Search results

UK government publishes responses to consultation on the Computer Misuse Act 1990 Cyber continues to be a key threat for both organisations and governments. The UK government has been considering for some time whether to update its cyber laws, and recently published the results of a consultation initiated in February 2023, which sought...

UK signs joint statement against ransomware payments – “New norm” or status quo? On 2 November 2023, the UK government announced that it and more than 40 countries had signed a Joint Statement strongly discouraging the payment of ransomware demands and pledging that central government funds should not be used to pay ransoms to cyber c...

Equifax: a new dawn for FCA enforcement? The FCA’s recent decision to fine Equifax Limited (“Equifax”) £11,164,400 for failing to manage and monitor the security of UK consumer data outsourced to its US-based parent Equifax Inc. - six years after the investigation was first announced - raises th...

UK government finalises IoT cybersecurity requirements The UK government has published the final version of the Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023 providing manufacturers of IoT devices with clarity as to the securi...

ICO and NCSC sign joint MOU setting out how they will work together When managing a cyber incident, one pressing issue to consider is "who needs to be notified?" Clients are often prepared to discuss whether or not regulators and customers should be informed, but can be less certain when discussing whether to notify the N...

Full steam ahead: China publishes interim generative AI measures New week, new measures: such is the current pace of regulatory change regarding AI, each week can bring major new developments in the regulatory landscape. On 13 July 2023, the Cyberspace Administration of China (CAC) published a set of ‘Interim Measures ...

UK and US Governments crack down on ransomware criminals Handling ransom demands (and whether it possible and/or desirable to pay) is one of the most critical aspects of managing a cyber attack. This involves considering the applicable, and evolving, sanctions position, among other risks. Last week, the UK and ...

New app store Code of Practice In December last year, the Department for Digital, Culture, Media and Sport (DCMS) published a new ‘first of its kind’ code of practice aimed at protecting app users. While the code is voluntary, the Government is expecting app store operators and app dev...

Organisations could face new security requirements under ‘cyber duty to protect’ plans? Government call for information suggests new security requirements could be introduced to protect online accounts and user data from hackers Last year saw a 159% increase in unauthorised access to personal information (including hacking) and an 89% rise i...

Is the NIS regime working? Changes proposed in new review This month, the Government published its second post-implementation review of the 2018 Network and Information Systems (‘NIS’) Regulations. The NIS regime is designed to help protect the UK, and in particular certain essential services (hospitals, energy,...