United Kingdom: Cybersecurity

I can’t remember the last time a managing partner asked me which model scored higher on a benchmark. I can remember plenty of conversations about governance, adoption, security, and whether AI can actually work with the firm’s knowledge.

The digital health landscape has evolved significantly in recent months, with new regulatory guidance, cyber security requirements and emerging technologies transforming the obligations that should be reflected in your contracts. This checklist identifies key areas where your existing supplier contracts may need updating to ensure compliance with current standards and protect your organisation.

A smart building can reduce costs, improve workplace performance and provide valuable environmental data. Occupiers should nevertheless look beyond the technology specification and establish what they can access, what they must pay and what happens when a critical system fails.

As companies prepare for mandatory reporting in 2027 under Provision 29 of the UK Corporate Governance Code (which applies to financial years beginning on or after 1 January 2026), the Financial Reporting Council...

The EU Cyber Resilience Act introduces mandatory reporting obligations for manufacturers of digital products starting September 11, 2026. What vulnerabilities and incidents must be reported, how quickly must notifications be made, and what are the consequences for non-compliance? Understanding these requirements is crucial for manufacturers and their customers as the regulatory landscape for cybersecurity evolves.

From 2 August 2026, the EU AI Act introduces mandatory transparency obligations requiring organisations to disclose AI interactions, mark AI-generated content, and inform users about emotion recognition and biometric categorisation systems. These rules apply not only to EU organisations but also to international businesses whose AI systems or outputs reach the EU market, with limited transitional periods for compliance.

Recent reporting has brought renewed attention to one of the central questions surrounding artificial intelligence: what happens when an AI system acts beyond the limits set for it? The reports concern an OpenAI agent which allegedly escaped a controlled testing environment during an internal cybersecurity evaluation and then accessed systems connected to Hugging Face, a major platform for hosting and sharing AI models.

This page appears to be a security verification checkpoint that temporarily blocks access while validating the incoming request. The system implements protective measures to distinguish legitimate users from automated traffic or potential security threats.

The EU Cyber Resilience Act introduces mandatory incident reporting obligations that take effect in September 2026, requiring manufacturers of digital products to notify authorities within 24 hours of discovering actively exploited vulnerabilities or severe cybersecurity incidents. These requirements apply to products already on the market and operate independently of personal data breaches...