The “targeted advertising” data protection case of O’Carroll v Meta Platforms Ireland Ltd (KB-2022-004365) was settled on 21 March 2025 with a Facebook has agreeing to stop the claimant’s personal data to target ads at her.
Human rights campaigner, Tanya O’Carroll had objected to Facebook’s use of her personal data for ad targeting, after she noticed she was receiving pregnancy-related ads before she had shared the news of her pregnancy privately. She argued that targeted advertising should be classified as direct marketing under UK law, giving users the right to opt out. The ICO supported this view, emphasising that “organisations must respect people’s choices about how their data is used.” Meta argued that its ads are targeted at groups of at least 100 users, not individuals, and that its model keeps services free. The case has set a precedent for others seeking to disable Facebook’s ads, however Meta has suggested that it will introduce a paid ad-free subscription option for UK users. BBC, The Times, The Guardian, The Telegraph, Tech Crunch, The Mirror and The Daily Mail covered the settlement
On 21 March 2025, the Special Immigration Appeals Commission (SIAC) handed down judgement in the case of H6 vs Secretary of State for the Home Department (SC/205/2023) in relation to the release of certain information, following the 2023 exclusion of Yang Tengbo from the UK. In its judgment, SIAC confirmed that the Secretary of State was justified in determining Yang posed a national security risk. The media will not be granted access to information provided by Mr Yang during the first private hearing before SIAC last July 2024. However, the media will be granted access to most of the information passed to Mr Yang in confidence which is commercially sensitive and to a witness statement by Dominic Hampshire, a senior advisor to Prince Andrew, both with minor redactions. 5RB has a summary and The Irish News reported on the ruling.
The Guardian reported that Labour MP, Chi Onwurah has warned that AI safety concerns risk being overlooked as the government delays regulation to align with the US administration. Onwurah urged ministers to introduce the AI Safety Bill, which would require tech companies to submit their AI models for regulatory testing. She emphasised the need for the government to protect the public from AI-related risks, not just promote technology’s benefits. The bill has reportedly been postponed to after summer in an attempt to appease the US in the wake of criticisms of Europe’s AI regulations.
The LSE Media Blog has an article examining the risks of AI in the education context. It argues that AI systems are opaque, unregulated and are likely to become a burden rather than a benefit to teachers.
Internet and Social Media
From Monday 17 March 2025, Ofcom will begin enforcing the Online Safety Act’s illegal content codes, obligating social media companies to detect and remove harmful content like child sexual abuse material, terrorism, hate crimes, suicide encouragement, and fraud. Companies must use advanced tools like automated hash-matching and strong moderation to comply. The Regulator now has powers to impose significant fines and even bans for the most severe cases of non-compliance. The Independent, Guardian, Computer Weekly and InfoSecurity Magazine have more information.
Data privacy and data protection
Amazon has lost a legal challenge to a record 746 million euro (£625.6m) fine handed down four years ago by Luxembourg regulators over violations of European privacy law.
Artificial Intelligence
The NGO noyb has a piece entitled “AI hallucinations: ChatGPT created a fake child murderer”
Surveillance
Two Northern Ireland journalists are seeking costs from the Police Service of Northern Ireland (PSNI) after delays in disclosing key evidence led to two abandoned court hearings. The case will set a precedent on whether the tribunal can award costs in cases of alleged government misconduct. The journalists accuse the PSNI of misleading the Investigatory Powers Tribunal (IPT) by concealing surveillance operations used to identify confidential sources. This follows a December IPT ruling that the PSNI unlawfully ordered surveillance on the journalists and a police ombudsman official. Computer Weekly has more information.
Newspaper Journalism and regulation
Ofcom has revoked three impartiality breach rulings against GB News after the High Court overturned two similar decisions. The regulator has also dropped six ongoing investigations into politicians hosting shows on GB News, TalkTV, and LBC. A judicial review ruled that Ofcom had misapplied the Broadcasting Code, as the ban on politicians presenting news applied only to news programs, not current affairs shows. As a result, all six cases have been removed from GB News’ compliance record. Ofcom’s statement can be read here and GB News’s statement is available here. The Press Gazette, BBC and The Guardian covered the development. Mischon de Reya has a blog post on the High Court rulings.
Ofcom has launched a formal investigation into a GB News broadcast in which presenter Josh Howie suggested that a church’s commitment to the “full inclusion of LGBTQ+ persons” would also include pedophiles. Over 70,000 people reported complaints in a campaign coordinated by the Good Law Project. GB News’s response is available here.
Art, Music and Copyright
Mischon de Reya has an article examining the implications of the recent High Court decision in the case of Abbott v Sinocare which concerned the shape of glucose monitoring systems. The case highlights the difficulty in proving that a 3D trademark has gained distinctiveness, requiring evidence of efforts to educate the public that the mark represents not just a product, but also its origin.
IPSO
- 05587-24 Hicks v Cornish Times, 1 Accuracy, Breach – sanction: publication of correction
- 06368-24 Sidhu v The Times, 2 Privacy, 3 Harassment, No breach – after investigation
Statements in open court and apologies
The Telegraph Media Group has apologised and paid substantial damages to tech entrepreneur Zia Chishti in a libel settlement. The case stemmed from articles published between 2021 and 2023, reporting sexual misconduct allegations made by former Afiniti employee Tatiana Spottiswoode to US Congress. Chishti denied the claims and sued for defamation. A High Court ruling found the articles “plainly defamatory,” ([2023] EWHC 1808 (KB)) and The Telegraph has now withdrawn its defence, acknowledging the harm caused. In addition to damages, the newspaper has issued formal apologies in court, online, and in print, and will contribute to Chishti’s legal costs. The Press Gazette, Geo News and Business Recorder reported on the apology.
New Issued cases
There were two defamation (libel and slander) claims filed on the Media and Communications list last week.
Last week in the courts
The trial of the defamation and data protection case of Clarke v Guardian QB-2022-001397 continued before Steyn J.
As mentioned above, on 17 March 2025, there was a statement in open court in the case of Chishti v Spottiswoode KB-2022-004316 before Collins Rice J.
On 18 March 2025, there was a hearing in the case of Ben Yair v Peaford.
On 21 March 2025, Ritchie J granted an urgent prohibitory injunction to prevent the defendant from publishing the Claimant’s confidential and private information in the case of HXZ v NMX [2025] EWHC 697 (KB). The Defendant repeatedly demanded increasing sums of money under threats to publicly disclose the Claimant’s private and confidential information, including nude photos, to his children, colleagues, and the media, having already made partial disclosures about his health and personal life. The High Court ruled that the injunction was necessary and just to maintain the status quo.
Media law in other jurisdictions
Australia
On 17 March 2025, the Court dismissed an application for default judgement in the defamation and trade mark infringement claim of Hoser v Eleftheriou [2025] FedCFamC2G 392. Although the respondent was in default, the court did not exercise its discretion to grant default judgement as the judge had “very serious concerns about the basic validity of the claim” and was not persuaded that the trademark and defamation issues arose out of the same or substantially the same or closely connected facts.
Canada
On 20 March 2025, the Superior Court of Justice in Ontario dismissed the defendant’s anti-SLAPP motion in the defamation case of Solmar Inc. v. Hall, 2025 ONSC 1703. The defendant accused the plaintiff, who is a real estate developer, of having a history of being corrupt and aggressive towards opponents and accused council members of having accepted bribes from the plaintiff. The Court held that the public interest in permitting the proceeding to continue outweighed the public interest in protecting the Defendant’s expression, given the “serious, unsubstantiated accusations” against the plaintiff.
Norway
Privacy group Noyb has filed a complaint against OpenAI for allegedly violating GDPR after ChatGPT falsely generated a story accusing a Norwegian user of murdering his children. The complaint, submitted to Norway’s data protection authority, argues that OpenAI fails to allow users to correct false personal information. This follows a previous case where Noyb requested OpenAI erase or amend incorrect data about a public figure, which the company claimed was not possible. While ChatGPT includes disclaimers about potential inaccuracies, Noyb insists OpenAI must ensure compliance with EU data protection laws. The BBC, Guardian, Euractiv, The Register, Politico and Digital Watch Observatory reported on the story.
Serbia
Press freedom in Serbia is at a “dangerous turning point,” according to senior editors from independent media outlets, who warn that increasing pressure from the government and state-backed media is endangering journalism. Reporters face harassment, physical attacks, and smear campaigns, especially amid protests against President Vučić’s government following the deadly collapse of a train station canopy last November. Civil society groups have raised alarms about the hostile environment for media, with the government spreading false narratives and targeting independent outlets. Reporters Without Borders has condemned the escalating media pressure, likening it to the 1990s, and urged the EU to address the issue. The Guardian and Ekathimerini and
United States
A bipartisan group of US senators has introduced COPPA 2.0, a proposed update to the Children and Teens’ Online Privacy Protection Act. The bill aims to prevent companies from collecting teens’ data without consent, introduce an “eraser button” for personal info, and close loopholes that undermine protections. Despite strong support from advocacy groups, opponents like trade association NetChoice argue it could increase cybersecurity risks, censorship, and government overreach. The bill previously passed the Senate but stalled in the House over enforcement concerns. The Socially Aware blog has more information.
Research and Resources
- Engelmann, Severin and Nissenbaum, Helen F., Countering Privacy Nihilism (2025) Elisa Orrù, Ralf Poscher (eds), Conceptions of Data Protection and Privacy. Legal and Philosophical Perspectives. London: Hart 2025 (forthcoming).
- Vavoula, Niovi and Tsourdi, Lilian, Crimmigration through Administrative Surveillance of Civil Society at the EU’s External Borders (2025) University of Luxembourg Law Research Paper No. 2025-03, Routledge, forthcoming.
- Kim, Pauline, Algorithmic Governance and Nondiscrimination Rights in the Workplace (2025) Washington University in St. Louis Legal Studies Research Paper No. 25-03-08.
- Kuhlmann, Katrin, Digital Regulation and Development: A Global Micro and Macro Comparison (2025) 56 Geo. J. Int’l L. 3, Georgetown University Law Center Research Paper Forthcoming.
- Singh, Madhavi, Reimagining Social Media Through Middleware: A Structural Path to Competition and User Agency (2025) North Carolina Journal of Law & Technology, Forthcoming.
- Craig, Elaine, Sexual Communications, Digital Intimacy, and the Extremely Limited Admissibility of Evidence of a Complainant’s Intention to Consent (2025) Dalhousie Law Journal, forthcoming.
- Park, Eunice, Private Equity and A.I. in Healthcare: A Perilous Pairing for Patient Privacy (2024) 53 Hofstra L. Rev. 349 (2025).
Next week in the courts
The trial of the defamation and data protection case of Clarke v Guardian QB-2022-001397 will continue before Steyn J.
On Wednesday 26 March 2025, there will be a hearing in the case of BPP Holdings Limited and others v Blakey KB-2024-001080.
On Friday 28 March 2025, there will be hearings in the cases of HCRG Care Limited v Persons Unknown KB-2025-000736 and Vince v Staines KB-2024-001676.
Reserved judgements
Bridgen v Hancock, 12 March 2024 (Collins Rice J)
Secretary of State for Education v Marples, 4 November 2024, (Sir Peter Lane)
This Round Up was compiled by Jasleen Chaggar who is the Legal and Policy Officer at Big Brother Watch.


Leave a Reply