Data (Use and Access) Act 2025 receives Royal Assent
19 Jun 2025
The DUAA 2025 amends the UK GDPR, DPA 2018 and PECR, with changes commencing in stages.
Insights for the United Kingdom, including the Crown Dependencies.
The DUAA 2025 amends the UK GDPR, DPA 2018 and PECR, with changes commencing in stages.
A new UK code sets baseline security expectations for software vendors.
Updated Cyber Essentials requirements and the new Willow question set apply to assessments from today.
A cyber attack on Marks & Spencer, followed by attacks on Co-op and Harrods, leads to weeks of disruption and four arrests by the NCA.
The UK Government has published a Cyber Governance Code of Practice setting out what boards and directors should do to govern cyber risk.
UK financial firms must now be able to remain within impact tolerances for their important business services.
The new UK public procurement regime is live, and Cyber Essentials requirements continue under PPN 014.
A new voluntary code sets baseline security principles across the AI lifecycle.
The Bank of England, PRA and FCA’s regime for critical third parties to the financial sector is now in force.
The first legally binding international AI treaty opens for signature, with the UK, EU and US among the first signatories.
A cyber attack on Transport for London disrupts online services for months and exposes data including around 5,000 customers’ bank details.
A ransomware attack on pathology provider Synnovis forces south-east London NHS trusts to postpone thousands of appointments and operations.