Search results

Equifax: a new dawn for FCA enforcement? The FCA’s recent decision to fine Equifax Limited (“Equifax”) £11,164,400 for failing to manage and monitor the security of UK consumer data outsourced to its US-based parent Equifax Inc. - six years after the investigation was first announced - raises th...

UK government finalises IoT cybersecurity requirements The UK government has published the final version of the Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023 providing manufacturers of IoT devices with clarity as to the securi...

ICO and NCSC sign joint MOU setting out how they will work together When managing a cyber incident, one pressing issue to consider is "who needs to be notified?" Clients are often prepared to discuss whether or not regulators and customers should be informed, but can be less certain when discussing whether to notify the N...

Full steam ahead: China publishes interim generative AI measures New week, new measures: such is the current pace of regulatory change regarding AI, each week can bring major new developments in the regulatory landscape. On 13 July 2023, the Cyberspace Administration of China (CAC) published a set of ‘Interim Measures ...

UK and US Governments crack down on ransomware criminals Handling ransom demands (and whether it possible and/or desirable to pay) is one of the most critical aspects of managing a cyber attack. This involves considering the applicable, and evolving, sanctions position, among other risks. Last week, the UK and ...

New app store Code of Practice In December last year, the Department for Digital, Culture, Media and Sport (DCMS) published a new ‘first of its kind’ code of practice aimed at protecting app users. While the code is voluntary, the Government is expecting app store operators and app dev...

Organisations could face new security requirements under ‘cyber duty to protect’ plans? Government call for information suggests new security requirements could be introduced to protect online accounts and user data from hackers Last year saw a 159% increase in unauthorised access to personal information (including hacking) and an 89% rise i...

Is the NIS regime working? Changes proposed in new review This month, the Government published its second post-implementation review of the 2018 Network and Information Systems (‘NIS’) Regulations. The NIS regime is designed to help protect the UK, and in particular certain essential services (hospitals, energy,...

Has the ICO just told lawyers not to advise clients to pay ransoms? Ransomware attacks are on the rise, and more organisations have been paying the ransoms in recent months. In light of this, the ICO and National Cyber Security Centre (‘NCSC)’ have published a joint letter they sent to the Law Society regarding ransomware...

Ransomware attacks: Are you ready? New ICO guidance can help The ICO’s new ransomware guidance could not have come at a more pertinent time. This week Joe Biden, told US business leaders it was their “patriotic obligation” to strengthen their digital defences against Russian cyberattacks and last month the Nationa...