UK product security regime for connected products takes effect
29 Apr 2024
The PSTI Act product security requirements now apply to consumer connectable (IoT) products sold in the UK.
Insights for the United Kingdom, including the Crown Dependencies.
The PSTI Act product security requirements now apply to consumer connectable (IoT) products sold in the UK.
Amendments to the Investigatory Powers Act 2016 introduce notification notices and update bulk data and communications data powers.
CAF v3.2 refreshes guidance on remote access, privileged operations, user access and system monitoring.
TPR’s new General Code of Practice, including expectations on cyber controls, is now in force.
UK organisations can no longer rely on the pre-2021 EU Standard Contractual Clauses for restricted transfers.
The UK’s National Crime Agency leads Operation Cronos, seizing LockBit’s infrastructure and leak site and turning it against the gang.
The UK hosted the first global AI Safety Summit at Bletchley Park, where 28 countries and the EU signed a declaration on frontier AI risks.
Two major UK Acts receive Royal Assent: the Online Safety Act 2023 and the Economic Crime and Corporate Transparency Act 2023.
UK organisations can now transfer personal data to US organisations certified under the UK Extension to the EU–US Data Privacy Framework.
The UK Electoral Commission disclosed that hostile actors had access to its systems for over a year, including registers with data on around 40 million voters.
The National Security Act 2023 replaces the Official Secrets Acts 1911–1939 and creates new offences relating to foreign powers, including sabotage of electronic systems.
A zero-day in Progress Software’s MOVEit Transfer let the Clop gang steal data from thousands of organisations, including BBC, BA, and Boots.