EU
Biography
There has been a heightened focus on age assurance in recent months by the UK government, Ofcom (the UK online safety regulator) and the ICO (the UK data protection regulator). This is against the backdrop of the UK...more
On 5 February 2026, section 80 of the Data (Use and Access) Act 2025 ("DUAA") came into force, replacing Article 22 of the UK GDPR and fundamentally reshaping the UK's approach to automated decision-making ("ADM"). At the...more
The ongoing progress of the Digital Omnibus legislative reform is beginning to show that while the EU is not seeking to radically rewrite the data management rulebook, the various selective adjustments proposed are likely to...more
The European Data Protection Board (EDPB) has adopted its draft Recommendations 1/2026 on Binding Corporate Rules for Processors (BCR-P) (“Recommendations”). ...more
Firm
Washington, DC