Search results
248 results ordered by
The EU's Cyber Resilience Act: 10 on the 10
Today the EU's Cyber Resilience Act (Regulation (EU) 2024/2847) ('CRA') enters into force. The CRA recognises that the continuously evolving world of smart products is frequently challenged by vulnerabilities which can potentially lead to cyber-security incidents. Whilst most of the Act's obligations will not be applicable until three years from now, 10 December is the day when the EU takes a big step towards it's ten-year Cybersecurity Strategy. To mark the occasion, we have outlined ten key points that entities in scope must be aware of in preparation for compliance with the CRA.
Read moreNew Data (Use and Access) Bill
What does the new Data (Use and Access) Bill (the Data Bill) mean for businesses?
Read moreChanges to the One Stop Shop
In July 2023 the European Commission issued a Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679 (the 'GDPR' Regulations).
Read moreICO publishes guidance on compliance of game design with the Children’s Code
What steps can game designers take to ensure their games comply with the Children’s Code?
Read moreRPC Law x Web3: Gambling regulations – Don't Play Games of Chance with the Law
This is part of a series of RPC x Web3 articles designed to help Web3 participants and enthusiasts understand their rights in this rapidly evolving space.
Read moreSnapshots Autumn 2025
Our Autumn 2025 roundup of key legal developments for the modern commercial lawyer.
Read moreCJEU clarifies when pseudonymised data counts as personal data in third‑party transfers
When does pseudonymised data qualify as personal data in the context of transfers to third parties under the GDPR?
Read moreICO launches consultation on DUAA’s new recognised legitimate interest
Why does the Information Commissioner’s Office (ICO) consultation on recognised legitimate interest (RLI) draft guidance matter, and what should organisations be doing now?
Read moreEU’s Digital Omnibus initiative aims to simplify rules on data, cyber-security and AI
How will the European Commission’s Digital Omnibus initiative simplify legislation on data, cybersecurity, and artificial intelligence for businesses?
Read moreThe EU Data Act is live: how will SaaS, PaaS and IaaS providers be affected by new early termination and switching provisions?
What are the implications of the EU Data Act’s provisions on SaaS, PaaS and IaaS?
Read moreUK ICO’s risk-based approach to online advertising and cookie consent
How is the ICO proposing to adopt a more risk-based, proportionate approach to online advertising regulation - particularly around cookies - while maintaining privacy safeguards?
Read moreUK Data (Use and Access) Act comes into force
What are the key elements of the UK’s new Data (Use and Access) Act (DUAA)?
Read moreICO publishes new guidance on anonymisation and pseudonymisation
What are the ICO's latest key recommendations for effective anonymisation and pseudonymisation of personal data?
Read moreEncryption under scrutiny: what the ICO’s new guidance means for your business
What is the ICO's current thinking around encryption practices where organisations are subject to the UK GDPR?
Read more€530m TikTok fine highlights the importance of effective international data transfer mechanisms
What were the missing compliance elements in TikTok's international data transfers to China and why did these result in such a significant fine?
Read moreSnapshots Summer 2025
A roundup of key legal developments for the modern commercial lawyer.
Read moreHigh Court rules against Sky Betting’s targeted marketing
What constitutes valid consent under UK data protection law, particularly in the context of targeted marketing to vulnerable individuals?
Read moreStatus update on the UK’s new Data (Use and Access) Bill
The UK’s new Data (Use and Access) Bill (DUA Bill) is on its way, but where is it in the legislative process? And what are proving the sticking points?
Read moreDeveloping responsible GenAI – the UK and EU regulatory view
What is the UK and EU data protection authorities’ view on ensuring responsible generative AI (GenAI) development and deployment?
Read moreEuropean Data Protection Board adopts statement on age assurance technologies
How is the European Data Protection Board (EDPB) proposing to address the benefits and risks of age assurance technologies?
Read moreNew ICO guidance for “consent or pay” online ads
What is the view of the UK Information Commissioner’s Office (ICO) on whether “consent or pay” online advertising models are compliant with UK data protection law?
Read moreSnapshots Spring 2025
A roundup of key legal developments for the modern commercial lawyer.
Read moreSnapshots Winter 2024
A roundup of key legal developments for the modern commercial lawyer.
Read moreSnapshots Autumn 2024
A roundup of key legal developments for the modern commercial lawyer.
Read moreSnapshots Summer 2024
A roundup of key legal developments for the modern commercial lawyer.
Read moreSnapshots Spring 2024
A roundup of key legal developments for the modern commercial lawyer.
Read moreSnapshots Winter 2023
A roundup of key legal developments for the modern commercial lawyer.
Read moreSnapshots Autumn 2023
A roundup of key legal developments for the modern commercial lawyer.
Read moreSnapshots Summer 2023
A roundup of key legal developments for the modern commercial lawyer.
Read moreSnapshots Spring 2023
A roundup of key legal developments for the modern commercial lawyer.
Read moreSnapshots Winter 2022
A roundup of key legal developments for the modern commercial lawyer.
Read moreIt's a wrap! Highlights from the ICO DPPC 2025
The ICO held its annual Data Protection Practitioners' Conference (DPPC) on 14 October. With a packed agenda, eminent speakers and over 7,000 data protection professionals in attendance, it was one of the highlights of the privacy lawyer's year. Here we set out the key messages we took away from the conference.
Read moreCyber_Bytes - Issue 77
Welcome to Issue 77 of Cyber_Bytes, our regular round-up of key developments in cyber, tech and evolving risks.
Read moreCyber_Bytes - Issue 76
Welcome to Issue 76 of Cyber_Bytes, our regular round-up of key developments in cyber, tech and evolving risks.
Read moreOfcom publishes children's online safety codes and risk assessment guidance
What measures must in-scope service providers undertake following the introduction of Ofcom's Protection of Children Codes and Guidance (the Codes)?
Read moreNew UK Software Security Code of Practice
What impact will the new voluntary Software Security Code of Practice have on UK organisations?
Read moreNavigating the AI Act: The GPAI Code of Practice and Guidelines
What does the European Commission’s GPAI Code of Practice and Guidelines mean for providers of General Purpose AI models?
Read moreFirst fines issued under the EU Digital Markets Act
How have obligations under the Digital Markets Act (DMA) been enforced recently and what are the ramifications for a lack of compliance?
Read moreEU Commission's call for evidence on European Business Wallet
What is the new European Business Wallet and how could businesses benefit from it?
Read moreEU Commission seeks feedback on guidelines for the protection of minors online under the Digital Services Act
What might the change in the Digital Services Act (DSA) guidelines mean for providers of online platforms that can be used by minors?
Read moreGenerative AI – addressing copyright
When it comes to the interaction of AI and IP rights, most attention and litigation has been focussed on copyright. The three main issues are whether: (1) the way FMs are trained using works from the internet infringes the copyright in the works of content creators such as authors, artists and software developers; (2) the outputs of FMs infringe the copyright of content creators; and (3) AI generated works are protectable.
Read moreCyber_Bytes - Issue 75
Welcome to Issue 75 of our Cyber_Bytes, our regular round-up of key developments in cyber, tech and evolving risks.
Read moreEU-UK data adequacy renewal - proceed with caution
The EU-UK draft adequacy renewal was published last week. Partner Cavan Fabris and trainee Sophie Hudson from our Cyber & Data Privacy team have summarised the key takeaways below.
Read moreData Dispatch - June 2025
Welcome to our June 2025 edition of Data Dispatch from the Data Advisory team at RPC. Our aim is to provide you on a regular basis with an easy-to-digest summary of key developments in data protection law.
Read moreWhat is a foundation model?
Foundation Models (FM), also often known as general purpose AI, are a type of AI technology that are trained on large datasets and are capable of carrying out a wide range of "general" tasks and operations.
Read morePart 1 - UK AI regulation
There has been consistent messaging from the UK Conservative-led government that the UK has decided to adopt a light touch approach to regulating AI. This was evident in the AI white paper published in March 2023 which outlined a principles based framework (see ['The Ethics of AI – the Digital Dilemma'] for more information about the principles themselves and see here for additional coverage of the AI white paper). The UK government held a consultation on the AI white paper in 2023 and published a response on 6 February 2024 that adds slightly more flesh to the bones of the UK framework.
Read moreThe Role of AI in Disputes
While lawyers have had various forms of AI available to them for years, it is generative AI and the development of large language models (LLMs) which is likely to represent a fundamental shift for dispute resolution. This technology now offers language capabilities that have never been seen before, and is likely to transform the way lawyers conduct proceedings.
Read moreAI and Privacy – 10 Questions to Ask
We set out in this section 10 key questions to ask yourself at the outset when developing or deploying AI solutions in your business.
Read moreThe Ethics of AI - The Digital Dilemma
This is Part 6 of 'Regulation of AI – raising the trillion dollar bAIby'
Read morePart 6 – Practical Considerations
AI focussed actors and providers have been focussing on their forthcoming AI obligations and on governance for some time, but it is now prudent for the majority of organisations to assess how their use of AI will come within the scope of regulation in key territories and become familiar with each regime (and devise a means to keep up with the anticipated fast moving changes). Planning for the costs of compliance and for AI governance including systems and procedures for data retention and record keeping should also be part of current business strategy together with building expertise on AI internally and identifying trusted advisors from the "noise" of what is being offered externally.
Read moreStay connected and subscribe to our latest insights and views
Subscribe Here