UK & EU Data Protection Bulletin: September - October 2018

Written By

ariane mole module
Ariane Mole

Of Counsel
France

I am Global Chair of Data Protection. Thanks to many years of experience dedicated to data protection, I can provide innovative and practical solutions to clients around the world.

ruth boardman module
Ruth Boardman

Partner
UK

I am based in London and co-head Bird & Bird's International Privacy and Data Protection Group. I enjoy providing practical advice and solutions to complex legal issues.

elizabeth upton module
Elizabeth Upton

Legal Director
UK

I'm a legal director in our London Privacy and Data Protection Practice working with clients in many of our key sectors.

Highlights in this edition include:

  • Two interesting cases: A Court of Appeal decision upholding the vicarious liability of Morrisons for a rogue employee's actions and a (failed) attempt to seek compensation on behalf of an undefined class of claimants from Google for a breach of the Data Protection Act 1998.
  • New laws banning cold calling for claims management services and pensions.
  • Our views on the £500,000 fine imposed by the ICO on Facebook as part of her Office's investigation into Cambridge Analytica.
  • EDPB Opinion on DPIA lists drawn up by Supervisory Authorities.
  • Draft Declaration on Ethics & Data Protection in AI open for consultation.

View the bulletin >

Latest insights

More Insights
Curiosity line blue background

An In-depth Analysis of China’s Network Data Security Regime Part III: Cross-Border Data Transfer and Platform Data Protection

Aug 14 2025

Read More
Curiosity line green background

ASIC Takes Action Against Fortnum Private Wealth Over Cybersecurity Failures

Aug 11 2025

Read More
Curiosity line pink background

China Cybersecurity and Data Protection: Monthly Update - July 2025 Issue

Aug 07 2025

Read More