UK operational resilience deadline arrives
31 Mar 2025
UK financial firms must now be able to remain within impact tolerances for their important business services.
Insights for the United Kingdom, including the Crown Dependencies.
UK financial firms must now be able to remain within impact tolerances for their important business services.
The new UK public procurement regime is live, and Cyber Essentials requirements continue under PPN 014.
A new voluntary code sets baseline security principles across the AI lifecycle.
The Bank of England, PRA and FCA’s regime for critical third parties to the financial sector is now in force.
The first legally binding international AI treaty opens for signature, with the UK, EU and US among the first signatories.
A cyber attack on Transport for London disrupts online services for months and exposes data including around 5,000 customers’ bank details.
A ransomware attack on pathology provider Synnovis forces south-east London NHS trusts to postpone thousands of appointments and operations.
The PSTI Act product security requirements now apply to consumer connectable (IoT) products sold in the UK.
Amendments to the Investigatory Powers Act 2016 introduce notification notices and update bulk data and communications data powers.
CAF v3.2 refreshes guidance on remote access, privileged operations, user access and system monitoring.
TPR’s new General Code of Practice, including expectations on cyber controls, is now in force.
UK organisations can no longer rely on the pre-2021 EU Standard Contractual Clauses for restricted transfers.