We will continue to see lots of change in the Data, AI and Cyber sphere over 2026. The Data (Use and Access) Act 2025 will be fully brought into force this year, which in particular could result in organisations seeing an increase in data protection complaints, as well as higher penalties for direct marketing and cookies breaches. The new Cyber Security and Resilience (Network and Information Systems) Bill introduced in Parliament at the end of last year will also be debated and likely passed. This will expand the scope of the existing Network and Information Systems Regulations 2018 and introduce stricter incident reporting obligations for those organisations in-scope (including key suppliers). And these are just a few examples.
Click below to watch a recording of our recent webinar where our data & cyber experts, David Goodbrand, Jo Mclean, Rebecca Roberts and Chloe O'Hara, discuss the upcoming changes and what to do to make sure you’re prepared.
Written by
Related News, Insights & Events
Error.
No results.
Getting your data ducks in a row: putting the Data (Use and Access) Act 2025 into practice for pension schemes
09/06/2026
In this blog, we consider how The Data (Use and Access) Act 2025 (the “DUAA”) raises the bar for how pension trustees’ role as data controllers must be performed.
Webinar recordings: Data Privacy & Cyber Webinar Series 2026
05/06/2026
Our annual Data Privacy and Cyber webinar series is designed to help organisations navigate the evolving data privacy and cyber security landscape with confidence.
Is the definition of “personal data” having an identity crisis?
26/02/2026
The definition of “personal data” has been subject to recent scrutiny in both the EU and the UK. In this article, we explore some of the recent case law and commentary in both the UK and the EU.
{name}
{properties.pageSummary}
{properties.headline}
{properties.pageDate|date:dd/MM/yyyy}
{properties.shortDescription}