Log in to your client extranet for free matter information, know-how and documents.
Mills & Reeve system for employees.
Are you ready to transform your business culture and harness the true potential of innovation? In this blog we distil real-world insights from Mills & Reeve’s own journey, offering actionable steps and essential guardrails for leaders who want to foster creativity, drive change and lead with confidence.
The Enforcement Notice issued to Bristol City Council (BCC) in August 2025 by the Information Commissioner’s Office (ICO) sets out a sobering example of what happens when Data Subject Access Requests (DSARs) are mismanaged over an extended period.
For most organisations, internal investigations are familiar but complex. Whether the issue involves employee grievances, misconduct, or regulatory breaches, how an investigation is structured determines its legal defensibility and data protection compliance.
For those of you who have only just recovered from the GDPR, the news that data protection laws are changing again may not be entirely welcome.
Most of the EU Data Act (the Act) came into force on 12 September 2025. If you provide cloud services to customers in the EU, this means you will need to get to grips with new obligations to make it easier for your customers to switch to another provider.
Is the growth of AI being held back by uncertainty about how it may lawfully be deployed? In October, the Department for Science, Innovation and Technology issued an open call for evidence about its proposal to create an AI Growth Lab.
Despite the growing ubiquity of AI in the workplace, many organisations do not yet have an AI policy. In this blog, Nick Smallwood explores the findings from a recent KPMG/University of Melbourne survey, as well as the importance of crafting an AI policy.
The EU Data Act brought in new data access rights for EU based users of connected products and related services with the aim of making data (particularly industrial data) more accessible, usable, and to encourage data-driven innovation.
For in-house counsel, managing internal investigations demands careful attention to how personal data is handled. This blog explores the often-overlooked importance of lawful, fair, and secure data practices throughout the investigative process.
The risk of cyber-attacks is very well publicised and the travails of M&S, JLR and others are all over the press at the moment. Everyone is checking their systems and IT security in the hope of not becoming the next ransom victim.
In this blog, we explore the recently announced Cambridge x Manchester Innovation Partnership (referred to as CBGxMCR). It's being referred to as a pioneering collaboration between two of the UK’s leading universities.
Privacy and data protection law took a step forward on 19 June 2025, when the Data (Use and Access) Act 2025 (“DUAA”) received Royal Assent.