1/23/2026 10:21:20 AM NCSC insights into what the CSRB means for the UK’s critical suppliers By Richard Jeens Natalie Donovan The UK’s long‑awaited Cyber Security and Resilience Bill (CSRB) is progressing through Parliament - and it lands at a moment when global...
1/12/2026 12:06:55 PM ICO publishes new guidance on data subject access requests By Cindy Knott The Information Commissioner’s Office (ICO) has published updated guidance on data subject access requests (DSARs), reflecting both...
12/11/2025 9:27:38 AM EU proposes single-entry point for cyber incident reporting, but is it really “report once, share many”? By Laura Houston Richard Jeens Christopher Burns Natalie Donovan +1 more... Show less As part of the recently announced Digital Omnibus simplification package (see our blog on that here), the European Commission plans to...
11/24/2025 5:05:38 PM Preventing Core Technical Failures: Lessons from the Capita Breach By Rebecca Cousin Natalie Donovan Peter Elkin The Information Commissioner’s Office (ICO) investigation into Capita’s 2023 cyber attack has concluded with a £14 million fine for the...
11/20/2025 11:29:52 AM BREAKING: EU announces major digital and data simplification package and delay to AI Act By Laura Houston Christopher Burns The European Commission has published its long-awaited “Digital Omnibus” simplification package, with significant changes proposed to a...
11/20/2025 8:50:11 AM CSRB finally published – how will this new cyber law affect you? By Natalie Donovan The UK’s cyber threat is on the rise. From headlines about major breaches at household names, to stark NCSC statistics (including a 50%...
11/17/2025 2:50:11 PM You've been warned! Learnings from non-cyber regulatory action and litigation By Cindy Knott Despite cyber-attacks dominating the media headlines this year, including against Marks and Spencer, the Co-op and Jaguar Land Rover, the...
10/21/2025 1:32:18 PM Can Brussels change? One year after Draghi – the EU's Digital Simplification Package By Christopher Burns On 16 September 2025, almost a year after the European Commission published the landmark Draghi Report on lagging European...
9/1/2025 12:08:53 PM Data claims must be proved: lessons from the Court of Appeal on non-material damage By Cindy Knott Ever since Lloyd v Google [2021] stemmed the flow of mass data protection litigation, potential claimants have sought new ways to bring...
8/14/2025 2:49:24 PM Recent retailer attacks shine spotlight on the Computer Misuse Act By Rosie Wilson Natalie Donovan Ransomware has been very much in the headlines recently, from the retailer attacks on M&S, Co-op and others, to the government’s recent...
8/6/2025 9:20:52 PM When deletion becomes a breach: ICO fines Birthlink for destroying irreplaceable data By Cindy Knott Enforcement action in respect of GDPR data deletion requirements is rare in the UK and the EU, and even more so when the issue is...
8/5/2025 8:31:26 AM Ransomware Reform: UK Government confirms it will push ahead with new ransomware rules By Natalie Donovan Tayla Byatt Ransomware remains one of the most serious cyber threats facing the UK today, costing the economy millions and threatening the...
7/31/2025 10:11:12 AM Smart data progress report: FCA/ICO statement confirms Open Finance in the pipeline By Bryony Bacon Emily Bradley Legislation is now in place to revolutionise access to customer data in the UK by enabling new ‘smart data’ schemes to come to fruition. ...
7/22/2025 9:41:21 AM Cyber - a pressing board-level issue By Natalie Donovan We have seen a significant uptick in cyber preparedness activity recently and an increased focus on cyber governance. While the global...
6/30/2025 7:46:17 AM To enforce or not? AI divides regulators By Cindy Knott Bryony Bacon Staying abreast of enforcement trends is a critical element of the General Data Protection Regulation (GDPR) risk landscape for...
6/5/2025 10:24:54 AM Cyber Update: New Software Security Code of Practice By Sam Edwards Natalie Donovan Background In May 2025 the Department for Science, Innovation and Technology used the government’s flagship cyber security event,...