Tech & Sourcing @ Morgan Lewis

TECHNOLOGY TRANSACTIONS, OUTSOURCING, AND COMMERCIAL CONTRACTS NEWS FOR LAWYERS AND SOURCING PROFESSIONALS
On 19 June 2025, the UK Parliament enacted the Data (Use and Access) Act 2025 (DUAA), marking the most significant UK data protection reform since the UK General Data Protection Regulation (UK GDPR). Rather than overhauling the current regime, DUAA introduces targeted amendments to the UK GDPR, the Data Protection Act 2018, and Privacy and Electronic Communications Regulations (PECR), aiming to support responsible data use while preserving core privacy protections.
As noted in our recent blog, business process outsourcing (BPO) providers are promising big savings and improved outputs tied to the design and implementation of digital solutions that will monitor, quality check, facilitate, and sometimes perform the applicable business processes.
Partners Ksenia Andreeva and Kristin Hadgis and associate Oliver Bell recently authored an Insight titled The Evolving Framework of Data Governance: A Global Perspective. The article explores and summarizes hot topics in data governance, data privacy laws, and the evolving global landscape, including in the United Kingdom, European Union, United States, and Middle East. As the focus on transparency and cybersecurity increases, and as markets become more globalized, keeping up to date on privacy regulations and rules can be a demanding undertaking.