Search results

A question of interpretation: the UK Supreme Court’s decision in Royal Bank of Canada All has ended well for the Royal Bank of Canada (RBC) following the Supreme Court’s majority decision (4:1) that the UK does not have taxing rights over the “royalty” payments RBC received. The value of these payments was dependant on the price and volume... Bank IT outages: Treasury Committee requests answers from banks and building societies The House of Commons Treasury Committee (the Committee) has published letters it has sent to CEOs of the UK's nine largest banks and building societies to request information on the scale and impact of IT failures which have affected their businesses over... Management fees in tax treaties: a ménage à deux between Italy and Egypt The Italian tax authority (ITA) ruling (13/2025) concerned an Italian company that provided IT services to a company resident in Egypt. Payments for the services (Service Fees) were subject to a final withholding tax (WHT) in Egypt of 20%, which the Itali... Consent or pay may be okay: new ICO guidance The UK Information Commissioner’s Office (ICO) has published its consent or pay guidance. This largely reflects the ICO’s initial position in its call for views last year (see our previous blog). By way of reminder, consent or pay models involve customers... First provisions of EU AI Act now apply: what you need to know about AI literacy The first provisions of the EU AI Act started to apply this Sunday (2 February). Companies that provide or deploy AI systems are now required to ensure that there is AI literacy within their operations, and certain AI practices are now prohibited.  This b... DSARs: Implications of recent legal updates The challenges of complying with the ever-increasing volume of data subject access requests (DSARs) was a topic for discussion at our Data Privacy Forum (DP Forum) in December. Legal developments since then have added to the understanding of the requireme... How to train your GPAI model: a first look at the EU’s data summary requirements The European AI Office has recently unveiled its preliminary proposals on the template for the summary of training data that general-purpose AI (“GPAI”) model providers will be required to publish under the EU AI Act.   While at first glance the template ... Blurring the “big picture”: latest decision in Getty v Stability AI highlights challenges in complex representative claims As we enter 2025, buzz around AI (and generative AI in particular) shows no signs of slowing down. As a result, Getty v Stability AI is being followed with great interest in the UK as a key test case for how IP infringement claims against use of unlicense... Navigating Türkiye's Updated International Data Transfer Rules: What You Need to Know In 2024, Türkiye introduced significant updates to its international data transfer rules, aligning them more closely with the GDPR. Following this legislative update, Türkiye’s data protection authority (KVKK) published SCC-like clauses and an application... The benefit of PETs (and pseudonymisation): new UK and EU guidance Eighteen months on from the UK Information Commissioner, John Edwards, calling for all organisations sharing large volumes of data to consider using “privacy enhancing technologies” (PETs) (explained in this blog), regulatory focus on this area is increas...