Search results

When should you notify a data breach? New EDPB guidance provides practical examples New guidelines published on 14 January provide both practical examples of when to notify a data breach and “advisable measures” which organisations can take to mitigate their cyber risk. Since the introduction of GDPR, the ICO has received over 30,000...

Combatting cybercrime: the new Nominet and PIPCU landing pages for suspended criminal domains What happens when Nominet suspends a domain name for fraudulent activity? Does it go back for sale? Does the affected brand owner buy it and maintain it as a defensive registration? What should happen? In what is reportedly the first registry-led...

ENISA issues guidelines on securing the IoT supply chain On 9 November 2020, the European Union Agency for Cybersecurity (ENISA) published its guidelines for securing the Internet of Things (IoT) supply chain (see the full report here). The report is relevant to all those developing, selling and using IoT...

Relief for British Airways, but not for businesses facing fines in the future On Friday 16th October, the Information Commissioner’s Office (ICO) announced its long awaited fine of British Airways plc (BA) for breach of the GDPR following a cyber-attack in 2018. The final fine of £20 million is the second and largest fine issued by...

“Prepare to jump to lightspeed!” – hyperspace, hyperlinks and the Copyright Directive The mention of Star Wars and copyright together often conjures to mind the well-known Stormtrooper helmet case. But that may be about to change now that AG Szpunar has opened his recent Opinion in VG Bild-Kunst v Stiftung Preußischer Kulturbesitz (Case...

‘NHS COVID-19’ app: are privacy concerns justified? The Government’s National Cyber Security Centre (NCSC) published a blog this week on the new NHS COVID-19 app, explaining that the origins of contact tracing in the UK could be linked back to this country’s response to the Black Death. While the...

Certification: ENISA's view on the problems and how to fix them On 15th April* ENISA published a report on advancing software security in the EU as part of its activities to support the EU’s cyber certification work. The report notes that as security breaches increase, it is “striking how fundamental security...

New Nominet initiatives to combat use of .uk domain names for criminal activities As some tech companies will unfortunately be aware, dealing with cyber criminals who register domains names similar to their brands for fraudulent activities can be time consuming, costly and involve reputation crisis management. However, it is also...

Keeping ransomware at bay: UK NCSC updates its malware and ransomware guidance The UK's National Cyber Security Centre (NCSC) recently streamlined its guidance on how organisations can mitigate malware and ransomware attacks. Given Travelex's recent experience with ransomware and the new cyber risk created by the COVID-19 pandemic,...

Is reputation still king when it comes to a data breach? We always expected the GDPR to be a game changer in terms of raising the risk profile (and reputational impact) of data and cyber breaches, something demonstrated with yesterday’s news of the ICO’s intention to fine BA £183 million for its data breach....