We will continue to see lots of change in the Data, AI and Cyber sphere over 2026. The Data (Use and Access) Act 2025 will be fully brought into force this year, which in particular could result in organisations seeing an increase in data protection complaints, as well as higher penalties for direct marketing and cookies breaches. The new Cyber Security and Resilience (Network and Information Systems) Bill introduced in Parliament at the end of last year will also be debated and likely passed. This will expand the scope of the existing Network and Information Systems Regulations 2018 and introduce stricter incident reporting obligations for those organisations in-scope (including key suppliers). And these are just a few examples.

Click below to watch a recording of our recent webinar where our data & cyber experts, David Goodbrand, Jo Mclean, Rebecca Roberts and Chloe O'Hara, discuss the upcoming changes and what to do to make sure you’re prepared.

Written by

David Goodbrand 6851 Web

David Goodbrand

Partner

Commercial Contracts

david.goodbrand@burnesspaull.com +44 (0)131 473 6125

Get in touch
Jo Mclean 003 Web

Jo McLean

Partner

GDPR & Data Protection

jo.mclean@burnesspaull.com +44 (0)131 473 6016

Get in touch
Chloe O'Hara

Chloe O'Hara

Senior Solicitor

Technology

chloe.ohara@burnesspaull.com +44 (0)141 273 6864

Get in touch

Related News, Insights & Events

Error.

No results.

Website Data And Risk 2026 (1)

Data & cyber conference: Risk Meets Reality

20/10/2026 - Everyman Cinema, St James Quarter, Edinburgh, EH1 3AD


Join us for our next data & cyber conference where we’ll set out the current legal and regulatory landscape and then provide you with some practical solutions and advice to be prepared.

Read more
Why Technology Lawyers Should Care About A Scottish Landlord And Tenant Dispute

Why technology lawyers should care about a Scottish landlord and tenant dispute

24/09/2026

Last week, the UK Supreme Court handed down its decision in a long-running dispute concerning one of Glasgow's most well-known restaurants.

Read more
Cyber Security Blog

Legal privilege should be part of every cyber incident response plan

18/09/2026

This blog discusses how legal privilege helps organisations obtain legal advice, manage cyber incidents and respond to potential regulatory scrutiny or claims.

Read more

Want to hear more from us?

Subscribe here Subscribe here