9/14/2026 5:57:37 PM The Data (Use and Access) Act 2025: transition from the Information Commissioner to the Information Commission By Beverley Flynn The UK government's programme of implementing the Data (Use and Access) Act 2025 (DUAA) continues with the making of the Data (Use and...
9/14/2026 9:47:12 AM The Vulnerability Was Real; The Exploit Was Impossible; The EU Cyber Resilience Act Reporting Obligation Was … Unclear? By Edward Machin Beginning last Friday (11 September 2026), manufacturers of products with digital elements that are made available on the European Union...
9/10/2026 1:46:07 PM Selling products with digital elements in the EU? New cyber incident reporting obligations arrive on 11 September 2026 By Angelica Lovell The Cyber Resilience Act (Regulation (EU) 2024/2847, the CRA) enters its next implementation phase on 11 September 2026. From that date,...
9/7/2026 1:16:39 PM S&B Activate Conference 2026 - Enabling growth in a changing world By James Waddell Darren Cleveland Join us for our annual S&B Activate Conference on 10 November, bringing together senior in-house lawyers for a day of forward-looking...
9/3/2026 10:54:37 AM Don’t Take The Bait: The New Phishing Threats To Asset Managers By Edward Machin In recent months, a number of prominent hedge funds and asset managers have become targets of coordinated intrusion campaigns that looked...
9/1/2026 12:30:09 PM The rise of the complex DSAR: what to do when AI enters the picture By Selina Clifford Data subject access requests (DSARs) have long been a fact of life for any business handling personal data. Over the last year, however,...
8/24/2026 11:43:40 AM Forget a Ban: The Meta Glasses Privacy Row Is About Use, Not the Device By Nick Phillips I was recently interviewed by Chiara Castro of TechRadar for a piece on the growing UK backlash against Meta's Ray-Ban smart glasses...
8/17/2026 9:36:14 AM EU AI Act: The need for transparency - why UK businesses cannot ignore Article 50 By Nick Phillips Selina Clifford Here's a date you may have missed amid the summer holidays: 2 August 2026. That's when Article 50 of the EU AI Act took effect. Forget...
8/7/2026 6:12:37 PM CalPrivacy’s First Sectoral Audit: What to Know and How to Prepare By Megan Kayo Christine Chong Jackson Myers Alexandra Walsh +1 more... Show less The California Privacy Protection Agency (CalPrivacy) recently announced its first formal sectoral audit, targeting privacy compliance...
8/3/2026 11:42:13 AM You Talkin' To Me? Operationalising The EU AI Act's Transparency Obligations By Edward Machin Compliance conversations around the European Union’s AI Act have been dominated by its high-risk regime, which was set to take effect...
8/3/2026 8:20:09 AM Has your data protection complaints process landed yet? By Nick Phillips Selina Clifford If the answer is "not sure", you are not alone. On 19 June 2026, a quietly significant change to UK data protection law came into force...
7/30/2026 3:46:54 PM Housing Ombudsman publishes revised Scheme and STAIRs consultation outcome By Hetal Ruparelia Georgia Maskell The Housing Ombudsman has published its response to the consultation on its role in handling complaints under the new Social Tenant...
7/23/2026 3:36:37 PM If You’re Everywhere, Can You Be Sued Anywhere? A Circuit Split on Online Jurisdiction By David Livshiz Peter Linken Marcus Levy Daniella Apodaca +1 more... Show less Companies operating websites and deploying virtual tracking technologies may ask: when a company markets to customers nationwide, can it...
7/22/2026 10:33:09 AM Old Policies for New Technology: Is Your AI Insurable? By Edward Machin Businesses are deploying generative AI tools, large language models (“LLMs”) and, increasingly, “agentic” systems across customer...
7/20/2026 7:42:07 PM New Jersey’s New Data Privacy Rules: What Organizations Need to Know By Megan Kayo Christine Chong What’s Happened? If your organization buys, sells, or licenses consumers’ personal data, new rules in New Jersey may require you to...
7/15/2026 12:28:08 PM Lessons From The European Supervisory Authorities’ First DORA Major Incident Report By Edward Machin On 3 June 2026, the European Supervisory Authorities — the European Banking Authority, the European Insurance and Occupational Pensions...