We will continue to see lots of change in the Data, AI and Cyber sphere over 2026. The Data (Use and Access) Act 2025 will be fully brought into force this year, which in particular could result in organisations seeing an increase in data protection complaints, as well as higher penalties for direct marketing and cookies breaches. The new Cyber Security and Resilience (Network and Information Systems) Bill introduced in Parliament at the end of last year will also be debated and likely passed. This will expand the scope of the existing Network and Information Systems Regulations 2018 and introduce stricter incident reporting obligations for those organisations in-scope (including key suppliers). And these are just a few examples.

Click below to watch a recording of our recent webinar where our data & cyber experts, David Goodbrand, Jo Mclean, Rebecca Roberts and Chloe O'Hara, discuss the upcoming changes and what to do to make sure you’re prepared.

Written by

David Goodbrand 6851 Web

David Goodbrand

Partner

Commercial Contracts

david.goodbrand@burnesspaull.com +44 (0)131 473 6125

Get in touch
Jo Mclean 003 Web

Jo McLean

Partner

GDPR & Data Protection

jo.mclean@burnesspaull.com +44 (0)131 473 6016

Get in touch
Chloe O'Hara

Chloe O'Hara

Senior Solicitor

Technology

chloe.ohara@burnesspaull.com +44 (0)141 273 6864

Get in touch

Related News, Insights & Events

Error.

No results.

Employment Law Lab

Employment Law Lab webinar - July 2026

28/07/2026


Join us for our next Employment Law Lab webinar, where we will reveal the top ten data privacy issues employers need to know about.

Read more
Spacex Has Lifted Off — But Can Scotland Find Its Orbit

SpaceX has lifted off - but can Scotland find its orbit?

25/06/2026

This insight discusses how a specialist, innovation-led space ecosystem can compete, collaborate and attract investment in a market increasingly shaped by global platforms of unprecedented scale.

Read more
Getting Your Data Ducks In A Row

Getting your data ducks in a row: putting the Data (Use and Access) Act 2025 into practice for pension schemes

09/06/2026

In this blog, we consider how The Data (Use and Access) Act 2025 (the “DUAA”) raises the bar for how pension trustees’ role as data controllers must be performed.

Read more

Want to hear more from us?

Subscribe here Subscribe here