We will continue to see lots of change in the Data, AI and Cyber sphere over 2026. The Data (Use and Access) Act 2025 will be fully brought into force this year, which in particular could result in organisations seeing an increase in data protection complaints, as well as higher penalties for direct marketing and cookies breaches. The new Cyber Security and Resilience (Network and Information Systems) Bill introduced in Parliament at the end of last year will also be debated and likely passed. This will expand the scope of the existing Network and Information Systems Regulations 2018 and introduce stricter incident reporting obligations for those organisations in-scope (including key suppliers). And these are just a few examples.

Click below to watch a recording of our recent webinar where our data & cyber experts, David Goodbrand, Jo Mclean, Rebecca Roberts and Chloe O'Hara, discuss the upcoming changes and what to do to make sure you’re prepared.

Written by

David Goodbrand 6851 Web

David Goodbrand

Partner

Commercial Contracts

david.goodbrand@burnesspaull.com +44 (0)131 473 6125

Get in touch
Jo Mclean 003 Web

Jo McLean

Partner

GDPR & Data Protection

jo.mclean@burnesspaull.com +44 (0)131 473 6016

Get in touch
Chloe O'Hara

Chloe O'Hara

Senior Solicitor

Technology

chloe.ohara@burnesspaull.com +44 (0)141 273 6864

Get in touch

Related News, Insights & Events

Error.

No results.

Getting Your Data Ducks In A Row

Getting your data ducks in a row: putting the Data (Use and Access) Act 2025 into practice for pension schemes

09/06/2026

In this blog, we consider how The Data (Use and Access) Act 2025 (the “DUAA”) raises the bar for how pension trustees’ role as data controllers must be performed.

Read more
Data Privacy And Cyber Yt

Webinar recordings: Data Privacy & Cyber Webinar Series 2026

05/06/2026

Our annual Data Privacy and Cyber webinar series is designed to help organisations navigate the evolving data privacy and cyber security landscape with confidence.

Read more
Is The Definition Of “Personal Data” Having An Identity Crisis

Is the definition of “personal data” having an identity crisis?

26/02/2026

The definition of “personal data” has been subject to recent scrutiny in both the EU and the UK.  In this article, we explore some of the recent case law and commentary in both the UK and the EU.

Read more

Want to hear more from us?

Subscribe here Subscribe here