209 articles · All articles

Claiming compensation for a data breach: the court route the ICO cannot give you

The ICO can investigate a data breach and fine the organisation – but it cannot award the victim a penny. Compensation only comes from a civil claim under Article 82 of the UK GDPR and section 168 of the Data Protection Act 2018, which expressly covers distress. This guide explains what a claimant must prove, what Lloyd v Google changed, realistic quantum for distress-only cases, and whether your breach is a court claim, an ICO complaint, or both.

The SRA’s consumer-protection proposals after Axiom Ince: client money and the Compensation Fund

More than £60 million of client money went missing when Axiom Ince collapsed in October 2023. This analysis traces the SRA’s post-collapse consumer protection programme through its own consultation and response papers: the client money reforms now awaiting approval, the Compensation Fund decisions already taken, and the rules a client of a failed firm can rely on today.

Whistleblowing reform: what has actually changed since the promises

The structural reform campaigners proposed has not happened: the Office of the Whistleblower Bill fell when the 2024–26 session ended, and no whistleblowing bill is before the current Parliament. But the law has not stood still — sexual harassment is now an express qualifying disclosure, the prescribed-persons list has been expanded twice, and tribunal time limits are about to double. An evidence-led state of play, measured against what reformers asked for.