The ICO becomes the Information Commission
30 Sep 2026
The Information Commissioner’s Office is replaced by a board-led Information Commission under the Data (Use and Access) Act 2025.
UK
Insights for the United Kingdom, including the Crown Dependencies.
Parliamentary committee calls for a UK AI Bill and regulator
14 Sep 2026
The Joint Committee on Human Rights has called for dedicated AI legislation, a new AI regulator, and transparency when AI affects significant decisions.
New rule makes organisations liable for senior managers’ offences
29 Jun 2026
Section 250 of the Crime and Policing Act 2026 extends corporate criminal liability to any offence committed by a senior manager.
Cyber Security and Resilience Bill passes the House of Commons
16 Jun 2026
The Bill expanding the UK NIS regime has completed its Commons stages and moves to the House of Lords.
Computer Misuse Act reform announced in the King’s Speech
13 May 2026
The Government will legislate for a statutory defence for legitimate security research under the Computer Misuse Act 1990.
Cyber Essentials update: the Danzell question set
27 Apr 2026
Stricter Cyber Essentials requirements apply from today, with MFA failures and unpatched critical vulnerabilities now resulting in automatic failure.
Companies House shuts WebFiling after flaw exposes directors’ details
13 Mar 2026
Companies House takes its WebFiling service offline after a flaw let logged-in users view, and potentially change, other companies’ records.
Data (Use and Access) Act: main data protection changes commence
5 Feb 2026
The main UK GDPR, DPA 2018 and PECR changes made by the Data (Use and Access) Act 2025 take effect today.
Ofcom investigates X over Grok-generated sexualised images
12 Jan 2026
Ofcom opens a formal Online Safety Act investigation into X after its Grok AI tool was used to create sexualised images of real people, including children.
EU renews UK adequacy decisions until 2031
19 Dec 2025
The European Commission has renewed its adequacy decisions for the UK, so personal data can continue to flow freely from the EU.
Cyber Security and Resilience Bill introduced to Parliament
12 Nov 2025
The UK Government has introduced legislation to modernise and expand the NIS Regulations.
Failure to prevent fraud offence comes into force
1 Sep 2025
The new corporate offence under the Economic Crime and Corporate Transparency Act 2023 applies to large organisations from today.