The Information Commissioner’s Office (ICO) investigation into Capita’s 2023 cyber attack has concluded with a £14 million fine for the...

The European Commission has published its long-awaited “Digital Omnibus” simplification package, with significant changes proposed to a...

The UK’s cyber threat is on the rise. From headlines about major breaches at household names, to stark NCSC statistics (including a 50%...

Despite cyber-attacks dominating the media headlines this year, including against Marks and Spencer, the Co-op and Jaguar Land Rover, the...

On 16 September 2025, almost a year after the European Commission published the landmark Draghi Report on lagging European...

Ever since Lloyd v Google [2021] stemmed the flow of mass data protection litigation, potential claimants have sought new ways to bring...

Ransomware has been very much in the headlines recently, from the retailer attacks on M&S, Co-op and others, to the government’s recent...

Enforcement action in respect of GDPR data deletion requirements is rare in the UK and the EU, and even more so when the issue is...

Ransomware remains one of the most serious cyber threats facing the UK today, costing the economy millions and threatening the...

Legislation is now in place to revolutionise access to customer data in the UK by enabling new ‘smart data’ schemes to come to fruition. ...

We have seen a significant uptick in cyber preparedness activity recently and an increased focus on cyber governance. While the global...

Staying abreast of enforcement trends is a critical element of the General Data Protection Regulation (GDPR) risk landscape for...

Background In May 2025 the Department for Science, Innovation and Technology used the government’s flagship cyber security event,...

On 24 April 2025, the Belgian Data Protection Authority (DPA) ruled (once again) that transfers of personal data by the Belgian Federal...

2025 is shaping up to be a busy year for cyber, as discussed in our new cyber podcast series. The recent retailer headlines are a stark...

As readers of this blog will know, the final version of the EU’s General Purpose AI (GPAI) Code of Practice was due to be published by 2...