The ICO and breach reporting under Reg 5A PECR: take two

- Posted in privacy by
A couple of weeks ago, the ICO published a statement saying that it had "decided to stop enforcing personal data breach reports made under Regulation 5A." Even if the intent behind it was meant well, Read more

Notes on operating fediverse services (Mastodon, Pleroma etc) from an English law point of view

- Posted in hosting by
In this monologue post, I set out an introductory analysis / overview of the English laws which are likely to apply to people in England who operate decentralised fediverse services which implement Read more

What UK telecoms operators need to know about the UK/USA Data Access Agreement and the US CLOUD Act

- Posted in surveillance by
The Home Office announced on 21 July 2022. that UK/USA Data Access Agreement, which sits under the USA's CLOUD Act, will come into force on October 3rd 2022. A draft of the agreement has been Read more

ISPs, telcos, and responding to the ICO's "third party information notices"

- Posted in connectivity by
This blogpost introduces communications providers to the concept of a "third party information notice", a power afforded to the Information Commissioner's Office in the UK. What is a third party Read more

Internet, telecoms, and tech law predictions for 2022

- Posted in telecoms by
Things I predict will happen in 2022: Telecoms companies, Internet service providers, and device manufacturers will start to get to grips with new government security requirements, in some cases Read more

How to handle data subject access requests under the UK GDPR

- Posted in data protection by
This blog post is a short(ish) guide to the core issues in handling subject access requests under the UK GDPR. If you have received a request and you are not sure where to start, this will help you Read more

Dealing with demands for communications data under the Investigatory Powers Act 2016

- Posted in telecoms by
This blog post looks at the obligations imposed on telecommunications operators under the Investigatory Powers Act 2016, to provide communications data in response to a notice from UK public Read more

Five things to take from the European Parliament's response to the Commission on the GDPR

- Posted in privacy by
The European Parliament has published its report on the European Commission's report on the implementation of the GDPR, which the Commission published two years after its application. Yes, it's a Read more

Four legal tips to keep your business running smoothly in 2021

- Posted in business by
1 The pandemic is getting worse, democracy in the USA seems to have collapsed, and if you have to say "you're still on mute" one more time, you'll explode. And it's only the 11th of January. Here are Read more

Ain't no party like a virtual Christmas party

- Posted in hosting by
1 Over the weekend, some enterprising spammer bothered my inbox with a message to say that they were offering "virtual Christmas parties", and that perhaps decoded.legal might like to make a booking Read more