GDPR Update

The Data (Use and Access) Act 2025 has made a series of important changes to UK data protection law which are now in force. The most significant of these changes is the requirement for controllers to have a data protection complaints procedure.

This webinar analyses the key changes and emphasises what controllers need to do to ensure ongoing compliance.

The following topics will be covered:

Key changes to the UK GDPR

• Recognised legitimate interests
• Privacy notices
• Subject access requests
• Automated processing

Key changes to the Privacy and Electronic Communications Regulations 2003

• Cookies
• Increased fining powers for breach

Data Protection Complaints Procedure

• Ways in which complaints can be made
• Content of complaints procedure
• Acknowledgement of complaints
• Investigation of complaints
• Provision of outcomes to the data subject
• Records to be kept

Regulatory action

• Civil monetary penalties
• Reprimands

Who this is for:

This session is a must-watch for lawyers and non-lawyers with an interest in data protection

Top 3 facts from the webinar:

1. Understand the changes made by the Data (Use and Access) Act 2025

2. Adapt existing practices to ensure ongoing compliance

3. Be aware of recent enforcement action in this area of law

Level of expertise:

All Levels – this can be picked up throughout anyone’s professional career regardless of experience

CPD hours:

This webinar provides you with 1 hour of learning.

Attendees will receive a CPD certificate upon completion of this course.

Learning objectives:

• To understand the changes made to UK data protection legislation
• To consider what changes need to be made to existing practices to ensure ongoing compliance
• To comprehend recent enforcement action taken by the ICO