The High Court has ordered company directors to surrender their mobile devices to an independent reviewer for disclosure of instant messages, establishing that privacy rights do not automatically override disclosure obligations. This landmark decision addresses the intersection of agency law, disclosure requirements, and Article 8 privacy protections in modern litigation involving digital communications.

The UK Data Use and Access Act (“DUAA”) introduces significant reforms to the UK’s data protection landscape, including a restructured complaints process for individuals seeking to raise data protection concerns with the Information Commissioner’s Office.

Workplace privacy developments accelerated globally in the first half of 2026, with significant changes in employee monitoring, AI governance, data rights, biometric data, and cybersecurity enforcement.

This update contains submissions from Dentons colleagues across the world, from the UK and EU to North America and Asia.

The King has opened the new parliamentary session and announced a number of Bills that may be relevant from a commercial, technology and regulatory perspective.

On 28 April 2026, the ICO published updated guidance on direct marketing using electronic mail to explain how charities can use the new "charitable purposes soft opt-in", which came into...

On May 8 2026, Ofcom published (1) an article (the Article) setting out its priorities for the 2026-27 financial year under the Online Safety Act 2023 (OSA); (2)...