United Kingdom | Publication | November 2025
The Information Commissioner’s Office (ICO) has published a consultation paper on new guidance about the process it follows when carrying out investigations and taking enforcement action using its powers under the UK General Data Protection Regulation and the Data Protection Act 2018.
The draft guidance is primarily aimed at organisations that process personal data and their advisers. It covers the ICO’s investigation process, from information gathering to reaching a decision on whether to use its statutory enforcement powers. The purpose of the new draft guidance is to provide organisations with more detail about the ICO’s approach and to give greater transparency on how enforcement powers are used.
The draft guidance does not cover the process followed in the prosecution of criminal offences. Information about the ICO’s criminal powers is set out in its separate prosecution policy statement.
The consultation closes on January 23, 2026.
Publication
In the past decade the video gaming industry has grown immensely. This, in combination with a number of unique factors, makes the video gaming industry a very interesting target for cyber criminals.
Publication
On August 1, 2025, the UK Supreme Court delivered its long-awaited judgment in Hopcraft v Close Brothers Limited and on 3 August the FCA announced it would consult on a redress scheme.
Publication
The Regional Court of Munich (LG München I) has issued a landmark judgment in GEMA v OpenAI (Case No. 42 O 14139/24), holding that the use of copyrighted song lyrics for training generative AI models without a licence violates German copyright law.
Subscribe and stay up to date with the latest legal news, information and events . . .
© Norton Rose Fulbright LLP 2025