Log in to your client extranet for free matter information, know-how and documents.
Mills & Reeve system for employees.
The Court of Appeal provided important judicial clarification last week on the obligations of controllers of personal data in its judgment in DSG Retail Ltd v The Information Commissioner.
This blog discusses the CMA’s designation of Google’s general search and search advertising services with Strategic Market Status (SMS) under the Digital Markets, Competition & Consumers Act 2024.
Are you ready to transform your business culture and harness the true potential of innovation? In this blog we distil real-world insights from Mills & Reeve’s own journey, offering actionable steps and essential guardrails for leaders who want to foster creativity, drive change and lead with confidence.
The Enforcement Notice issued to Bristol City Council (BCC) in August 2025 by the Information Commissioner’s Office (ICO) sets out a sobering example of what happens when Data Subject Access Requests (DSARs) are mismanaged over an extended period.
For most organisations, internal investigations are familiar but complex. Whether the issue involves employee grievances, misconduct, or regulatory breaches, how an investigation is structured determines its legal defensibility and data protection compliance.
For those of you who have only just recovered from the GDPR, the news that data protection laws are changing again may not be entirely welcome.
Most of the EU Data Act (the Act) came into force on 12 September 2025. If you provide cloud services to customers in the EU, this means you will need to get to grips with new obligations to make it easier for your customers to switch to another provider.
Is the growth of AI being held back by uncertainty about how it may lawfully be deployed? In October, the Department for Science, Innovation and Technology issued an open call for evidence about its proposal to create an AI Growth Lab.
Despite the growing ubiquity of AI in the workplace, many organisations do not yet have an AI policy. In this blog, Nick Smallwood explores the findings from a recent KPMG/University of Melbourne survey, as well as the importance of crafting an AI policy.
The EU Data Act brought in new data access rights for EU based users of connected products and related services with the aim of making data (particularly industrial data) more accessible, usable, and to encourage data-driven innovation.
For in-house counsel, managing internal investigations demands careful attention to how personal data is handled. This blog explores the often-overlooked importance of lawful, fair, and secure data practices throughout the investigative process.
The risk of cyber-attacks is very well publicised and the travails of M&S, JLR and others are all over the press at the moment. Everyone is checking their systems and IT security in the hope of not becoming the next ransom victim.