UK NIS Regulations 2018 come into force
10 May 2018
The Network and Information Systems Regulations 2018, implementing the EU NIS Directive, are now in force in the UK.
Insights for the United Kingdom, including the Crown Dependencies.
The Network and Information Systems Regulations 2018, implementing the EU NIS Directive, are now in force in the UK.
The NCSC has published the Cyber Assessment Framework, the basis for assessing operators of essential services under the UK NIS Regulations.
Reports revealed that data on tens of millions of Facebook users had been collected through a quiz app and used for political targeting.
The Payment Services Regulations 2017, implementing PSD2 in the UK, now apply, with new security and incident reporting obligations.
Corporate offences under Part 3 of the Criminal Finances Act 2017 come into force.
Credit agency Equifax disclosed a breach that exposed personal data of around 143 million Americans and millions in the UK and Canada.
Attackers tried to break into MPs’ and staff email accounts, compromising a small number with weak passwords.
The WannaCry ransomware worm infected computers in around 150 countries and caused widespread disruption across the NHS.
The Investigatory Powers Act 2016 becomes law, overhauling UK interception, communications data and equipment interference powers.
Tesco Bank froze online debit transactions after attackers stole money from thousands of current accounts in a weekend attack.
The ICO fined TalkTalk a record £400,000 for security failings that let attackers access data on almost 157,000 customers.
The EU General Data Protection Regulation has entered into force and will apply from 25 May 2018.