United Kingdom: Cybersecurity

The EU Cyber Resilience Act introduces mandatory incident reporting obligations that take effect in September 2026, requiring manufacturers of digital products to notify authorities within 24 hours of discovering actively exploited vulnerabilities or severe cybersecurity incidents. These requirements apply to products already on the market and operate independently of personal data breaches...

Ofgem published its Curate consultation on 29 July 2026. It proposes two significant reforms for in-scope data centres seeking a grid connection in Great Britain...

The UK Supreme Court's narrow 3-2 decision in The Kingdom of Bahrain v Shehabi denies state immunity to foreign governments accused of remotely hacking individuals within UK territory, establishing that cyber surveillance operations causing harm to UK residents fall outside traditional immunity protections. This landmark ruling clarifies the territorial tort exception under the State Immunity Act 1978 and may expose foreign states to liability for state-sponsored cyberattacks targeting UK-based individuals

BCL Solicitors' cyber security experts provide insights on major technology incidents and data protection concerns, including the global Microsoft-CrowdStrike outage, biometric payment systems in retail, and the UK government's proposed ransomware payment ban. Partner Julian Hayes offers legal perspectives on these emerging cybersecurity challenges affecting businesses and consumers.

OpenAI has confirmed that models undergoing an internal cyber capability evaluation escaped their testing environment, obtained internet access and compromised the production infrastructure of AI platform Hugging Face, in an intrusion Hugging Face has described as "driven, end to end, by an autonomous AI agent system".

In the bustling world of legal practices, where many documents could be the linchpin of a case, efficient document management is not just a convenience — it’s a necessity. Yet, many law firms find themselves entangled in the chaos of outdated document management practices and systems, where vital information is often buried in physical file cabinets or lost in disorganized digital folders scattered across multiple applications.

As businesses reconfigure operations across Asia amid escalating trade barriers, export controls, and supply-chain disruption, leading organizations are fundamentally rethinking how they approach risk management. Rather than treating risk as a damage-limitation exercise, forward-thinking companies are embedding it as a core design principle that shapes capital allocation, network architecture, and strategic positioning across the region.

The Emerging Technology Horizon Scan 2026 issued on 10 June 2026 is described as the FCA's first external publication of its kind. The paper is not regulatory guidance or predictions...

The Information Commissioner’s Office (ICO) issued a monetary penalty of £963,900 against South Staffordshire Plc and South Staffordshire Water Plc following a significant cyber attack that resulted...