GDPR is now fully in force as of 25 May 2018, but with deference to Sir Winston Churchill, now this is not the end. It is not even the beginning of the end. But it is, perhaps, the end of the beginning.   What is regarded as constituting compliance will  change and firms will need to maintain their efforts to keep their processes under review.

The Data Protection Act 2018 received Royal Assent on 23 May 2018 and contained an important change in relation to lawyers’ duties of confidentiality.

We have advised many firms, including a large number of US law firms, on compliance.   Resources can be found on and, for US law firms,  New guidance is being released constantly and key documents relevant to law firms are posted on

‹ Back to Publications