Powered by Lexis+®
Jurisdiction(s):
United Kingdom
CASE STUDY

“Although cost was an important factor, our relationship with LexisNexis, their responsiveness, flexibility, and the integration available with other products were key factors.”

Irwin Mitchell

Access all documents on Intranets

Intranets meaning

What does Intranets mean?
In legal practice, an intranet is a private website or portal accessible only to a defined group (typically employees, contractors or affiliates) within an organisation. The term is descriptive rather than statutory and is used across employment, data protection and information security contexts. For cookies and similar technologies, UK regulators generally treat intranets as within scope of PECR 2003, regulation 6. Although “user” is defined by reference to a “public electronic communications service” (regulation 2(1)), in practice the ICO expects the PECR consent and transparency requirements to be met on intranets for any non‑essential cookies (for example, analytics or profiling), with the “strictly necessary” exemption limited to functions essential to provide the intranet service (such as session management, security or single sign‑on). Consent must be specific and informed; it should not be bundled into employment terms. In Ireland, the ePrivacy Regulations 2011 are applied similarly by the DPC: consent is required for non‑essential intranet cookies, with the same narrow exemption for strictly necessary cookies. Across England & Wales, Scotland, Northern Ireland and Ireland, organisations should pair PECR/ePrivacy compliance with UK GDPR/Irish GDPR duties on employee monitoring, transparency and DPIAs where logs or tracking identify users.
Speed up all aspects of your legal work with tools that help you to work faster and smarter. Win cases, close deals and grow your business–all whilst saving time and reducing risk.

View the related Practice Notes about Intranets

PRACTICE NOTES
EU cookies and similar technologies: ePrivacy Directive, GDPR interplay, consent, exemptions, enforcement, audits and reform

STOP PRESS This Practice Note reflects the present legislative landscape; however, be aware that some aspects will be affected by the Digital Omnibus proposals issued on 19 November 2025 under the Commission’s ‘simplification’ programme. For further details, see Practice Note: EU Digital Omnibus—tracker. This Practice Note explores the law governing the use of cookies and related technologies in the EU, covering the following: Types of cookies and related technologies ePrivacy Directive and cookies Responsibility for compliance Consent Clear and comprehensive information Exemptions EU GDPR and cookies Territorial scope Intranets Sanctions and enforcement Cookie audits Reform Resources and guidance Cookies are small data files placed on a user’s computer, phone or tablet. They enable an online service, such as a website, to recognise an individual user and retain particular information about them, such as login credentials, the contents of shopping baskets and site preferences. They are also widely used to direct advertising...

Read More Right Arrow
PRACTICE NOTES
Disciplinary and Grievance Procedures in Great Britain: Written Particulars, Acas Code, Right to be Accompanied, Warnings, Contractual Incorporation and Challenges, and Article 6 ECHR

Practice Note This Practice Note summarises the principal requirements and considerations surrounding disciplinary and grievance procedures in broad terms. It explains the advantages of carefully drafted, written procedures for discipline and grievances. It addresses the obligation to include specified information about these procedures in written statements of particulars, the core principles underpinning them, the effect of the Acas Code of Practice on Disciplinary and Grievance Procedures, and the statutory right to be accompanied. It also examines the use of disciplinary warnings, contractual issues where procedures are binding terms, and the implications of the right to a fair hearing under Article 6 of the European Convention on Human Rights (ECHR). Many employers maintain their own processes for managing discipline or enabling staff to raise grievances, commonly set out in employee handbooks or staff manuals, and in some organisations made available by other means, for example via corporate intranets. Implementing robust, written disciplinary and grievance procedures matters for at least three reasons: they offer a clear framework for...

Read More Right Arrow
PRACTICE NOTES
UK regulation of cookies and storage and access technologies (SATs): PECR 2003, UK GDPR, consent and transparency, exemptions, enforcement, audits, and DUAA 2025 reforms

STOP PRESS: On 19 June 2025, the Data (Use and Access) Bill obtained Royal Assent, becoming the Data (Use and Access) Act 2025 (DUAA 2025), with parts taking effect that same day. Provisions addressing matters such as dealing with data subject access requests and granting powers to make further regulations commenced immediately on 19 June 2025. Other measures, covering notices from the Information Commissioner and certain facets of law enforcement processing, began on 19 August 2025 (two months after Royal Assent). The bulk of DUAA 2025’s measures still require additional regulations, in the form of statutory instruments, before they can commence. Parts 5 and 6 update elements of UK data protection and ePrivacy law, including the United Kingdom General Data Protection Regulation, Assimilated Regulation (EU) 2016/679 (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003, SI 2003/2426. Most provisions in Part 5 are scheduled to take effect on 5 February 2026 as a result of the Data (Use and Access) Act...

Read More Right Arrow