Search results

One tech tip a day keeps the hacker away: NCSC publishes new guidance on how to keep IP safe in cyberspace Cyber risks, and the reputational fallout that might ensue, are not a new addition to the woes that keep IP practitioners up at night. Thankfully there are a growing number of resources to help you tackle this evolving threat. For example, back in May...

How should you respond to a personal data breach in Hong Kong? A major hotel group has recently reported a data leak to the Office of the Privacy Commissioner for Personal Data (the “PCPD”) in Hong Kong. Reportedly, it was hit by a cyber hack a few months ago and, as a result, certain data files concerning personal...

Identifiability in controllers' hands is key - Outcome of the DSG Retail appeal The Court of Appeal’s February 2026 ruling in DSG Retail Ltd v Information Commissioner has confirmed the normal interpretation of the scope of controllers’ data security obligations under UK data protection law. Although the case was brought under the...

Children’s privacy in focus: ICO fines Reddit £14.47m Whereas 2025 saw the ICO’s penalties firmly aimed at data security and cyber breaches, this year has seen the issue of two significant fines to online services, Imgur (£247,590) and Reddit (£14.47m), highlighting the regulator’s long-standing focus on...

NCSC insights into what the CSRB means for the UK’s critical suppliers The UK’s long‑awaited Cyber Security and Resilience Bill (CSRB) is progressing through Parliament - and it lands at a moment when global geopolitics, supply chain complexity, new technologies and the evolving tactics of threat actors are all impacting the...

Preventing Core Technical Failures: Lessons from the Capita Breach The Information Commissioner’s Office (ICO) investigation into Capita’s 2023 cyber attack has concluded with a £14 million fine for the group. Since the date of that attack, there have continued to be many more high-profile cyber attacks, and there is no...

Ransomware Reform: UK Government confirms it will push ahead with new ransomware rules Ransomware remains one of the most serious cyber threats facing the UK today, costing the economy millions and threatening the functioning of a wide range of organisations, including those in critical sectors. In response, the UK Government recently...

Will you have to report paying a ransom? New UK rules proposed Ransomware is one of the top concerns keeping CISO’s (and some GCs) awake, and many think that it’s ‘when not if’ in terms of having to manage a ransomware incident. We regularly speak to clients about their approach to ransomware payments and the factors...

NCSC Publishes Guidelines on Secure AI System Development: a Concerted International Approach Everyone’s talking about AI at the moment (see our round-up of recent developments here and here). A consensus is building across regulators, industry, experts and sceptics, that realising any benefits from AI requires mitigation of its risks. One of the...

UK government publishes responses to consultation on the Computer Misuse Act 1990 Cyber continues to be a key threat for both organisations and governments. The UK government has been considering for some time whether to update its cyber laws, and recently published the results of a consultation initiated in February 2023, which sought...