“LexisPSL and the other Lexis solutions support our business in exactly the way we want. They enable us to quickly turn around work and deliver the best possible service to our clients.”
SBP LawAccess all documents on Cookie
The Commission engaged with firms on a set of eight principles designed to curb the prevalence of cookie banners shown to people on their first visit to sites, aiming to make cookie choices more straightforward for users. EU Justice Commissioner Didier Reynders unveiled the pledge in March 2023 and was due to confirm which companies would sign up at a consumer summit in Brussels. Although businesses broadly embraced the initiative, a Commission spokesperson said in an e-mailed statement that most stakeholders involved judged a voluntary path on digital advertising to be premature, given the very recent roll-out of new rules in this area, including the Digital Markets Act and the Digital Services Act...
In this issue: Sanctions AML, CTF & counter-proliferation financing Other financial crime Data protection Daily and weekly news alerts Trackers New and updated content Sanctions OTSI publishes first annual review outlining enforcement priorities The Office of Trade Sanctions Implementation (OTSI) has released its first annual review, covering 10 October 2024 to 9 October 2025. It explained how it applied its civil enforcement powers under the Trade, Aircraft and Shipping Sanctions (Civil Enforcement) Regulations 2024, SI 2024/948, and collaborated with HMRC, other government departments and international partners to strengthen the UK’s trade sanctions framework. OTSI underlined both enforcement and prevention, highlighting its work in issuing guidance, supporting compliance, and overseeing the licensing regime. See: LNB News 08/12/2025 46. Home Office imposes sanctions on GRU following Sturgess inquiry report The Home Office and the Foreign, Commonwealth & Development Office (FCDO) have sanctioned Russia’s military intelligence agency (GRU) in full, together with eight cyber‑military intelligence officers, following...
In this issue: Advertising, marketing and sponsorship Consumer protection Data protection Franchising International LexTalk®Commercial: a Lexis®Nexis community Daily and weekly news alerts New and updated content Dates for your diary Trackers Advertising, marketing and sponsorship ASA rulings—27 August 2025—Domino’s Pizza UK & Ireland Ltd A paid-for YouTube promotion for Domino’s Cadbury Creme Egg cookie appeared alongside Minecraft-themed videos on the Milo and Chip channel. Following a complaint to the Advertising Standards Authority (ASA), the regulator upheld the challenge. See: LNB News 27/08/2025 10. Consumer protection CTSI updates pricing practices guidance under DMCCA 2024 The Chartered Trading Standards Institute has issued revised Pricing Practices Guidance for Traders, effective from August 2025. Superseding earlier versions, it explains trader duties under the Digital Markets, Competition and Consumers Act 2024. The guidance spans pricing activity for all consumer goods across sales channels in England, Scotland and Wales, including both in-store and distance sales, and...
STOP PRESS This Practice Note reflects the present legislative landscape; however, be aware that some aspects will be affected by the Digital Omnibus proposals issued on 19 November 2025 under the Commission’s ‘simplification’ programme. For further details, see Practice Note: EU Digital Omnibus—tracker. This Practice Note explores the law governing the use of cookies and related technologies in the EU, covering the following: Types of cookies and related technologies ePrivacy Directive and cookies Responsibility for compliance Consent Clear and comprehensive information Exemptions EU GDPR and cookies Territorial scope Intranets Sanctions and enforcement Cookie audits Reform Resources and guidance Cookies are small data files placed on a user’s computer, phone or tablet. They enable an online service, such as a website, to recognise an individual user and retain particular information about them, such as login credentials, the contents of shopping baskets and site preferences. They are also widely used to direct advertising...
CASE HUB ARCHIVED This archived case hub reflects the position as at the decision date of 11 February 2022; it is no longer maintained. See further, timeline Case facts Outline CMA Chapter II CA98 investigation into suspected breaches of competition law regarding Google’s proposals to remove third party cookies and other functionalities from its Chrome browser (50972). Latest developments On 11 February 2022, the CMA announced its decision to accept modified commitments from Google, to be rolled out globally, to address its competition concerns. The commitments include, amongst others: Involvement of the CMA and the ICO in the development and testing of the Privacy Sandbox proposals, to ensure they deliver effective outcomes for consumers that protect both competition and privacy Google to adopt a more transparent process than initially proposed, including engagement with third parties and the publication of test results, with an option for the CMA to require Google to resolve issues raised by the CMA or third parties...
This Practice Note reviews the EU legal landscape for digital advertising, encompassing the programmatic purchase and sale of advertising inventory and real-time bidding (RTB). It examines the legal considerations impacting the digital advertising supply chain, including data protection and privacy, consumer protection, competition, and specific developments for digital markets. It also assesses the key industry, trade and self-regulatory bodies that oversee and regulate these activities across the EU. Introduction Any communication of advertising or marketing material aimed at a particular individual, or group of individuals, however delivered—digitally, by telephone or through print—constitutes direct marketing. Direct marketing is subject to specific rules, especially concerning data privacy and consumer protection. When such material is delivered digitally, these considerations can become even more complex. The term ‘digital’ advertising is an umbrella concept covering the wide array of digital, online and social media channels available to advertisers today. Therefore, references in this note generally use ‘digital’, unless it is expressly necessary to refer to ‘online’. When planning a direct marketing...
This Precedent sets out a broad template for a website privacy policy, informing data subjects about how a site operator gathers personal data, the lawful grounds for processing, subsequent uses and potential recipients. It has been prepared to meet the EU GDPR’s information and transparency obligations, taking account of guidance from the European Data Protection Board (EDPB). The website privacy policy sits within a wider collection covering website terms of use, e‑commerce, privacy and cookies. Where cookies or similar tools are deployed, a distinct cookie policy is required. See Precedent: Ireland—Cookie policy. EU GDPR and UK GDPR Designed for commercial organisations established in Ireland, this Precedent reflects EU GDPR requirements. It also offers optional clauses for Irish organisations that maintain a UK establishment and/or provide goods or services to, or monitor the behaviour of, people in the UK, bringing them within the scope of equivalent UK data protection laws. The UK GDPR and EU GDPR regimes are largely consistent...
1 Introduction Our website is a key channel for engaging with existing and prospective clients and is a significant expression of our brand. Accordingly, it is essential that our website activities are managed appropriately. This policy explains our procedures for running the website, including: who holds responsibility for website management; content governance; website security and data protection; permitted and prohibited use; linking; accessibility; client confidentiality. 2 Responsibility The [ state who ] holds overall responsibility for managing our website. Their responsibilities include: authorising and supervising content; ensuring the website meets legal and regulatory requirements; overseeing linking arrangements; maintaining the website terms and conditions and the privacy policy; and carrying out an annual review of this policy to confirm it operates effectively. 3 Cookies and other...
STOP PRESS: On 19 June 2025, the Data (Use and Access) Bill secured Royal Assent, transforming into the Data (Use and Access) Act 2025 (DUAA 2025) and taking partial effect on that date. A number of DUAA 2025 provisions — covering issues such as handling data subject access requests and the conferral of authority to create further regulations — commenced immediately on 19 June 2025. Other elements, including measures on notices from the Information Commissioner and particular aspects of law enforcement processing, took effect on 19 August 2025 (two months after Royal Assent). The greater part of DUAA 2025’s framework will, however, only come into operation once additional regulations, in the form of statutory instruments, are made to commence them. Parts 5 and 6 of DUAA 2025 introduce amendments to aspects of UK data protection and ePrivacy law, including the United Kingdom General Data Protection Regulation, Assimilated Regulation (EU) 2016/679 (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications (EC Directive) Regulations 2003, SI 2003/2426...