Search results

Thinking - Blog

Digital comparison tools under review

Published on 12 Oct 2016. By Melanie Musgrave, Of Counsel

The UK's CMA has launched a market study into price comparison tools, such as price comparison websites and smartphone apps. The aim is to establish what action, if any, is required to improve how this market works. The CMA has until 28 March 2017 to decide whether to open an in-depth market investigation.

Thinking - Blog

Blocking the blockers: EU prohibits network-wide ad-blocking

Published on 12 Sep 2016. By Oliver Bray, Senior Partner

Mobile phone operators' plans to introduce network-wide ad-blocking technology are in jeopardy following new guidance from EU telecoms regulators, a move which highlights the divide between content providers and telecoms companies in their attitude towards ad-free content.

Thinking - Blog

Drones: don't fly out of bounds (legally)

Published on 27 Jul 2016.

Various commercial industries have already woken up to the myriad opportunities offered by drone technologies. Whilst the regulatory regime evolves, it is important that companies don’t fall foul of the law.

Thinking - Blog

Price fixing online – a new competition authority warning

Published on 18 Jul 2016. By Melanie Musgrave, Of Counsel

The UK's Competition and Markets Authority ("CMA") has released an open letter to suppliers and retailers warning against online practices which constitute price fixing.

Thinking - Blog

Update: High Court provides guidance on termination for contracting parties

Published on 27 Jan 2016.

In the recent case of C&S Associates Ltd v Enterprise Insurance Company Plc [2015] EWHC 3757 (Comm) the High Court considered a number of issues that will be of interest to contracting parties, including:

Thinking - Blog

FCA Publish Draft Guidance on Cloud Services

Published on 30 Nov 2015. By Mark Crichard, Partner

The FCA has recently published draft guidance for firms outsourcing to the cloud and other third party IT services. This comes as part of the FCA's work on "Project Innovate" which aims to tackle issues stifling innovation within the regulatory sector.

Thinking - Blog

FCA to examine use of big data in insurance

Published on 26 Nov 2015.

This week, the FCA has issued a "call for inputs" around how insurance firms use big data.

Thinking - Publication

Cyber fraud – a new hope?

Published on 23 Nov 2015.

We have previously warned of the threat posed by fraudsters who are targeting solicitors’ client accounts to misappropriate funds.

Thinking - Blog

The Modern Slavery Act: what you need to know about the new reporting obligation

Published on 10 Nov 2015.

The Modern Slavery Act 2015 (the Act) came into force on 26 March 2015. At a high level it aims to improve law enforcement tools, strengthen criminal penalties and deliver better protection and support for victims.

Thinking - Blog

Do you know you're being tracked?

Published on 05 Oct 2015. By Oliver Bray, Senior Partner

Do you own a smart phone? Do you always have WiFi enabled? If your answers to both these questions are yes, your movements were most probably tracked on your way into work today.

Thinking - Blog

EU Consultation on standards for a Digital Single Market

Published on 24 Sep 2015.

On 23 September 2015, the European Commission launched a public consultation on information and communications technology ("ICT") standards for creation of a Digital Single Market.

Thinking - Blog

Update: IT Suppliers beware! Your right to terminate on a customer insolvency is changing…

Published on 16 Sep 2015.

In September 2013 we reported on the Enterprise and Regulatory Reform Act 2013 which provided the Government with the power to extend the law regarding the supply of essential services to insolvent customers.

Thinking - Blog

Article 29 Working Party keeps up the pressure on data reform discussions

Published on 02 Sep 2015.

The EU data protection reform package has entered its decisive phase. The first trilogue between the European Parliament, the European Commission and the Council of Ministers began on 24 June 2015 but, even at this late stage, there are many key concepts still to be finalised.

Thinking - Blog

Transparency by design – putting FOIA at the forefront of public sector outsourcing contracts

Published on 20 Aug 2015.

Earlier this year, the Information Commissioner's Office (ICO) published a guidance document recommending some steps for public authorities (Authorities) to take when entering into outsourcing arrangements to help them comply with their freedom of information obligations.

Thinking - Publication

Technology and cyber risk update

Published on 29 Jul 2015.

Drones – issues for casualty insurers

Thinking - Blog

Digital content under the new Consumer Rights Act

Published on 14 May 2015. By Oliver Bray, Senior Partner

The Consumer Rights Act 2015 (CRA) comes into force on 1 October 2015. It will reform consumer law in the UK, in particular by setting up new consumer rights and remedies in respect of digital content.

Thinking - Blog

UK cyber security: insure against 'rapid, highly damaging and public' threats

Published on 06 May 2015. By Mark Crichard, Partner

Cyber attacks present a daily threat to UK businesses and have become more destructive in recent years with data breaches and hacks frequently making front page news.

Thinking - Blog

Court of Appeal opens the door to 'distress-only' data breach claims where no financial loss

Published on 21 Apr 2015.

In an important ruling, the Court of Appeal confirms that misuse of private information is a tort and rules on the meaning of "damage" under s13 of the Data Protection Act ("the DPA"), allowing claimants to recover compensation for "distress" resulting from a breach of the Act without also having to prove pecuniary losses.

Thinking - Blog

Supreme Court clarifies the limits on contractual discretion

Published on 30 Mar 2015. By David Cran, Partner, Head of IP & Tech

A recent decision of the Supreme Court1 has confirmed that the limits on contractual discretion include a requirement to take relevant issues into account and that the discretion is not exercised irrationally.

Thinking - Blog

CMA call for information on use of online reviews

Published on 12 Mar 2015.

Online reviews: love them or hate them, there is no escape. Products, services, large multinationals, SMEs, online or offline, almost everyone is being judged these days.

Thinking - Blog

ICO fines online travel insurer £175,000 for failing to keep customers’ personal information secure

Published on 03 Mar 2015. By Oliver Bray, Senior Partner

The Information Commissioners Office (the “ICO”) has fined Staysure.co.uk Limited (“Staysure”), an online travel insurance company, £175,000 for its failure to comply with the seventh data protection principle, after IT security failings allowed hackers to access up to 100,000 customer financial records.

Thinking - Blog

New powers to audit NHS authorities' data protection compliance

Published on 04 Feb 2015. By Mark Crichard, Partner

From 1 February 2015, the ICO will be able to subject public healthcare organisations to compulsory audits of their data protection compliance under section 41A of the Data Protection Act 1998.

Thinking - Blog

New UK Procurement Rules Published for Consultation

Published on 09 Oct 2014. By Mark Crichard, Partner

Draft new Public Contracts Regulations 2015 and a Consultation Document on UK Transposition of the new EU Procurement Directives have recently been published by the Cabinet Office. This paves the way for the 2014 Directives to be implemented in the UK early next year.

Thinking - Blog

FCA COMPLETES THEMATIC REVIEW OF MOBILE BANKING AND PAYMENTS

Published on 07 Oct 2014. By Mark Crichard, Partner

The Financial Conduct Authority (FCA) has recently published its findings following its thematic review of mobile banking and payments.

Thinking - Blog

EU Consultation on Cloud Computing and Software

Published on 30 Sep 2014. By Mark Crichard, Partner

The EU has opened a public consultation to help define future research priorities in the areas of Cloud Computing and Software (including Open Source). Any and all stakeholders are invited to submit their views by 10 October 2014.

Profile

Sophie Hudson

Trainee Solicitor

Thinking - Publication

Cyber_Bytes Issue 70

Published on 31 Dec 2024. By Richard Breavington, Partner and Daniel Guilfoyle, Partner and Rachel Ford, Partner and Ian Dinning, Senior Associate and Christopher Ashton, Senior Associate and Bethan Griffiths, Senior Associate and Elizabeth Zang, Associate and Emanuele Santella , Associate and Lauren Kerr, Associate

Welcome to Cyber_Bytes, our regular round-up of key developments in cyber, tech and evolving risks.

Thinking - Publication

New guidance on balancing data protection with the FCA's Consumer Duty and the TPR's Code of Practice

Published on 19 Dec 2024. By Helen Yost, Senior Associate and Jon Bartley, Partner and Jonathan Charwat, Partner

The Financial Conduct Authority (FCA), Information Commissioner's Office (ICO) and The Pensions Regulator (TPR) have published welcome guidance (Joint Statement) aimed at retail investment firms and pension providers on how to ensure their customer communications comply with the FCA's Consumer Duty (Consumer Duty) and the TPR’s Code of Practice (Code of Practice), whilst ensuring they follow the rules on direct marketing and data protection.

Thinking - Blog

Privacy developments – looking back and looking forward

Published on 19 Dec 2024. By Oliver Bray, Senior Partner and Jon Bartley, Partner and Joe Lippitt, Partner and Praveeta Thayalan, Knowledge Lawyer

In this article, we give you a high-level snapshot of the key data protection and privacy developments in the UK and EU in 2024 as well as developments we anticipate for 2025.

Thinking - Snapshot

New Standard Contractual Clauses for data importers outside the EAA but subject to the GDPR

Published on 10 Dec 2024. By Oliver Bray, Senior Partner

Are the EU’s Standard Contractual Clauses (SCCs) needed if a data importer is located outside the European Economic Area (EEA) and already directly subject to the EU General Data Protection Regulation (EU GDPR)? In other words, where third party controllers and processors are based outside the EAA but subject to the GDPR, do you still need the SCCs to enable a lawful international transfer to them?

Thinking - Snapshot

The UK’s new Data (Use and Access) Bill

Published on 10 Dec 2024. By Oliver Bray, Senior Partner

What does the UK’s new Data (Use and Access) Bill (the Data Bill) mean for businesses?

Thinking - Blog

The EU's Cyber Resilience Act: 10 on the 10

Published on 10 Dec 2024. By Richard Breavington, Partner and Dorian Nunzek, Trainee Solicitor

Today the EU's Cyber Resilience Act (Regulation (EU) 2024/2847) ('CRA') enters into force. The CRA recognises that the continuously evolving world of smart products is frequently challenged by vulnerabilities which can potentially lead to cyber-security incidents. Whilst most of the Act's obligations will not be applicable until three years from now, 10 December is the day when the EU takes a big step towards it's ten-year Cybersecurity Strategy. To mark the occasion, we have outlined ten key points that entities in scope must be aware of in preparation for compliance with the CRA.

Thinking - Snapshot

EDPB’s new publications on the ePrivacy Directive, processors and legitimate interests

Published on 09 Dec 2024. By Oliver Bray, Senior Partner

What are the key takeaways for organisations processing personal data set out in the recent Guidelines and Opinions adopted by the European Data Protection Board (EDPB)?

Thinking - Snapshot

ICO Statement on Generative AI Model Training

Published on 09 Dec 2024. By Oliver Bray, Senior Partner

What position does the Information Commissioner’s Office (ICO) continue to take on Generative AI Model training?

Thinking - Snapshot

ICO reprimands Sky Betting and Gaming for using non-essential cookies without users’ consent

Published on 09 Dec 2024. By Oliver Bray, Senior Partner

What proactive steps should website operators take to ensure that their use of cookies complies with UK data protection law? Put another way, are you sure personal data is not being collected by your website’s advertising cookies before users have consented to their deployment?

Thinking - Snapshot

Irish DPC fines LinkedIn €310m for behavioural analysis and targeted advertising breaches

Published on 09 Dec 2024. By Oliver Bray, Senior Partner

How certain do data controllers need to be of their lawful basis for processing personal data when engaging in behavioural analysis and targeted advertising, and how clearly must this be reflected in a privacy policy?

Thinking - Publication

DORA Watch - November 2024

Published on 04 Dec 2024. By Jon Bartley, Partner

As financial entities and ICT service providers undergo the final stages of implementation of the Digital Operational Resilience Act (DORA) requirements into their systems and processes, it is imperative to understand the legal developments and ongoing updates arising from EU Member States as they go through their respective transposition and alignment processes. Through TerraLex - our global legal network, which provides us with access to 22,000 lawyers from highly regarded and carefully vetted law firms stretching more than 120 countries – we have collated legal updates focusing on DORA and its implications in EU jurisdictions.

Thinking - Publication

Data Dispatch - November 2024

Published on 28 Nov 2024. By Jon Bartley, Partner and Helen Yost, Senior Associate and Amy Blackburn, Senior Associate and Praveeta Thayalan, Knowledge Lawyer and Kiran Dhoot, Associate

Welcome to the eighth edition of Data Dispatch from the Data Advisory team at RPC. Our aim is to provide you on a regular basis with an easy-to-digest summary of key developments in data protection law.

Thinking - Blog

New Data (Use and Access) Bill

Published on 26 Nov 2024. By Jon Bartley, Partner and Praveeta Thayalan, Knowledge Lawyer

What does the new Data (Use and Access) Bill (the Data Bill) mean for businesses?

Thinking - Publication

Cyber_Bytes Issue 69

Published on 21 Nov 2024. By Richard Breavington, Partner and Daniel Guilfoyle, Partner and Rachel Ford, Partner and Ian Dinning, Senior Associate and Christopher Ashton, Senior Associate and Bethan Griffiths, Senior Associate and Elizabeth Zang, Associate and Emanuele Santella , Associate and Lauren Kerr, Associate

Welcome to Cyber_Bytes, our regular round-up of key developments in cyber, tech and evolving risks.

Thinking - Publication

Navigating a cyber breach

Published on 20 Nov 2024. By Richard Breavington, Partner and Daniel Guilfoyle, Partner and Rachel Ford, Partner

Cyber attacks remain a board-level concern for companies given their ability to disrupt services and unleash serious repercussions on financial, reputational, and operational fronts.

Thinking - Publication

DORA Developments Compilation – October 2024

Published on 15 Nov 2024. By Jon Bartley, Partner and Richard Breavington, Partner

As financial entities and ICT service providers undergo the final stages of implementation of the Digital Operational Resilience Act (DORA) requirements into their systems and processes, it is imperative to understand the legal developments and ongoing updates arising from EU Member States as they go through their respective transposition and alignment processes. Through TerraLex - our global legal network, which provides us with access to 22,000 lawyers from highly regarded and carefully vetted law firms stretching more than 120 countries – we have collated legal updates focusing on DORA and its implications in EU jurisdictions.

Thinking - Blog

Digital operational resilience: the UK regulatory landscape

Published on 15 Nov 2024. By Richard Breavington, Partner

Operational Resilience in the supply chain has become an undeniable priority for all financial service providers across the continent.

Thinking - Publication

Data Dispatch - October 2024

Published on 28 Oct 2024. By Jon Bartley, Partner

Welcome to the seventh edition of Data Dispatch from the Data Advisory team at RPC. Our aim is to provide you on a regular basis with an easy-to-digest summary of key developments in data protection law.

Thinking - Blog

The EU Cyber Resilience Act targets digital components made available in the EU market throughout the entire supply chain of a product

Published on 28 Oct 2024. By Elizabeth Tucker, Associate and Lauren Kerr, Associate

Last month, the EDPB published their "Guidelines on Examples regarding Personal Data Breach Notification" (the Guidelines). These are intended to provide "practice-oriented, case-based" guidance on when it is necessary to notify the relevant supervisory authorities (the SA) under Article 33(1) of the GDPR and/or data subjects under Article 34(1) of the GDPR following a personal data breach.

Thinking - Snapshot