Powered by Lexis+®
Jurisdiction(s):
United Kingdom
CASE STUDY

“Although cost was an important factor, our relationship with LexisNexis, their responsiveness, flexibility, and the integration available with other products were key factors.”

Irwin Mitchell

Access all documents on Privacy policy

Privacy policy meaning

What does Privacy policy mean?
In practice, a privacy policy is the external-facing privacy notice a data controller provides to individuals—commonly on a website, app or at the point of collection—explaining how their personal data will be processed. The term is not defined in statute; its content derives from the transparency duties in Articles 13 and 14 of the UK GDPR/EU GDPR and the UK and Irish Data Protection Acts 2018, and is guided by ICO and DPC practice. Typical features include: the controller’s identity and contact details (and DPO, if appointed); purposes of processing and lawful bases; categories of data; recipients; international transfers and safeguards (e.g., UK IDTA or EU SCCs); retention periods; data subject rights; how to complain to the Information Commissioner’s Office or the Data Protection Commission; whether provision of data is mandatory and consequences; sources where data is obtained indirectly; and any automated decision-making/profiling. Privacy and Electronic Communications Regulations (UK) and the Irish ePrivacy Regulations also require clear information about cookies, tracking and direct marketing, often cross-referenced from the privacy policy. Across England & Wales, Scotland, Northern Ireland and Ireland, usage and expectations are broadly consistent, with regulator names and transfer tools being the main differences. Layered and audience-specific notices (e.g., employee or...
Speed up all aspects of your legal work with tools that help you to work faster and smarter. Win cases, close deals and grow your business–all whilst saving time and reducing risk.

View the related Checklists about Privacy policy

CHECKLISTS
UK website content intellectual property: practical checklist for identifying, protecting, monitoring and acquiring rights, drafting terms including AI restrictions, licensing/assignments, enforcement, domain names and linking

How to use this Checklist Establishing a website can deliver substantial advantages for a business’s online presence. However, in the process a business may face infringing behaviour by competitors or others, including AI-enabled scraping of content. This Checklist sets out the main matters to weigh up when handling or acquiring website materials—such as programme code, text, graphics, images and multimedia. Pinpoint intellectual property rights (IPRs) and ownership; technical protection measures (TPMs); terms of use; special contractual terms; monitoring; copyright policy; data privacy; intellectual property notices; taking action against infringers; domain names. It does not address issues relating to website development, compliance or management, nor the use or upload of user-generated content. If dealing with website development or with website management and compliance, see: Practice Note: Website design and development Websites and the internet—issues to consider—flowchart Website terms and conditions—checklist, and Website development agreement—checklist The third...

Read More Right Arrow
CHECKLISTS
Organisational policies: a lawyer’s checklist with precedents covering HR, financial crime, business activities, data/privacy, information security, risk management and health and safety

This Checklist flags the usual key policies that an organisation should think about putting in place, and it points to LexisNexis® Precedents you may use or tailor as appropriate. Having robust policies and procedures established will assist an organisation to control risk and also evidence compliance wherever a written policy is a regulatory necessity. Note: this Checklist is not meant to be a complete catalogue of every policy an organisation ought to hold. Extra or alternative policies might be needed from time to time to fit your organisation or to satisfy any industry or sector-specific regulatory obligations. General human resources policies Policy — Aim of this policy — LexisNexis® Precedents you could use or adapt (available subject to subscription) Adoption leave policy — To outline an organisation’s approach to adoption leave and pay. Policy—adoption leave Carer’s leave policy — To state an organisation’s policy for employees to take unpaid time away to provide or arrange care for a dependent with a long-term care...

Read More Right Arrow

View the related News about Privacy policy

NEWS
UK Public Law Weekly: key judgments on human rights, equality, procurement and FOI; OSA categorisation challenge; digital ID policy; Brexit SIs; PPE Medpro judgment; justice system reforms

In this issue: Public Law case law quarterly—Q3 2025 Equality and Human rights Constitutional and administrative law Brexit SIs Post-Brexit transition guidance Judicial review Public procurement Public sector contracts State security and intelligence Information law Other Public law news LexTalk®Public Law: a Lexis®Nexis community Daily and weekly news alerts New and updated content Dates for your diary Trackers Useful information Public Law case law quarterly—Q3 2025 The quarterly Public Law case law round-up presents and evaluates significant judgments brought together by the Lexis+® UK Public Law team each quarter. Marking 25 years since the Human Rights Act 1998 took effect, this edition begins with insight into recent human rights jurisprudence. See News Analysis: Public Law case law quarterly—Q3 2025. Equality and Human rights ECtHR rejects prisoner voting claim—Hora v UK In Hora v United Kingdom (Application no 1048/20), the European Court of Human Rights...

Read More Right Arrow
NEWS
Information law highlights: Data Bill final stages, ICO encryption consultation, EDPB adequacy opinions, TikTok transfers, Illiquidx ruling, enterprise IoT security

In this issue: Data protection Confidential information Cybersecurity LexTalk®Information Law: a Lexis®Nexis community Daily and weekly news alerts New and updated content Data protection Parliament considers Data Bill amendments in final legislative stages As of 8 May 2025, the Data (Use and Access) Bill is in its final parliamentary stage. Backed by the Department for Science, Innovation and Technology (DSIT), it brings wide reforms to data regulation, including new rules on customer data access, privacy standards, and establishing an Information Commission. The Bill also spans electronic trust services, biometric data retention, and information sharing for public services. Introduced in the House of Lords in the 2024–25 session, it has completed its first passage through both Houses. See: LNB News 08/05/2025 38. DSIT opens user engagement for 2026 UK Business Data Survey DSIT has launched a user engagement exercise for the 2026 UK Business Data Survey (UKBDS). The survey explores how businesses handle personal and non-personal...

Read More Right Arrow
NEWS
Financial services regulatory highlights—UK, EU and international: FCA fees, OFSI licences, LIBOR cessation, BoE stress tests, ESG labelling, MiCA, enforcement—4 July 2024

In this issue UK, EU and international regulators and bodies Authorisation, approval and supervision Prudential requirements Financial crime and sanctions Consumer protection Investigations, enforcement and discipline Regulation of benchmarks and IBOR reform Packaged Retail and Insurance-based Investment Products (PRIIPs) Dispute resolution for financial services lawyers Sustainable finance and ESG Banks and mutuals Investment funds and asset management Regulation of insurance Fintech and cryptoassets Consumer credit, mortgage and home finance Amendments to EEA Agreement Annex IX (Financial Services) Financial Services Enforcement Database Daily and weekly news alerts Intraday news alerts New and updated content Dates for your diary UK, EU and international regulators and bodies The FCA has released policy statement PS24/5 confirming the final regulatory fees and levy rates for 2024/25, together with its feedback on CP24/6. Firms can determine their own charges using the FCA’s online fees calculator, with billing to commence...

Read More Right Arrow

View the related Practice Notes about Privacy policy

PRACTICE NOTES
2016 litigation funding and costs in England and Wales: funders’ liability and disclosure, CFA assignment, ATE/CFA recoverability in publication/privacy, and solicitors’ professional indemnity exclusion clauses

ARCHIVED: this Practice Note is no longer maintained and is offered for background reference only. Moreover, some links may not take you to the provisions as they stood when the guidance in this Practice Note was issued... Key litigation funding cases 2016—what do you need to know? Key takeaways from 2016 decisions in the commercial or third‑party litigation funding sphere include: the Supreme Court examined the interpretation of an exclusion clause in a solicitor’s professional indemnity insurance policy (Impact Funding v AIG), see below the Supreme Court agreed to hear three appeals balancing ECHR rights against recovery of costs linked to third‑party funding (Frost v MGN, Miller v Associated Newspapers Limited and Times Newspaper v Flood), which will determine these questions in the context of post‑Jackson reform funding. At present, the courts regard the recovery of additional liabilities as compatible with the ECHR (BNM v Mirror Group Newspapers), see below the Court of Appeal has held that third‑party funders can be...

Read More Right Arrow
PRACTICE NOTES
ICO PECR 2003 enforcement tracker (UK): direct marketing—unsolicited calls, SMS and emails; penalties, enforcement notices and compliance trends

This Practice Note monitors enforcement action by the Information Commissioner’s Office (ICO) resulting from infringements of the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR 2003), SI 2003/2426. It encompasses contraventions of the direct marketing provisions laid down in PECR 2003, SI 2003/2426, regs 21–24. The tracker lists financial penalties and enforcement notices served on individuals or organisations. Background In the UK, ePrivacy rules—ie the treatment of personal data within electronic communications—are largely set out in PECR 2003, SI 2003/2426, which transposed Directive 2002/58/EC (the ePrivacy Directive) at a time when the UK was part of the EU. The legislation’s core aim is to require providers of public electronic communications services to adopt suitable technical and organisational measures to protect the confidentiality, security and privacy of the service, and to shield subscribers from specified risks and misuse. PECR 2003 was retained after the UK’s departure from the EU in 2020, with limited amendments to ensure it continued to operate properly once the UK became a third country....

Read More Right Arrow
PRACTICE NOTES
Lexcel v6.1 Practice Management Standard: Law Firm Precedents Content Map for Firmwide Compliance, Policies, Registers and Templates

Lexcel is the Law Society’s benchmark for practice management. Accreditation is not mandatory, though Lexcel status can assist firms seeking accreditation under the Conveyancing Quality Scheme (CQS) or the Legal Services Board’s Specialist Quality Mark (SQM). This Practice Note highlights specific Precedents you may use or tailor, where appropriate and necessary, to meet the requirements of Lexcel v6.1. 1. Structure and strategy For detailed requirements, see: Lexcel practice management standard version 6.1...

Read More Right Arrow

View the related Precedents about Privacy policy

PRECEDENTS
Precedent: Off‑premises (doorstep) business‑to‑consumer supply of goods terms and conditions — England and Wales

Before purchasing from us, please review these important terms and conditions to confirm they include everything you expect and nothing you would be unwilling to accept. Summary of some of your key rights: Under the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013, you generally have 14 days from receiving your goods to change your mind and obtain a full refund. The Consumer Rights Act 2015 states that goods must be as described, fit for purpose and of satisfactory quality. Across the expected lifespan of your product, you are entitled to the following: up to 30 days: if your goods are faulty, you can get a refund; up to six months: if it cannot be repaired or replaced, you are entitled to a full refund in most cases; up to six years: if the goods do not last a reasonable length of time, you may be entitled to some money back. This is a brief outline of...

Read More Right Arrow
PRECEDENTS
Free Wi‑Fi Hotspot Terms and Conditions: Access, Registration, Security, Fair and Acceptable Use, Privacy, External Services, Termination, Liability and Jurisdiction (English law)

Please review these important terms and conditions, alongside our Privacy Policy [ insert link to policy ] and Fair Use Policy [ insert link to policy ], before you use the wi-fi hotspot service. They explain key information about both your rights and obligations, and ours. If you do not accept these terms, you must not access or use the wi-fi hotspot service. You must be at least [ 18 ] years old and a UK resident to use the wi-fi hotspot service. 1 About us 1.1 We are [ insert hotspot provider’s full legal name ] [ (trading as [ insert trading name ]) ], a company incorporated in England and Wales with company number: [ insert details ]. Our registered office is at: [ insert details ]. Our VAT registration number is: [ insert details ]. 2 How to contact us 2.1 You can reach us by emailing [ insert email address ] or by calling [ insert phone number ]. You can also...

Read More Right Arrow
PRECEDENTS
Precedent consumer wi-fi hotspot terms and conditions: access, registration, fair/acceptable use, ordering and pricing, cancellation rights, availability, liability and privacy

Before using the wi-fi hotspot, please review these important terms and conditions together with our Privacy Policy [ insert link to policy ] and our Fair Use Policy [ insert link to policy ]. They explain key information about both your rights and obligations, and ours. If you do not accept these terms, you must not use or access the wi-fi hotspot service. You must be at least [ 18 ] years of age and a UK resident to use the wi-fi hotspot service. 1 About us We are [ insert hotspot provider’s full legal name ] [(trading as [ insert trading name ])], a company incorporated in England and Wales with company number: [ insert details ]. Our registered office address is: [ insert details ]. Our VAT registration number is: [ insert details ]. 2 How to contact us You can reach us by emailing [ insert email address ] or by calling [ insert phone number ]. You can also get in touch...

Read More Right Arrow