<?xml version='1.0' encoding='utf-8'?>
<rss version="2.0"><channel><title>GDPR.me.uk — News &amp; implementation</title><link>https://gdpr.me.uk/news/</link><description>Source-linked UK data protection briefings and practical implementation updates.</description><language>en-gb</language><item><title>DUAA: core data protection reforms are in force</title><link>https://gdpr.me.uk/news/duaa-core-reforms-in-force/</link><guid>https://gdpr.me.uk/news/duaa-core-reforms-in-force/</guid><description>Most remaining data protection and privacy reforms commenced on 5 February 2026. Review lawful-basis, SAR, transfer and PECR procedures against the amended rules, rather than treating DUAA as a future proposal. Underlying event: 2026-02-05. Published 1 November 2026.</description><pubDate>Sun, 01 Nov 2026 12:00:00 +0000</pubDate></item><item><title>A complaints procedure now belongs in your accountability framework</title><link>https://gdpr.me.uk/news/data-protection-complaints-procedure/</link><guid>https://gdpr.me.uk/news/data-protection-complaints-procedure/</guid><description>The DUAA controller complaints requirements commenced on 19 June 2026. Facilitate complaints, acknowledge them within 30 days, make appropriate enquiries, keep the person informed and communicate the outcome without undue delay. Underlying event: 2026-06-19. Published 1 November 2026.</description><pubDate>Sun, 01 Nov 2026 12:00:00 +0000</pubDate></item><item><title>New cookie exceptions need a purpose-by-purpose assessment</title><link>https://gdpr.me.uk/news/cookie-exceptions-2026/</link><guid>https://gdpr.me.uk/news/cookie-exceptions-2026/</guid><description>The ICO finalised its storage and access technologies guidance on 29 April 2026. Limited statistical and appearance uses can qualify for an exception, with conditions including transparency and a simple free objection route. Underlying event: 2026-04-29. Published 1 November 2026.</description><pubDate>Sun, 01 Nov 2026 12:00:00 +0000</pubDate></item><item><title>Information Commission: new legal body, continuing ICO services</title><link>https://gdpr.me.uk/news/information-commission-transition/</link><guid>https://gdpr.me.uk/news/information-commission-transition/</guid><description>The Information Commission assumed the regulator’s functions on 30 September 2026. The organisation continues to use the ICO name as the Information Commission’s Office. Its core guidance, regulatory responsibilities and public services continue. Underlying event: 2026-09-30. Published 1 November 2026.</description><pubDate>Sun, 01 Nov 2026 12:00:00 +0000</pubDate></item><item><title>Charitable marketing has a distinct soft opt-in route</title><link>https://gdpr.me.uk/news/charitable-marketing-soft-opt-in/</link><guid>https://gdpr.me.uk/news/charitable-marketing-soft-opt-in/</guid><description>The ICO’s updated electronic-mail guidance explains the charitable-purposes soft opt-in. Eligible charities must satisfy its own conditions; permission cannot be assumed merely because a message supports a good cause. Underlying event: 2026-04-28. Published 1 November 2026.</description><pubDate>Sun, 01 Nov 2026 12:00:00 +0000</pubDate></item></channel></rss>