Useful summary of @iconews position on now not being "keen to pursue the minutiae of technical compliance in every case" privacylaws.com/news/ico-has-s… But given that in 2021-22 it secured no enforcement notices or prosecutions & issued just 4 #GDPR fines of £183k is this a change? 1/3

A little review of the main changes to the Bill from what we already knew: bit.ly/3l3kiw5

Judgment in R (ORG/3Million) v SSHD (No2) on the legality of the amended immigration exemption in the DPA 2018 to be handed down by Saini J tomorrow morning. I acted for ICO - Information Commissioner's Office as interested party

I crunched the numbers on ICO penalties. Data Protection Act fines: 117 PECR fines: 118 Earliest: 22/11/2010 (A4E) Latest: 13/2/2023 (It's OK Ltd) • Total: £89,150,450 • Paid: £43,380,650 • Appealed: £9,077,800 • Partially paid: £21,475,000 • Unpaid: £11,970,000

Judgment in UI now out. No right to compensation merely for a breach of the GDPR (ie the Lloyd v Google issue). But no threshold of seriousness imposed by GDPR either; that is left to national law subject to equivalence and effectiveness

Summary of last week's interesting subject access judgment #GDPR panopticonblog.com/2023/05/12/sub…

TikTok's UK £12.7 million 'monetary penalty notice' - i.e. the full details of the fine - now published: ico.org.uk/action-weve-ta…

Prismall v Google/DeepMind judgment out at 10:30 tomorrow - could make or break the last data misuse opt-out class action to have continued post-Lloyd v Google.

BREAKING: The European Parliament has adopted the #AI Act with an overwhelming majority. No last-minute amendment outside the text adopted at the committee level made it, including those from the European People's Party on Remote Biometric Identification.

Rwanda; me and Christopher Knight 11kbw.com/knowledge-even…

Judicial criticism of removing names from JR disclosure

It is done.

Important FTT judgment now out on the scope of the UK GDPR in Clearview AI v ICO. (No comment from me for now, as part of the Clearview team.) Worth a read. caselaw.nationalarchives.gov.uk/ukftt/grc/2023…

Interesting for FOIA peeps

New important follow-up: the ICO has written to "many of the UK's most visited websites" about cookies, giving them 30 days to respond. "It should be as easy to “Reject All” cookies as it is to “Accept All”," the regulator said today. ico-newsroom.prgloo.com/news/commissio…

Panopticon Podcast, Episode 2 is out now on Collective Litigation with Leo Davidson featuring Robin Hopkins. All for one, or none for all? When data breaches occur, they can affect thousands of people – but it’s in no-one’s interests to try to litigate thousands of similar

Prismall v Google/DeepMind will be up in the Court of Appeal on either 22 or 23 October, litigation fans.

CA decision in Al-Sadeq v Dechert, big LPP case. Revises (a) merits threshold for iniquity exception (omits “very strong” gloss) and (b) test for r/s b/w comms and iniquity for exception to apply (“part of” includes docs reporting/revealing iniquity). assets.caselaw.nationalarchives.gov.uk/ewca/civ/2024/…

Upper Tribunal's judgment in Experian. See para 95 if you want a summary of what transparency under the UKGDPR requires. panopticonblog.com/2024/04/23/exp…

New High Court subject access judgment. Plenty of legal points, colourful facts: Harrison v Cameron & Anor [2024] EWHC 1377 (KB) (07 June 2024) (bailii.org) #dataprotection #privacy