3/9/2026 4:38:04 PM UK ICO issues updated guidance on international transfers: Part 1 – identifying restricted transfers By Rachael Annear Giles Pratt Philipp Roos Tochukwu Egenti Adam Gillert +2 more... Show less The UK’s General Data Protection Regulation (GDPR) regime imposes restrictions on the transfer of personal data outside the UK. In...
3/2/2026 9:16:39 AM Data Act Essentials #3: Navigating “reasonable compensation” for data sharing By Elena Brandt Christoph Werkmeister Theresa Ehlen Kristian Kues Annabelle Hamelin +2 more... Show less The EU Commission has released its draft guidelines on calculating “reasonable compensation” for mandatory data sharing under the Data...
2/25/2026 2:11:26 PM Decoding the Cyber Resilience Act – Part 2: A lifecycle approach to compliance By Satya Staes Polet Quentin Fontaine Christoph Werkmeister Theresa Ehlen Elena Brandt Annabelle Hamelin +3 more... Show less In the first blog post of our CRA series, we examined the scope of the Cyber Resilience Act (Regulation (EU) 2024/2847, the CRA),...
2/13/2026 9:02:07 AM CJEU paves the way for direct challenges to EDPB decisions By Christoph Werkmeister Elena Brandt Alvaro Pliego Selie Annabelle Hamelin +1 more... Show less In a pivotal ruling delivered on 10 February 2026, the Court of Justice of the European Union (CJEU) overturned an earlier order by the...
2/9/2026 4:36:01 PM UK data protection and ePrivacy reforms take effect: what businesses need to know By Giles Pratt Rachael Annear Adam Gillert The Data (Use and Access) Act 2025 (the DUAA) gained Royal Assent in June 2025. It includes a raft of reforms to the UK’s data protection...
2/9/2026 1:31:06 PM Caught between Brussels and Washington By Beth George Lutz Riede We were delighted to host AILBA in our Freshfields San Francisco office, bringing together an exceptional panel of speakers — including...
1/8/2026 10:17:44 AM How the EU Commission's Digital Omnibus could reshape cookie compliance in Europe By Christoph Werkmeister Elena Brandt Florian Klein Annabelle Hamelin +1 more... Show less The European Commission’s “Digital Omnibus” proposal, unveiled in November 2025 and still under legislative review, could significantly...
12/4/2025 11:59:05 AM UK plans major cyber security reforms: what you need to know By Rachael Annear Giles Pratt Rhodri Thomas Christine Simpson Adam Gillert +2 more... Show less The Cyber Security and Resilience (Network and Information Systems) (the Bill) was laid before Parliament on 12 November 2025. The Bill...
12/1/2025 10:27:49 AM Adequate for now: EDPB’s opinion on the level of data protection in the UK By Christoph Werkmeister Philipp Roos Vincent Fischer Rachael Annear Tochukwu Egenti +2 more... Show less The European Data Protection Board (EDPB) has recently adopted its opinion on the European Commission’s draft implementing decision to...
10/28/2025 3:39:22 PM Freshfields' report: Data Law Trends 2026 By Giles Pratt Christoph Werkmeister Data law is a key area of focus for regulators, with new rules, stricter enforcement, and diverging approaches across jurisdictions. Our...
10/15/2025 11:53:48 AM EU AI Act unpacked #30: Commission launches consultation on serious AI incident reporting rules By Christoph Werkmeister Davide Borelli Vera Ibes Introduction On 26 September 2025, the European Commission opened a public consultation on its draft guidance and standard reporting...
9/29/2025 9:32:50 AM The EU simplification drive continues at pace – Digital Omnibus is just around the corner By Natalie Pettinger Kearney Victor Garcia Lopez Anna Lehnert Early in its mandate, the second von der Leyen Commission has demonstrably prioritised regulatory simplification. Following the...