Insights for the United Kingdom, including the Crown Dependencies.
The UK AI Security Institute has identified eight areas where frontier AI developers most need common technical practices, including agentic AI incident reporting and independent auditing.
The UK regulator says ten AI developers have changed how they handle personal data, and opens a call for evidence on the data protection risks of AI agents.
The Information Commissioner’s Office is replaced by a board-led Information Commission under the Data (Use and Access) Act 2025.
Ofcom expects online platforms serving UK users to use hash matching, or equally effective measures, to stop illegal intimate images and deepfakes being shared from 30 September 2026.
TikTok has withdrawn its appeals against the ICO’s £12.7m children’s privacy fine and an information notice, clearing the way for the ICO’s recommender systems investigation.
The Joint Committee on Human Rights has called for dedicated AI legislation, a new AI regulator, and transparency when AI affects significant decisions.
Section 250 of the Crime and Policing Act 2026 extends corporate criminal liability to any offence committed by a senior manager.
The Bill expanding the UK NIS regime has completed its Commons stages and moves to the House of Lords.
The Government will legislate for a statutory defence for legitimate security research under the Computer Misuse Act 1990.
Stricter Cyber Essentials requirements apply from today, with MFA failures and unpatched critical vulnerabilities now resulting in automatic failure.
Companies House takes its WebFiling service offline after a flaw let logged-in users view, and potentially change, other companies’ records.
The main UK GDPR, DPA 2018 and PECR changes made by the Data (Use and Access) Act 2025 take effect today.