Handley Gill Limited
@handleygill.bsky.social
Award-winning Legal, Regulatory & Compliance consultants based in London, UK, with expertise in Data Protection, Information Rights, Online Safety, AI Governance, ESG, Content Regulation & Reputation Management.
Before next week’s hearing, we’ve analysed the JR claim brought by Thompson & Carlo (latter of @bigbrotherwatch.bsky.social) v @metpolice.bsky.social over its deployment of live facial recognition, in which @ehrc.bsky.social has intervened, siding with Claimants www.handleygill.co.uk/handley-gill...
A smack in the face? — Handley Gill
Handley Gill’s specialist data protection, human rights & responsible AI governance consultants analyse the claim for judicial review brought against the Commissioner of Police for the Metropolis over...
www.handleygill.co.uk
January 21, 2026 at 12:16 PM
Before next week’s hearing, we’ve analysed the JR claim brought by Thompson & Carlo (latter of @bigbrotherwatch.bsky.social) v @metpolice.bsky.social over its deployment of live facial recognition, in which @ehrc.bsky.social has intervened, siding with Claimants www.handleygill.co.uk/handley-gill...
We’ve published our response to the @ukhomeoffice.bsky.social Consultation on a new legal framework for law enforcement use of biometrics, facial recognition & similar technologies: www.handleygill.co.uk/handley-gill... #FacialRecognition #Surveillance #Biometrics #AI #DataProtection #HumanRights
Surveill(a)nce Soc(i)ety — Handley Gill
Handley Gill’s specialist consultants summarise the Home Office’s Consultation on a new legal framework for law enforcement use of biometrics, facial recognition & similar technologies & publish their...
www.handleygill.co.uk
January 19, 2026 at 2:19 PM
We’ve published our response to the @ukhomeoffice.bsky.social Consultation on a new legal framework for law enforcement use of biometrics, facial recognition & similar technologies: www.handleygill.co.uk/handley-gill... #FacialRecognition #Surveillance #Biometrics #AI #DataProtection #HumanRights
Last week, @infocommission.bsky.social published its Tech Futures: #AgenticAI report. What’s agentic AI? How could it be used? What are the legal, regulatory & ethical issues? What does ICO’s report mean for Agentic AI developers & deployers, inc. Google’s UCP? www.handleygill.co.uk/handley-gill...
January 13, 2026 at 5:29 PM
Last week, @infocommission.bsky.social published its Tech Futures: #AgenticAI report. What’s agentic AI? How could it be used? What are the legal, regulatory & ethical issues? What does ICO’s report mean for Agentic AI developers & deployers, inc. Google’s UCP? www.handleygill.co.uk/handley-gill...
In @houseoflords.parliament.uk last week, @ukhomeoffice.bsky.social said it would get advice to Ministers by 04.2026 on implementing s.121 Online Safety Act 2023, by which @ofcom.bsky.social can issue notice requiring action to tackle #CSAM in private messaging hansard.parliament.uk/Lords/2026-0...
Computer-generated Child Sexual Abuse Material - Hansard - UK Parliament
Hansard record of the item : 'Computer-generated Child Sexual Abuse Material' on Wednesday 7 January 2026.
hansard.parliament.uk
January 12, 2026 at 12:24 PM
In @houseoflords.parliament.uk last week, @ukhomeoffice.bsky.social said it would get advice to Ministers by 04.2026 on implementing s.121 Online Safety Act 2023, by which @ofcom.bsky.social can issue notice requiring action to tackle #CSAM in private messaging hansard.parliament.uk/Lords/2026-0...
Regulator @ofcom.bsky.social has opened Online Safety Act 2023 investigation into X over compliance with illegal & harmful content duties related to Grok AI’s generation of sexualised imagery:
www.ofcom.org.uk/online-safet... #OnlineSafety #OnlineSafetyAct2023 #OSA2023 #OSA23 #AIRegulation
www.ofcom.org.uk/online-safet... #OnlineSafety #OnlineSafetyAct2023 #OSA2023 #OSA23 #AIRegulation
Investigation into X Internet Unlimited Company and its compliance with duties to protect its users from illegal content and child users from harmful content
www.ofcom.org.uk
January 12, 2026 at 12:20 PM
Regulator @ofcom.bsky.social has opened Online Safety Act 2023 investigation into X over compliance with illegal & harmful content duties related to Grok AI’s generation of sexualised imagery:
www.ofcom.org.uk/online-safet... #OnlineSafety #OnlineSafetyAct2023 #OSA2023 #OSA23 #AIRegulation
www.ofcom.org.uk/online-safet... #OnlineSafety #OnlineSafetyAct2023 #OSA2023 #OSA23 #AIRegulation
Latest ‘Hand Up’ series post: Do I own & can I control my personal data? TL; DR: contrary to what some regulators and practitioners suggest, no, you don’t own or have an absolute right to control your personal data: www.handleygill.co.uk/handley-gill... #DataProtection #PersonalData #UKGDPR
January 12, 2026 at 12:16 PM
Latest ‘Hand Up’ series post: Do I own & can I control my personal data? TL; DR: contrary to what some regulators and practitioners suggest, no, you don’t own or have an absolute right to control your personal data: www.handleygill.co.uk/handley-gill... #DataProtection #PersonalData #UKGDPR
An intimidatory cyber attack by a pro-trans direct action group against Lord Toby Young’s Free Speech Union has serious criminal, civil & regulatory consequences. We identify the issues, and the options for affected parties, in our latest post: www.handleygill.co.uk/handley-gill...
January 9, 2026 at 3:10 PM
An intimidatory cyber attack by a pro-trans direct action group against Lord Toby Young’s Free Speech Union has serious criminal, civil & regulatory consequences. We identify the issues, and the options for affected parties, in our latest post: www.handleygill.co.uk/handley-gill...
Our December 2025 edition of On Hand covering all the latest data protection, cyber security, content regulation, AI, reputation management, open justice, access to information, digital markets regulation and human rights & ESG is out sway.cloud.microsoft/QbfmES4aQty1...
January 8, 2026 at 2:04 PM
Our December 2025 edition of On Hand covering all the latest data protection, cyber security, content regulation, AI, reputation management, open justice, access to information, digital markets regulation and human rights & ESG is out sway.cloud.microsoft/QbfmES4aQty1...
Amid controversy over xAI’s Grok LLM generating nudified images & CSAM posted to X, today The Online Safety Act 2023 (Priority Offences) (Amendment) Regulations 2025 take effect. What’s changing, what do services need to do & what do regulators say: www.handleygill.co.uk/handley-gill... #OSA2023
January 8, 2026 at 2:00 PM
Amid controversy over xAI’s Grok LLM generating nudified images & CSAM posted to X, today The Online Safety Act 2023 (Priority Offences) (Amendment) Regulations 2025 take effect. What’s changing, what do services need to do & what do regulators say: www.handleygill.co.uk/handley-gill... #OSA2023
Just before Christmas, @ec.europa.eu renewed its UK adequacy decisions under #GDPR & #LED so EEA-UK data transfers can continue. We compared the decision with the EDPB opinion, highlight areas for monitoring & identify how long it will last:
www.handleygill.co.uk/handley-gill... #DataProtection
www.handleygill.co.uk/handley-gill... #DataProtection
January 8, 2026 at 8:59 AM
Just before Christmas, @ec.europa.eu renewed its UK adequacy decisions under #GDPR & #LED so EEA-UK data transfers can continue. We compared the decision with the EDPB opinion, highlight areas for monitoring & identify how long it will last:
www.handleygill.co.uk/handley-gill... #DataProtection
www.handleygill.co.uk/handley-gill... #DataProtection
New regulations under the Data (Use & Access) Act 2025 are out… but they’re not the Part 5 commencement regulations we’re waiting for! Find out about the The Data (Use and Access) Act 2025 (Consequential and Other Amendments) Regulations 2025 www.handleygill.co.uk/handley-gill...
December 18, 2025 at 5:48 PM
New regulations under the Data (Use & Access) Act 2025 are out… but they’re not the Part 5 commencement regulations we’re waiting for! Find out about the The Data (Use and Access) Act 2025 (Consequential and Other Amendments) Regulations 2025 www.handleygill.co.uk/handley-gill...
We hosted the 2nd #DPPD session yesterday, dedicated to conducting reasonable & proportionate searches in response to data subject access requests (#DSARs) under Article 15 #UKGDPR. Read the summary of the session & apply to join the next one: www.handleygill.co.uk/handley-gill... #DataProtection
December 18, 2025 at 8:46 AM
We hosted the 2nd #DPPD session yesterday, dedicated to conducting reasonable & proportionate searches in response to data subject access requests (#DSARs) under Article 15 #UKGDPR. Read the summary of the session & apply to join the next one: www.handleygill.co.uk/handley-gill... #DataProtection
We summarised the #RISK Digital Global conference sessions we hosted last week, addressing dark patterns, non-consensual intimate image abuse & deep fakes, US AI regulation, cyber security & resilience,
California’s privacy laws & enterprise risk www.handleygill.co.uk/handley-gill...
California’s privacy laws & enterprise risk www.handleygill.co.uk/handley-gill...
#RISK Digital Global 2025 — Handley Gill
Handley Gill Limited’s CEO & Principal Consultant, Nicola Cain, hosted the afternoon & evening sessions at GRC World Forums' #RISK Digital Global 2025 & offers a summary of those sessions, together wi...
www.handleygill.co.uk
December 15, 2025 at 1:20 PM
We summarised the #RISK Digital Global conference sessions we hosted last week, addressing dark patterns, non-consensual intimate image abuse & deep fakes, US AI regulation, cyber security & resilience,
California’s privacy laws & enterprise risk www.handleygill.co.uk/handley-gill...
California’s privacy laws & enterprise risk www.handleygill.co.uk/handley-gill...
Yesterday was Human Rights Day 2025. To celebrate we published our guidance on preparing & implementing a human rights & wider responsible business policy & due diligence programme: www.handleygill.co.uk/handley-gill... #HumanRights #HumanRightsDay #HumanRightsDay2025 #ESG #GRC #ResponsibleBusiness
December 11, 2025 at 1:09 PM
Yesterday was Human Rights Day 2025. To celebrate we published our guidance on preparing & implementing a human rights & wider responsible business policy & due diligence programme: www.handleygill.co.uk/handley-gill... #HumanRights #HumanRightsDay #HumanRightsDay2025 #ESG #GRC #ResponsibleBusiness
November 2025 edition of On Hand, our monthly digital newsletter (exportable to pdf) covering everything Data Protection, Cyber Security, AI Regulation, Content Regulation, Online Safety, Digital Markets, Access to Information, Reputation Management, GRC & ESG: sway.cloud.microsoft/MUmoBQDqTrm2...
December 9, 2025 at 1:40 PM
November 2025 edition of On Hand, our monthly digital newsletter (exportable to pdf) covering everything Data Protection, Cyber Security, AI Regulation, Content Regulation, Online Safety, Digital Markets, Access to Information, Reputation Management, GRC & ESG: sway.cloud.microsoft/MUmoBQDqTrm2...
The Public Sector Approach to data protection enforcement, under which the public and third sector have largely avoided fines in favour of reprimands, has been permanently adopted by @infocommission.bsky.social but in a revised form, narrowing its scope:
www.handleygill.co.uk/handley-gill...
www.handleygill.co.uk/handley-gill...
December 9, 2025 at 1:34 PM
The Public Sector Approach to data protection enforcement, under which the public and third sector have largely avoided fines in favour of reprimands, has been permanently adopted by @infocommission.bsky.social but in a revised form, narrowing its scope:
www.handleygill.co.uk/handley-gill...
www.handleygill.co.uk/handley-gill...
The @ec.europa.eu published its Digital Omnibus proposals to boost competitiveness by amending digital regulation inc. GDPR, ePrivacy Directive & AI Act. What are the changes? What impact will they have? How do they compare to the UK?Will they work? Find out: www.handleygill.co.uk/handley-gill...
December 9, 2025 at 1:31 PM
The @ec.europa.eu published its Digital Omnibus proposals to boost competitiveness by amending digital regulation inc. GDPR, ePrivacy Directive & AI Act. What are the changes? What impact will they have? How do they compare to the UK?Will they work? Find out: www.handleygill.co.uk/handley-gill...
Mobile games are the ICO’s latest target for Children’s Code compliance. We consider what the monitoring programme will involve, children’s data protection rights, what compliance with the Children’s Code requires & what mobile game providers should do:
www.handleygill.co.uk/handley-gill...
www.handleygill.co.uk/handley-gill...
December 9, 2025 at 1:25 PM
Mobile games are the ICO’s latest target for Children’s Code compliance. We consider what the monitoring programme will involve, children’s data protection rights, what compliance with the Children’s Code requires & what mobile game providers should do:
www.handleygill.co.uk/handley-gill...
www.handleygill.co.uk/handley-gill...
The Cyber Security & Resilience (Network & Information Systems) Bill is out, proposing to bring new entities within the scope of the NIS Regulations 2018 including MSPs & data infrastructure providers, introducing a charging regime & imposing new obligations: www.handleygill.co.uk/handley-gill...
November 25, 2025 at 12:41 PM
The Cyber Security & Resilience (Network & Information Systems) Bill is out, proposing to bring new entities within the scope of the NIS Regulations 2018 including MSPs & data infrastructure providers, introducing a charging regime & imposing new obligations: www.handleygill.co.uk/handley-gill...
We’ve analysed President Trump’s threatened $1bn defamation claim against the BBC over its Panorama broadcast on his 6 January 2021 speech preceding the US Capitol riot, the claim's deficiencies & the potential chilling effect on freedom of expression: www.handleygill.co.uk/handley-gill...
November 12, 2025 at 2:29 PM
We’ve analysed President Trump’s threatened $1bn defamation claim against the BBC over its Panorama broadcast on his 6 January 2021 speech preceding the US Capitol riot, the claim's deficiencies & the potential chilling effect on freedom of expression: www.handleygill.co.uk/handley-gill...
The Cyber Security and Resilience (Network and Information Systems) Bill (Bill 329 2024-26) has now been introduced in @ukparliament.parliament.uk and published: bills.parliament.uk/bills/4035 #CyberSecurity #InformationSecurity #CyberSecurityResilienceBill #CSRBill #MSPs #NIS #NIS2 #Legislation
Cyber Security and Resilience (Network and Information Systems) Bill - Parliamentary Bills - UK Parliament
Current version of Cyber Security and Resilience (Network and Information Systems) Bill with latest news, sponsors, and progress through Houses
bills.parliament.uk
November 12, 2025 at 2:26 PM
The Cyber Security and Resilience (Network and Information Systems) Bill (Bill 329 2024-26) has now been introduced in @ukparliament.parliament.uk and published: bills.parliament.uk/bills/4035 #CyberSecurity #InformationSecurity #CyberSecurityResilienceBill #CSRBill #MSPs #NIS #NIS2 #Legislation
Outsourcer Capita found by @infocommission.bsky.social to be negligent in data security compliance & fined £14m in negotiated settlement. We read the 136 page monetary penalty notice & identify what happened, what the ICO concluded & the lessons to be drawn www.handleygill.co.uk/handley-gill...
An ounce of prevention — Handley Gill
Handley Gill’s specialist data protection consultants analyse the Information Commissioner’s £14m monetary penalty notice against Capita for infringements of the UK GDPR over the 2023 cyber attack & p...
www.handleygill.co.uk
November 4, 2025 at 1:57 PM
Outsourcer Capita found by @infocommission.bsky.social to be negligent in data security compliance & fined £14m in negotiated settlement. We read the 136 page monetary penalty notice & identify what happened, what the ICO concluded & the lessons to be drawn www.handleygill.co.uk/handley-gill...
The Upper Tribunal’s reversal of the interpretation of the rules on when foreign entities & their processing activities will fall within the territorial & material scope of the GDPR & UK GDPR, & what constitutes behavioural monitoring, has implications for AI developers.
October 14, 2025 at 7:49 AM
The Upper Tribunal’s reversal of the interpretation of the rules on when foreign entities & their processing activities will fall within the territorial & material scope of the GDPR & UK GDPR, & what constitutes behavioural monitoring, has implications for AI developers.
Changes to the regulation of adtech & online advertising technologies are afoot.Are you ready to take advantage?Find out about the changes to PECR brought about by the Data (Use & Access) Act 2025 & @infocommission.bsky.social’s new enforcement approach: www.handleygill.co.uk/handley-gill...
October 6, 2025 at 11:16 AM
Changes to the regulation of adtech & online advertising technologies are afoot.Are you ready to take advantage?Find out about the changes to PECR brought about by the Data (Use & Access) Act 2025 & @infocommission.bsky.social’s new enforcement approach: www.handleygill.co.uk/handley-gill...
Thanks to journalist Christopher Elliott for quoting us in his recent article for @usatoday.com on the use of AI against consumers in the travel industry, what responsible AI deployment requires and how consumers can fight back: eu.usatoday.com/story/travel... #AI #ArtificialIntelligence #Travel
AI is quietly raising your travel costs, here's how you fight back
AI is creeping into travel with car scanners, hotel sensors, and airfare algorithms that can quietly add hundreds to your bill.
eu.usatoday.com
September 26, 2025 at 8:15 AM
Thanks to journalist Christopher Elliott for quoting us in his recent article for @usatoday.com on the use of AI against consumers in the travel industry, what responsible AI deployment requires and how consumers can fight back: eu.usatoday.com/story/travel... #AI #ArtificialIntelligence #Travel