Curtis McCluskey

On 15 April 2026, the European Data Protection Board (EDPB) published draft Guidelines on the processing of personal data for scientific research (Guidelines), marking a significant step towards greater consistency in the...more On 19 March 2026, the Court of Justice of the European Union (CJEU) in Case C-526/24 (Brillen Rottler) held that a data subject's first access request may, in certain circumstances, be refused as "excessive" under the EU...more Following the UK Government's launch of a public consultation on its proposed legislative measures to combat the threat of ransomware (see Goodwin’s January 2025 analysis), the UK Government published its response to the...more On 19 November 2025, the European Union introduced two "Omnibus" reform packages, each targeting different regulatory domains but united by a common goal: regulatory simplification across the European Union. ...more