Insights for the United Kingdom, including the Crown Dependencies.
The Bill returns to the Commons after third reading in the Lords on 2 November, carrying report-stage amendments and new powers to address agentic AI risks.
A second wave of attacks on internet-connected refrigeration controllers forced stores across Europe to throw away food, and the NCSC warned UK organisations at risk.
The UK surveillance watchdog says GCHQ cannot account for thousands of USB sticks, hard drives, and other portable storage devices.
Peers defeated the government twice, adding a 12-month review of the NIS scheme and a register of hostile state cyber actors to the Bill ahead of third reading.
A UK government White Paper proposes replacing the Submarine Telegraph Act 1885 with new offences of up to 14 years for damaging subsea cables, plus security duties for operators.
The UK AI Security Institute has identified eight areas where frontier AI developers most need common technical practices, including agentic AI incident reporting and independent auditing.
The UK regulator says ten AI developers have changed how they handle personal data, and opens a call for evidence on the data protection risks of AI agents.
The Information Commissioner’s Office is replaced by a board-led Information Commission under the Data (Use and Access) Act 2025.
Ofcom expects online platforms serving UK users to use hash matching, or equally effective measures, to stop illegal intimate images and deepfakes being shared from 30 September 2026.
TikTok has withdrawn its appeals against the ICO’s £12.7m children’s privacy fine and an information notice, clearing the way for the ICO’s recommender systems investigation.
The Joint Committee on Human Rights has called for dedicated AI legislation, a new AI regulator, and transparency when AI affects significant decisions.
Section 250 of the Crime and Policing Act 2026 extends corporate criminal liability to any offence committed by a senior manager.