Data Privacy & Cybersecurity

ICO Guidance on Lawful Basis for Personal Data Processing

The UK's Information Commissioner's Office (ICO) has updated its guidance on the lawful basis for processing personal data. This guidance is under review due to upcoming legislation, the Data (Use and Access) Act 2025, and may be subject to change.

UK GDPR: Controllers and Processors Definitions and Responsibilities

The UK's Information Commissioner's Office (ICO) has updated its guidance on definitions and responsibilities for data controllers and processors under UK GDPR. This update is in anticipation of the Data (Use and Access) Act 2025 and is suitable for large businesses, with resources also available for small businesses.

ICO Guidance on UK GDPR International Data Transfers

The UK's Information Commissioner's Office (ICO) has published updated guidance on international transfers of personal data under UK GDPR. The guidance consolidates information on adequacy regulations, appropriate safeguards, transfer risk assessments, and exceptions for restricted transfers.

FTC Sending $22.8 Million to Consumers for Deceptive Real Estate Schemes

The FTC is returning nearly $23 million to 1,659 consumers who were defrauded by deceptive real estate schemes, specifically Sanctuary Belize and Kanantik. This second distribution includes checks averaging $16,462 for Sanctuary Belize investors and $6,346.39 for Kanantik investors.

FTC Settlement with Express Scripts to Lower Drug Costs

The FTC has secured a settlement with Express Scripts, Inc. (ESI), a major pharmacy benefit manager, requiring significant changes to its business practices. These changes are projected to lower drug costs for patients by up to $7 billion over 10 years and increase revenue for community pharmacies.

FTC ANPRM on Rental Housing Fees Submitted to OMB

The FTC has submitted a draft Advance Notice of Proposed Rulemaking (ANPRM) concerning fees in the rental housing market to the Office of Management and Budget (OMB) for review. This action signals the agency's intent to potentially create new rules to address deceptive or unfair fees charged to renters.

FTC Draft Rulemaking on Negative Option Plans Submitted for Review

The FTC has submitted a draft Advance Notice of Proposed Rulemaking (ANPRM) concerning its Negative Option Rule to the Office of Management and Budget (OMB) for review. This action indicates the agency is considering potential revisions or new regulations related to negative option plans, which are common in subscription services.

FTC Warns 42 Law Firms on Anticompetitive DEI Hiring Practices

The FTC has issued warning letters to 42 law firms regarding potentially anticompetitive employment practices related to Diversity, Equity, and Inclusion (DEI) hiring. The firms, which participated in the Mansfield Certification program, are cautioned that coordinating on candidate pools or sharing pay information may violate antitrust laws.

ICO Enforcement Actions

The UK's Information Commissioner's Office (ICO) has published a list of its enforcement actions, including monetary penalties, prosecutions, and reprimands. This page serves as a central repository for these actions across various sectors.

ICO FOI Regulatory Actions

The Information Commissioner's Office (ICO) has updated its Freedom of Information (FOI) regulatory actions page. This update includes new notices, recommendations, and practice guidance related to FOI compliance for public authorities in the UK.