Search results

Thinking - Blog

The NIS Regulations to expand to bring outsourced IT providers and managed service providers into scope

Published on 05 Jan 2023. By Richard Breavington, Partner

The UK's Network and Information Systems ("NIS") Regulations came into force in May 2018 to boost the level of security of network and information systems for the provision of essential services, such as transport, energy, water, health and digital infrastructure ("operators of essential services (OES)"). These Regulations also applied to digital services, such as online marketplaces, online search engines and cloud computing services ("relevant digital service providers (RDSPs)").

Thinking - Publication

Cyber_Bytes - Issue 48

Published on 04 Jan 2023. By Richard Breavington, Partner and Daniel Guilfoyle, Partner and Ian Dinning, Senior Associate and Rachel Ford, Partner and Christopher Ashton, Senior Associate and Elizabeth Zang, Associate and Emanuele Santella , Associate

Welcome to Cyber_Bytes, our regular round-up of key developments in cyber, tech and evolving risks.

Thinking - Blog

RPC Law x Web3: If There's Something Strange in the Web3 World, Who You Gonna Call?

Published on 06 Dec 2022. By Nick Lauw, Partner and Yuankai Lin, Partner

"And the way we win is by creating a new, democratic, decentralised internet, one where the behaviour of companies like this will be impossible forever. One where it is the users, not the kings, who have sovereign control over their data." - Richard Hendricks, in the HBO TV Series "Silicon Valley", portrayed by Thomas Middleditch

Thinking - Publication

Cyber_Bytes - Issue 47

Published on 02 Dec 2022. By Richard Breavington, Partner and Daniel Guilfoyle, Partner and Ian Dinning, Senior Associate and Rachel Ford, Partner and Christopher Ashton, Senior Associate and Elizabeth Zang, Associate and Emanuele Santella , Associate

Welcome to Cyber_Bytes, our regular round-up of key developments in cyber, tech and evolving risks.

Thinking - Blog

RPC Law x Web3: Considerations for NFT Founders Building Communities and Providing Utility to Holders

Published on 09 Nov 2022. By Nick Lauw, Partner

In the past when one purchased an NFT, the only expectation was that he, she, or they was purchasing rights in an asset (usually a digital artwork).

Thinking - Publication

Recent developments in data subject litigation caselaw

Published on 10 Oct 2022. By Richard Breavington, Partner and Daniel Guilfoyle, Partner and Ian Dinning, Senior Associate and Rachel Ford, Partner and Christopher Ashton, Senior Associate and Elizabeth Zang, Associate and Emanuele Santella , Associate

Two interesting recent developments in the case law relating to data subject litigation. These further undermine the viability of low-value claims for personal data breaches for claimant law firms.

Thinking - Blog

RPC Law x Web3: Ownership of Digital Assets in Web3

Published on 27 Sep 2022. By Nick Lauw, Partner

This is the inaugural part of a series of articles relating to legal issues around Web3. Over the course of the next few months, will hope to provide you with some thoughts and insights on the areas of Web3 where potential legal issues may arise based on current laws.

Thinking - Publication

Singapore data protection update

Published on 15 Sep 2022. By Nick Lauw, Partner

New guidance from the Court of Appeal for parties involved in an action against another individual for loss and damage suffered as a result of a contravention of the provisions of the PDPA.

Thinking - Publication

Cyber Incident Reporting Obligations for Hong Kong Licensed Financial Services Companies

Published on 02 Aug 2022. By Jonathan Crompton, Partner and Flora Leung, Senior Associate

The number of cyber-attacks is on the rise. In particular, financial services companies have been identified as key targets for threat actors in the Q2 of 2022.

Thinking - Publication

Changes to data protection legislation in Asia – 2022 update (including Mainland China)

Published on 19 Jul 2022. By Jonathan Crompton, Partner and Yuankai Lin, Partner

Looking back on the last 18 months, the data privacy laws of several Asian jurisdictions have been updated to incorporate stronger protections for individuals’ personal data. This article provides an update on a handful of jurisdictions in Asia and summarises some of those main changes, including the far-reaching implications of the new data protection law in Mainland China.

Thinking - Publication

Hong Kong data protection: cross-border transfers of personal data

Published on 20 Jun 2022. By Jonathan Crompton, Partner and Andrea Randall, Partner

We take a closer look at businesses' obligations under Hong Kong law to protect personal data in a cross-border transfer and the new recommended model contractual clauses.

Press and Media

42.2m people in the UK had their financial data compromised in breach last year- up 1,777%!

Published on 19 Apr 2022. By Richard Breavington, Partner

Financial data belonging to as many as 42.2m* people in the UK was compromised in data breaches last year, up 1,777% from 2.2m in 2019-20, says RPC, the international law firm.

Thinking - Blog

EDPB guidelines on personal data breach notifications

Published on 14 Feb 2022. By Richard Breavington, Partner and Elizabeth Zang, Associate

Last month, the EDPB published their "Guidelines on Examples regarding Personal Data Breach Notification" (the Guidelines). These are intended to provide "practice-oriented, case-based" guidance on when it is necessary to notify the relevant supervisory authorities (the SA) under Article 33(1) of the GDPR and/or data subjects under Article 34(1) of the GDPR following a personal data breach.

Press and Media

"Remain vigilant": RPC warns businesses in wake of KP Snacks cyber attack

Published on 03 Feb 2022. By Richard Breavington, Partner

Business large and small have been warned to remain vigilant to cybercrime after British snack company KP Snacks confirmed it had fallen victim to a ransomware attack which disrupted its food production and distribution.

Thinking - Blog

The Supreme Court hands down judgment in Lloyd v Google

Published on 10 Nov 2021. By David Cran, Partner, Head of IP & Tech

In a keenly anticipated judgment that has significant ramifications for UK data protection, the Supreme Court has today overturned the Court of Appeal's decision in Lloyd v Google and restored the original order made by the High Court, refusing the claimant's application for permission to serve proceedings on Google outside the jurisdiction.

Thinking - Blog

Case comment: striking out of privacy and confidence actions in the Dixons data breach case

Published on 10 Aug 2021.

The number of claims issued in the High Court (Media and Communications List) with a data protection element continues to increase. The rise in claim numbers can be attributed to a number of factors including: (i) individuals becoming more aware of their rights under data protection legislation, (ii) uncertainty as to whether individuals may recover damages for a loss of control of their personal data without proving material damage or distress; (iii) the abundance of specialist law firms who are prepared to act for individuals on a "no-win-no-fee" basis and (iv) the availability of After the Event ("ATE") insurance to protect a would-be claimant against adverse costs orders.

Thinking - Publication

Upcoming changes to data protection legislation in Asia

Published on 22 Dec 2020. By Jonathan Crompton, Partner

The data privacy landscape in Asia is varied, complex and evolving. We are already seeing the wheels of change in motion as the data privacy laws of several Asian jurisdictions are being updated to reflect more closely the European data protection regime. This article summarises some of those changes.

Thinking - Blog

Schrems II – Groundhog Day for Data Transfers

Published on 17 Jul 2020.

On Thursday 16 July, the Court of Justice of the European Union (“CJEU”) delivered its judgment in one of the most highly anticipated court cases in data protection, Case C-311/18 Data Protection Commissioner v Facebook Ireland Limited, Maximillian Schrems (widely referred to as “Schrems II”). This decision came almost 8 months after Advocate General Saugmandsgaard Øe published his Opinion, which albeit not binding, provided a strong indication for the CJEU's judgment.

Thinking - Blog

Restarting your business and implementing Government guidance to support NHS Test and Trace

Published on 02 Jul 2020. By Jon Bartley, Partner

In its latest guidance on keeping workers and customers safe during COVID-19 in restaurants, pubs, bars and takeaway services (23 June 2020), the Government has recommended that businesses operating in these sectors keep a temporary record of customers and visitors for 21 days. This will assist NHS Test and Trace with requests for that data if needed.

Thinking - Publication

Cybersecurity and COVID-19: Opportunities for change in the face of challenge

Published on 27 Mar 2020.

COVID-19 is not the first and will not be the last pandemic, but it is the first one that has brought the importance of cyber resilience and adaptability in the era of global trade to the forefront of many businesses' minds.

Thinking - Publication

Are you compliant with the new rules in Singapore? Asia? Beyond?

Published on 27 Feb 2020.

With the implementation of the GDPR in Europe (2018) and the rise of serious cyber-attacks in Asia, many APAC countries are making major changes to their data privacy laws. Navigating the various regulatory regimes can be complex particularly for companies doing business across the region and beyond.

Thinking - Blog

No Deal Brexit – implications for data and privacy law compliance

Published on 17 Oct 2019. By Jon Bartley, Partner and Richard Breavington, Partner

The Brexit rollercoaster ride continues. At the time of writing, the UK and EU have just announced the agreement of a new withdrawal deal but there are serious doubts about whether it will be backed by Parliament. Despite the requirements of the Benn Act, the risk of the UK leaving the EU without a deal continues to be a concern.

Thinking - Publication

Brexit does not spell the end of the GDPR

Published on 08 Feb 2017.

The General Data Protection Regulation (the GDPR) is due to become law on 25 May 2018. As this will be before “Brexit” (Britain’s exit from the EU) takes effect, the GDPR will apply in the UK from that date.

Thinking - Publication

Apps: regulators globally push for data transparency

Published on 16 Feb 2015.

“Not in front of the telly: Warning over ‘listening’ TV”.

Profile

Courtney So

Associate

Profile

Emanuele Santella

Associate

+44 20 3060 6000

Email Emanuele Santella

London

View profile

Profile

Andrea Randall

Partner

Profile

Flora Leung

Senior Associate

Profile

Daniel Guilfoyle

Partner

+44 20 3060 6000

Email Daniel Guilfoyle

Bristol

View profile

Profile

Richard Breavington

Partner

+44 20 3060 6341

Email Richard Breavington

London

View profile

Profile

Rachel Ford

Partner

Press and Media

RPC welcomes Alastair Mitton as Commercial, Technology and Outsourcing Partner

Published on 06 Jan 2025. By Alastair Mitton, Partner

International law firm RPC has announced the appointment of technology and outsourcing specialist, Alastair Mitton, as Partner in the firm's Commercial, Technology and Outsourcing practice in Bristol. The move is part of an ongoing focus to grow RPC's presence in the South West, particularly strengthening its Media, IP, Technology, Outsourcing and Commercial (MIPTOC) team and client base.

Thinking - Snapshot

EU publishes draft Code for general-purpose AI models

Published on 10 Dec 2024. By Oliver Bray, Senior Partner and David Cran, Partner, Head of IP & Tech

What measures are proposed by the EU AI Office to regulate general-purpose AI (GPAI) models?

Thinking - Snapshot

Ofcom rolls out implementation phases for compliance with the Online Safety Act

Published on 10 Dec 2024. By Oliver Bray, Senior Partner and David Cran, Partner, Head of IP & Tech

What is Ofcom’s timeframe for implementation of the Online Safety Act (OSA) and what actions will in-scope services need to take to ensure compliance?

Thinking - Snapshot

New Safer Phones Bill aims at “making social media less addictive” for young people

Published on 10 Dec 2024. By Oliver Bray, Senior Partner and David Cran, Partner, Head of IP & Tech

How does the Safer Phones Bill intend to protect young people online?

Thinking - Snapshot

Two years on from the Digital Services Act

Published on 10 Dec 2024. By Oliver Bray, Senior Partner and David Cran, Partner, Head of IP & Tech

How has the European Commission (Commission) enforced the Digital Services Act (DSA) since its inception?

Press and Media

RPC scores ten Band 1 rankings in Chambers UK 2025

Published on 17 Oct 2024.

Chambers UK recommends RPC in 26 categories overall, with a new Band 1 ranking for Media & Entertainment: Advertising and Marketing, first time rankings for Sport and Personal Injury, and promoted rankings for Media and IT and Outsourcing.

Press and Media

RPC recognised as top-tier firm across eight areas in The Legal 500 UK 2025

Published on 02 Oct 2024.

RPC, a law firm deeply invested in client ambitions and commercial success, is proud to be recognised once again in The Legal 500 UK 2025 rankings.

Thinking - Snapshot