Tune in to the action-packed latest episode of Fieldfisher's Data & Privacy Matters podcast, as Camille Ebden, Tessa Waite and Rida Ahmed look at the key data and privacy news from November 2025.

They dive into the latest news on the much anticipated publishing of the EU Digital Omnibus Regulation Proposal and how this aims to simplify and harmonise digital regulations in the EU. After discussing the CJEU's Inteligo Media decision which impacts the interpretation of e-marketing rules under the ePrivacy Directive, the team consider international data transfer developments in India, Brazil the US and China. This is followed by discussions around the latest Online Safety Act implementation from Ofcom and the publishing of the UK's draft Cyber Security and Resilience Bill. Finally, the team consider the latest from the ICO and highlight the key fines and enforcements that have occurred throughout the month.

A list of sources of the news discussed can be found here.

In the latest episode of Fieldfisher’s Data and Privacy Matters podcast, hosts Lorna Cropper, Emma Yaltaghian and Sophie Gosling provide a comprehensive roundup of the key legal developments from October 2025.

The team start by discussing the Irish DPC’s €530 million fine against TikTok, with the regulator finding that TikTok had not applied appropriate safeguards when transferring data to China and had fallen short on its transparency obligations. The team also reviewed the EDPB’s opinion on the UK’s adequacy decision, which welcomed continued alignment with EU standards but raised concerns over new ministerial powers introduced under the Data (Use and Access) Act.

They continue with coverage of the ICO’s successful appeal against Clearview AI, confirming that the regulator can take enforcement action against overseas organisations processing UK residents' data - even if they are third party controllers and do not engage in such monitoring themselves. The ICO’s ongoing consultations were also discussed, including new guidance on enforcement and the upcoming charitable purpose soft opt-in for direct marketing.

The team reflects on the high-profile case of former MasterChef host Gregg Wallace, who brought legal action against the BBC for delayed responses to his data subject access requests, highlighting the operational and reputational risks of mishandled DSARs.

Finally, the team discusses several major enforcement actions. Capita was fined £14 million following its 2023 ransomware attack, Grindr’s €6.5 million penalty for unlawful data sharing was upheld in Norway, and the Dutch DPA fined Experian €2.7 million for unlawful credit profiling.

In this latest episode of Fieldfisher’s Data and Privacy Matters podcast, hosts Anna Rawlinson, Lorna Cropper and Emma Yaltaghian provide a comprehensive roundup of the key legal developments from August 2025.

The team start by discussing the growing criticism of the EU’s digital regulations, including the Digital Services Act and AI Act, with concerns about their impact on innovation. They also touch on the EU Data Act, effective September 2025, which brings new rules on data access and interoperability.

Discussion then turns to ICO consultations on the new lawful bases of recognised legitimate interests and complaints procedure. Attention is also give to the Online Safety Act which now requires strict age verification for adult content and the surge in VPN use.

The podcast also covers legal challenges to consent models, increased oversight of influencer marketing, and major enforcement actions, including sizeable fines in Spain and Poland.