Data Protection Update: What In-House Counsel, HR, and Compliance Professionals Need to Know When Dealing With Employees in the UK

We are pleased to invite you to an update webinar on data protection when dealing with employees, covering a raft of recent changes, including The Data (Use and Access) Act 2025 - the most significant reform to UK data protection law since the introduction of the UK GDPR.

For UK businesses and for U.S. companies with UK employees or operations, these changes affect everyday HR and compliance practices, from how consent and legitimate interests operate in the employment relationship to subject access requests, privacy notices, and international data transfers.

Join Arnold & Porter’s James Castro-Edwards (Counsel, Privacy, Cybersecurity & Data Strategy) and Henry Clinton-Davis (Partner, Head of UK Employment) for a practical 60-minute briefing, including live Q&A.

We will cover:

• Legal framework: the GDPR, UK GDPR, Data Protection Act 2018, and the Data (Use and Access) Act 2025 – how does it all fit together?
• Territorial scope – you don’t have to have a UK branch or subsidiary to be caught.
• Key concepts (personal data, controllers, processors, processing)
• Lawful bases for processing (and the problem with employees’ consent)
• Transparency: employee privacy notices
• Automated decision-making – more flexibility for HR
• Data subjects’ rights – including more flexible approaches for dealing with employee data subject access requests
• Data transfers – what’s changed and how do I ensure transfers of data to the US are compliant?
• Using UK employee data in U.S. legal proceedings
• Personal data breaches, including when ex-employees steal customer information