Search results
Showing 80 of 103 results for "cyber"
British Airways negotiates the settlement of mass data claim
In December, I attempted to forecast what 2021 might bring in relation to mass claims in the data sphere. The big unknown remains, as we await the Supreme Court’s decision in Lloyd v Google, following a hearing in April. This will determine whether or not...
No fine too small: ICO fines Mermaids £25,000 for personal data breach
Last week, the ICO fined the charity Mermaids £25,000 for failure to implement an appropriate level of organisational and technical security measures, in contravention of its obligations under Articles 5(1)(f) and 32(1) and (2) of the UK GDPR. While this ...
Ransomware: does your board know the right questions to ask?
Ransomware attacks are constantly hitting the headlines, with FBI director Christopher Wray recently likening the current spate of attacks to the challenges raised by the 9/11 terrorist attacks. In response, the UK’s NCSC has produced a number of resource...
NCSC says think twice about using DLT
The UK’s National Cyber Security Centre (NCSC) recently published a short whitepaper on distributed ledger technology (DLT) to help decisions makers in organisations decide whether it is an appropriate technology for their use case. Key benefits of DLT in...
Reporting ransomware payments and regulating cryptocurrencies: international task force publishes new plan to tackle ransomware
As a new international action plan calls for urgent action to tackle ransomware, the NCSC reminds organisations of what steps they can take now to protect themselves from this growing threat The ransomware threat is increasing – both in terms of scale an...
Ofcom updates NIS guidance
Ofcom has updated its guidance for those in the digital infrastructure subsector who are caught by The Network and Information Systems Regulations (the “NIS Regulations”). The NIS Regulations set out measures to “boost the overall level of security (both ...
Mass claims for data breaches: perhaps a change of heart by the Government but don’t forget Lloyd v Google
The UK Government has published its response to last year’s consultation reviewing the representative action provisions in s187 of the Data Protection Act (DPA) 2018. DCMS consultation As reported in my earlier post on the consultation, last Autumn, the D...
When should you notify a data breach? New EDPB guidance provides practical examples
New guidelines published on 14 January provide both practical examples of when to notify a data breach and “advisable measures” which organisations can take to mitigate their cyber risk. Since the introduction of GDPR, the ICO has received over 30,000 da...
Mass claims in the data sphere: what will 2021 bring?
While there is plenty of uncertainty on the horizon, one thing we can expect in 2021 is some big developments in relation to collective action claims for data law breaches. These mass claims from large groups of aggrieved individuals for breaches of their...
The Collapse of cryptography – considering the quantum threat to blockchain
Is it possible for a blockchain solution to respect the fundamental principles of data protection and privacy? We have previously analysed this issue (see March of the Blocks) and concluded, generally speaking, yes. But does quantum change this? In our re...