Katie McMullan

There has been a heightened focus on age assurance in recent months by the UK government, Ofcom (the UK online safety regulator) and the ICO (the UK data protection regulator). This is against the backdrop of the UK...more On 5 February 2026, section 80 of the Data (Use and Access) Act 2025 ("DUAA") came into force, replacing Article 22 of the UK GDPR and fundamentally reshaping the UK's approach to automated decision-making ("ADM"). At the...more On 5 February 2026, many of the key reforms to UK data protection law will take effect. They are being introduced through the Data Use and Access Act 2025 (“DUAA”), which is intended to simplify and streamline various parts...more The European Data Protection Board (EDPB) has adopted its draft Recommendations 1/2026 on Binding Corporate Rules for Processors (BCR-P) (“Recommendations”). ...more