Powered by Lexis+®
Jurisdiction(s):
United Kingdom
CASE STUDY

“LexisNexis is great as I can find the answers I am looking for really quickly. I believe that nothing should be more than 6 clicks away - and the products from LexisNexis deliver on this standard”

Avensure

Access all documents on Entity data

Entity data meaning

What does Entity data mean?
Entity data describes communications-related information that identifies or characterises a person, organisation, account or device, or links them to a telecommunications service or a part of a telecommunication system. It does not include events data. In the UK, the Investigatory Powers Act 2016 defines entity data as data that: (a) is about an entity, or an association between a telecommunications service and an entity, or an association between any part of a telecommunication system and an entity; (b) consists of, or includes, data that identifies or describes the entity (including by reference to the entity’s location); and (c) is not events data. Typical examples include subscriber information, account identifiers, device identifiers (such as IMEI/IMSI), IP address allocation details and other descriptors linking an entity to a service or system. By contrast, records of specific communications (for example, the time or duration of a call or session) are events data. Practically, the classification of information as entity data is material to communications data retention and lawful acquisition by public authorities. Usage is consistent across England & Wales, Scotland and Northern Ireland under the IPA 2016. The term is not used in Irish legislation; analogous concepts appear as subscriber or identifying data.
Speed up all aspects of your legal work with tools that help you to work faster and smarter. Win cases, close deals and grow your business–all whilst saving time and reducing risk.

View the related Checklists about Entity data

CHECKLISTS
UK trustees’ AEOI (CRS/FATCA) compliance checklist: classification, registration, due diligence, reporting, notifications, penalties and governance under the International Tax Compliance Regulations 2015

Automatic Exchange of Information (AEOI) is the worldwide benchmark for routinely transmitting taxpayers’ financial details between jurisdictions to deter tax evasion. A trust resident in the UK is generally brought within the UK AEOI framework through the International Tax Compliance Regulations 2015 (SI 2015/878), as amended (the ‘ITC Regulations’). The ITC Regulations give domestic effect to the UK’s AEOI commitments under the Common Reporting Standard (CRS) and the UK‑US FATCA Agreement (FATCA). Refer to Practice Notes: Automatic exchange of information-outline; Automatic exchange of information for UK trustees-key obligations; and FATCA and UK Trusts. HMRC’s guidance appears in the International Exchange of Information Manual (IEIM400000). This Checklist summarises the principal matters trustees must consider under the UK AEOI regime. Scope and Threshold Question: Does AEOI Apply? Has the trust’s UK tax residence position been determined for AEOI purposes? Has it been verified whether the ITC Regulations 2015 apply to the trust (CRS and/or FATCA)? Is the trust in scope of AEOI as a possible Financial...

Read More Right Arrow
CHECKLISTS
Checklist for negotiating and drafting website hosting agreements: services, SLAs, pricing, IP, content, data protection, security and termination (England and Wales)

Checklist This Checklist flags the principal issues commonly faced when negotiating and preparing website hosting agreements. See also Precedent: Website hosting agreement—pro-customer. Where appropriate, it can serve as the starting point for a straightforward, non-binding heads of terms; for guidance, see Precedent: Heads of terms—commercial contracts. As you work through, use a third column to log observations or comments... Parties ☐ Verify each party’s legal status and identify any third parties (such as group affiliates) who may benefit from the agreement. ☐ Where a single provider hosts multiple sites for an affiliated group, establish which group company controls each site operationally and legally. ☐ Decide whether the provider owes liability to every group entity, or if contractual dealings will be managed centrally (e.g. by a parent acting for its affiliates). ☐ Confirm if the provider must collaborate with any other third parties supplying systems or services to the customer. Commencement and duration ☐ Confirm the intended...

Read More Right Arrow
CHECKLISTS
UK GDPR and Data Protection Act 2018 for insolvency practitioners: practical compliance checklist for office-holders and advisers

The general (that is, not linked to specialist fields such as law enforcement) data protection laws in the UK consist of: Assimilated Regulation (EU) 2016/679 — the UK General Data Protection Regulation (UK GDPR), a version of Regulation (EU) 2016/679 (EU GDPR) incorporated into UK law following Brexit; the relevant provisions of the Data Protection Act 2018 covering general personal data processing, the powers of the Information Commissioner, and sanctions and enforcement. For further detail, see Practice Note: The UK General Data Protection Regulation (UK GDPR). UK GDPR The UK GDPR sets requirements for anyone who processes personal data—covering both data controllers and data processors. An Insolvency Practitioner (IP) may act in either or both capacities. Their duties stem both from their formal appointments and from any position they hold within an organisation. In the former context, they will handle data controlled by the insolvent individual or entity, as well as information they obtain during the course of the...

Read More Right Arrow

View the related News about Entity data

NEWS
UK and EU financial services regulatory and enforcement round-up—authorisations, prudential, AML and sanctions, markets, EMIR, payments, open banking, crypto, FOS and FCA updates—14 August 2025

In this issue: Authorisation, approval and supervision Prudential requirements Risk management and controls Financial crime and sanctions Complaints, compensation and claims management Investigations, enforcement and discipline Regulation of capital markets Regulation of derivatives Banks and mutuals Consumer credit, mortgage and home finance Payment services and systems International—financial services and related sectors Fintech and cryptoassets LexTalk®Financial Services: a Lexis®Nexis community Financial Services Enforcement Database Daily and weekly news alerts Intraday news alerts New and updated content Dates for your diary Authorisation, approval and supervision HM Treasury issues a policy statement describing its intended approach to the regulation of Appointed Representatives within UK financial services. The paper suggests targeted adjustments to enhance oversight and bolster consumer protection, while preserving the regime’s function in fostering competition and innovation. See: LNB News 11/08/2025 28. The Financial Conduct Authority has updated its Conduct Rules webpage to clarify...

Read More Right Arrow
NEWS
GDPR compliance for unincorporated associations in the UK: controllers, processors, ICO fees and personal enforcement risks

Does the GDPR apply to unincorporated associations, such as sports clubs, and who is responsible for compliance by an unincorporated association with the GDPR? Who is ‘controller’ or ‘processor’? Yes—the General Data Protection Regulation, Regulation (EU) 2016/679, applies to unincorporated associations in the same way it applies to companies or partnerships. The GDPR’s definitions of a ‘controller’ and a ‘processor’ encompass both natural persons and legal persons. The challenge for unincorporated associations is that they are not legal persons. They have no separate legal personality; they exist by contract, and neither statute nor case law sets out clear, definitive rules for what their governing provisions must contain. What truly matters under the GDPR is not the category of person or entity undertaking the processing, but the overall activity of collecting and using personal data. The rationale is straightforward: the law should not be capable of being avoided, and there must always be an accountable individual or body answerable to data subjects. In that respect, there is no distinction. Determining...

Read More Right Arrow
NEWS
EU law weekly update: data protection, asylum and migration, financial services, energy, environment, REACH, insurance, IP, product safety, DMA and AI Act (16 May 2024)

In this issue: Data protection and cybersecurity Free movement, immigration, and employment Financial services Energy Environment Insurance and reinsurance IP Regulatory TMT Daily and weekly news alerts New and updated content Trackers Data protection and cybersecurity EU prolongs the temporary Regulation to tackle online child sexual abuse effectively. Regulation (EU) 2024/1307 of the European Parliament and of the Council of 29 April 2024, amending Regulation (EU) 2021/1232 on a temporary derogation from certain provisions of Directive 2002/58/EC concerning the use of technologies by providers of number-independent interpersonal communications services to process personal and other data for the purpose of combating online child sexual abuse, has been published in the Official Journal of the EU. The Regulation took effect on 14 May 2024. See: LNB News 15/05/2024 14. Free movement, immigration, and employment Council of the EU adopts ten legislative acts to comprehensively overhaul the EU asylum and migration system. The...

Read More Right Arrow

View the related Practice Notes about Entity data

PRACTICE NOTES
EU Cyber Resilience Act (2024/2847): background, market access timelines and interaction with NLF product law, CE marking, sectoral regimes, product liability, GDPR/Data Act, NIS2/DORA and certification

This Practice Note sets out the essentials of Regulation (EU) 2024/2847, the EU Cyber Resilience Act (CRA): its background, timeline, aims, and how it aligns with other EU laws. For details on the CRA’s scope or core duties for economic operators, see the following Practice Notes: The EU Cyber Resilience Act—scope and classification of products The EU Cyber Resilience Act—obligations, compliance and enforcement Regulation (EU) 2024/2847, known as the CRA, is the first EU measure to set mandatory cybersecurity requirements for ‘products with digital elements’ across the EU. From December 2027, products that do not satisfy these requirements cannot be placed on the EU market. Accordingly, compliance will be crucial for market entry for both hardware and software. Manufacturers, importers and distributors will have extensive cybersecurity responsibilities and risk significant fines for non-compliance. The CRA was published in the Official Journal of the EU on 20 November 2024, entered into force on 10 December 2024, and applies in full from 11...

Read More Right Arrow
PRACTICE NOTES
Trustee governance of pension scheme administration: regulatory context, administration policies, appointing and monitoring administrators, service level agreements, core financial transactions, business continuity and digital transformation

Sound administration underpins the smooth operation of a pension scheme and the delivery of good member outcomes, not least because administrators are typically members’ first port of call; consequently, their effectiveness, consistency and accuracy indeed strongly influence member experience and results. In short, administration counts because it is the usual locus of pension governance, safeguarding data accuracy, regulatory compliance and correct member outcomes being delivered on a consistent basis. What is a scheme administrator? For the purposes of this Practice Note, ‘scheme administrator’ means the individual or entity that supports the scheme’s day-to-day running by planning, managing and performing its administrative tasks. This can be an external provider, a dedicated internal team within the employer and/or the employer’s human resources or finance functions and departments. This usage is different from the ‘scheme administrator’ in Part 4 of the Finance Act 2004 (FA 2004), denoting the person or persons who ensure the scheme meets FA 2004 requirements in full. In practice, that statutory capacity is...

Read More Right Arrow
PRACTICE NOTES
EU SFDR 2022 Regulatory Technical Standards: FAQs on Article 8/9 classification, PAI/PASI data and templates, periodic disclosures, Taxonomy alignment, exclusions, and non-EU AIFM entity-level obligations [Archived]

ARCHIVED: This Practice Note has been archived and is not maintained. These Q&As respond to the most common queries on the EU Sustainable Finance Disclosure Regulation (EU SFDR) (Regulation (EU) 2019/2088, as amended by Regulation (EU) 2020/852) regulatory technical standards (RTS). They address, among other areas, product categorisation; Article 8 features; principal adverse impact (PAI) data gathering; reliance on third-party information; human rights due diligence, and the effect on non-EU managers. On 6 April 2022, the Commission approved the final Regulatory Technical Standards (RTS) that supplement the EU Sustainable Finance Disclosure Regulation (EU SFDR) (Regulation (EU) 2019/2088, as amended by the EU Taxonomy Regulation (EU) 2020/852) together with the Annexes. EU SFDR imposes substantial environmental, social and governance (ESG) disclosure duties on asset managers promoting funds within the EU. The RTS set out compulsory website, pre-contractual and periodic reporting templates for financial market participants and relevant financial products. For further detail, see Commission publishes adopted RTS containing disclosure rules on sustainable investments under EU SFDR, LNB News 06/04/2022 92....

Read More Right Arrow

View the related Precedents about Entity data

PRECEDENTS
Pro-supplier B2B terms and conditions for sale of goods and services (precedent), with compliance clauses, retention of title, indemnities and liability caps (England and Wales)

1 Definitions and interpretation 1.1 Within these Conditions, the terms below shall have the following meanings: Adequate Procedures – to be interpreted in accordance with BA 2010 and the guidance issued under it; Affiliate – any entity that, directly or indirectly, Controls, is Controlled by, or is under common Control with, another entity; Applicable Law – all applicable laws, legislation, statutory instruments, regulations, and governmental guidance having binding effect, whether local or national [ or international in any relevant jurisdiction ]; Associated Person – means any or all of: (a) a party’s officers, employees, agents, subcontractors, subsidiaries, and persons Associated With that party (the Associates); and (b) persons Associated With any of the Associates, in each case engaged in performing services for or on behalf of that party, the Services and/or the Contract; Associated With – when used: (a) in clause 10 and in respect of bribery, shall be read in accordance with BA 2010 and the guidance published under it; (b)...

Read More Right Arrow
PRECEDENTS
Asset purchase agreement for business and assets sold by administrators (England and Wales): TUPE, TOGC, contract/lease novation, book debts, apportionments, anti‑embarrassment and administrator liability exclusions

This Agreement is made on [ insert day and month ] 20[ insert year ] Parties [ Insert name of company in administration ] (in administration), being a company incorporated in [ England and Wales OR [ insert country of incorporation ] ], with registered number [ insert company number ], and having its registered office at [ insert address ] (the Seller), acting through its [ joint ] Administrator(s) [ Insert name of administrator(s) ] of [ insert name of firm ], whose registered office is at [ insert address of firm ] (the Administrator(s)) [ insert name of purchasing corporate entity ], a company duly incorporated in [ England and Wales OR [ insert country of incorporation ] ], with registered number [ insert company number ], and with its registered office address at [ insert address ] (the Buyer); and each of the Seller Administrator(s) and the Buyer being a Party, and together the Seller Administrator(s) and the Buyer being the...

Read More Right Arrow
PRECEDENTS
EU GDPR 2021 Standard Contractual Clauses for Transfers to Third Countries (Module One: Controller-to-Controller) - Full Clauses and Annex Templates

STANDARD CONTRACTUAL CLAUSES SECTION I Clause 1 Purpose and scope The aim of these standard contractual clauses is to secure observance of the obligations set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, concerning the protection of natural persons in relation to the processing of personal data and the free circulation of such data (General Data Protection Regulation) (1), for the transfer of personal data to a third country. The Parties are: (i) the natural or legal person(s), public authority/ies, agency/ies or other body/ies (‘entity/ies’) that transmit the personal data, as identified in Annex I.A (each a ‘data exporter’); and (ii) the entity/ies in a third country that receive the personal data from the data exporter, directly or indirectly via another entity also Party to these Clauses, as identified in Annex I.A (each a ‘data importer’), which have agreed to these standard contractual clauses (‘Clauses’). These Clauses apply in respect of the transfer of...

Read More Right Arrow