Log in to your client extranet for free matter information, know-how and documents.
Mills & Reeve system for employees.
The usual problem for parties submitting a Data Subject Access Request (DSAR) is that they fail to extract all the information that they would like. This was turned on its head in Forsters LLP v Uddin [2025] EWHC 3255 (KB).
The Competition and Markets Authority (CMA) has imposed a financial penalty of £4.2m on Automobile Association Developments Limited (AA) for infringing consumer protection law.
On the 26 February 2026, the Competition Appeal Tribunal “CAT” made an important judgment under the Subsidy Control Act 2022 “SCA”, dismissing a challenge brought by The New Lottery Company and others against the Gambling Commission.
A recent inspiring women in tech event showed that the most powerful conversations in tech aren’t really about tech at all, they’re about people. This blog captures an honest, practical and uplifting discussion on confidence, curiosity and what “success” really looks like for women in the industry.
The Court of Appeal provided important judicial clarification last week on the obligations of controllers of personal data in its judgment in DSG Retail Ltd v The Information Commissioner.
This blog discusses the CMA’s designation of Google’s general search and search advertising services with Strategic Market Status (SMS) under the Digital Markets, Competition & Consumers Act 2024.
Are you ready to transform your business culture and harness the true potential of innovation? In this blog we distil real-world insights from Mills & Reeve’s own journey, offering actionable steps and essential guardrails for leaders who want to foster creativity, drive change and lead with confidence.
The Enforcement Notice issued to Bristol City Council (BCC) in August 2025 by the Information Commissioner’s Office (ICO) sets out a sobering example of what happens when Data Subject Access Requests (DSARs) are mismanaged over an extended period.
For most organisations, internal investigations are familiar but complex. Whether the issue involves employee grievances, misconduct, or regulatory breaches, how an investigation is structured determines its legal defensibility and data protection compliance.
For those of you who have only just recovered from the GDPR, the news that data protection laws are changing again may not be entirely welcome.
Most of the EU Data Act (the Act) came into force on 12 September 2025. If you provide cloud services to customers in the EU, this means you will need to get to grips with new obligations to make it easier for your customers to switch to another provider.
Is the growth of AI being held back by uncertainty about how it may lawfully be deployed? In October, the Department for Science, Innovation and Technology issued an open call for evidence about its proposal to create an AI Growth Lab.