News & Analysis as of

Data Breach Data Security United Kingdom

Alston & Bird

UK’s Data Protection Regulator Fines a UK SaaS Provider ~$4 Million Following a Ransomware Incident

Alston & Bird on

On March 26, 2025, the UK data protection regulator (the Information Commissioner’s Office (“ICO”)) fined Advanced Computer Software Group Ltd (“Advanced”) £3.07 million (approximately $4 million). In 2022, Advanced suffered...more

Morgan Lewis - Tech & Sourcing

UK Government Proposes Targeted Ban on Ransomware Payments

On January 14, the UK government published a consultation on new measures to tackle the increasing threat of ransomware attacks. Ransomware is malicious software (malware) that infects a victim’s computer system and prevents...more

Sheppard Mullin Richter & Hampton LLP

Sheppard Mullin’s 2024 Eye on Privacy Year in Review

It is hard to believe that another year is upon us! As we have done in years past (including 2023, 2022, 2021, 2020, 2019 and 2018), we have created a comprehensive resource of all our www.eyeonprivacy.com posts from 2024. As...more

Eversheds Sutherland (US) LLP

Updata: Your quarterly privacy & cybersecurity update - July - September 2023

Welcome to the latest edition of Updata – the international update from Eversheds Sutherland’s dedicated Privacy and Cybersecurity team. Updata provides you with a compilation of privacy and cybersecurity regulatory and...more

Morgan Lewis - Tech & Sourcing

UK Government Publishes Cybersecurity Breach Survey

As cybersecurity breaches remain a common threat globally, the UK government has published a cybersecurity breach survey detailing various cybersecurity policies, processes, and reliances for all types of business....more

Sheppard Mullin Richter & Hampton LLP

UK App Code Provides Privacy and Security Compliance Direction

The UK’s new Code of Practice for App Store Operators and App Developers provides companies with privacy-related resources. It also highlights ICO privacy expectations. Participating in the code is done by voluntarily...more

Walkers

Data Protection in the British Virgin Islands

Walkers on

The British Virgin Islands ("BVI") Data Protection Act, 2021 ("DPA") came into force on 9 July 2021. It was introduced so the BVI would have a data protection framework which is broadly similar to EU and UK standards. To...more

Dechert LLP

Dechert Cyber Bits - Issue 21

Dechert LLP on

US Federal Appellate Court Issues Opinion on Proof of Injury in Data Breach Cases - On September 2, 2022, the U.S. Court of Appeals for the Third Circuit reinstated a class action lawsuit that had previously been dismissed...more

White & Case LLP

Cyber security breaches: how would you answer the crucial question?

White & Case LLP on

The crucial question that a company and its board will face if it suffers a cyber security breach is: "Had you taken reasonable steps to try to prevent a breach, and to prepare to handle any breach that occurred?" If the...more

Morgan Lewis - Tech & Sourcing

UK Government to Introduce New Rules to Protect Telecoms Networks Against Cyberthreats

The Department for Digital, Culture, Media & Sports (DCMS) confirmed on August 30, 2022, that it will push forward with tough new regulations and a code of practice to bolster the security and resilience of the United...more

Sheppard Mullin Richter & Hampton LLP

UK ICO and NCSC Issues Caution About Making Ransomware Payments

In a recent letter to the UK law society, the UK Information Commissioner’s Office and the National Cyber Security Centre have provided lawyers with advice about ransomware payments...more

A&O Shearman

Beyond Lloyd v Google: Are class actions for data breach dead?

A&O Shearman on

The decision of the UK Supreme Court in Lloyd v Google is a welcome relief for data controllers. However, is it the end of class actions for data breach?...more

A&O Shearman

Lloyd v Google a sigh of relief for data controllers

A&O Shearman on

In unanimously refusing to allow a representative action to proceed, the UK Supreme Court may have sounded the death knell for opt-out class actions in England for data breaches: Lloyd v Google [2021] UKSC 50....more

Dechert LLP

Dechert Cyber Bits - Issue 1

Dechert LLP on

We are delighted to introduce Dechert Cyber Bits, brought to you by members of our top-ranked, global Privacy & Cybersecurity practice. Cyber Bits is a bi-weekly publication that will provide a short summary of key...more

Faegre Drinker Biddle & Reath LLP

Significant Changes Proposed to UK GDPR

On September 10, the U.K. government launched a consultation “Data: A New Direction” (Consultation), which proposes significant changes to the U.K.’s data protection framework. The U.K. government has signalled its...more

A&O Shearman

Threat of follow-on civil claims against companies suffering cyberattack dampened by recent court judgment

A&O Shearman on

Cyber incidents have a serious regulatory and reputational impact, and increasingly form the subject of follow-on civil litigation. Such civil claims may be less financially attractive for claimants as a result of this case,...more

BakerHostetler

International Data Protection Update – First Quarter 2021

BakerHostetler on

This quarterly update highlights some of the international data protection issues that have caught our attention, and the attention of our clients, in the past three months....more

Katten Muchin Rosenman LLP

Data Protection Representatives and NIS Representatives

The end of the Brexit transition period is now upon us. Whilst the EU General Data Protection Regulation (EU GDPR) is retained in domestic law with minimal amendment, the so-called 'UK GDPR' has some key changes that...more

BCLP

The Data & Brexit Digest – Drafting tips for contracts and policies

BCLP on

With the UK now unambiguously out of the EU, the EU General Data Protection Regulation (2016/679) (“EU GDPR”) has been replaced by the United Kingdom General Data Protection Regulation (“UK GDPR”). In this third instalment of...more

Orrick, Herrington & Sutcliffe LLP

Marriott Secures 80% Reduction in ICO Fine, but Here’s What You Missed…

Hot on the heels of the £20 million fine issued to British Airways, the Information Commissioner’s Office (“ICO“) has issued Marriott International Inc. (“Marriott“) with a long-awaited penalty notice for its failure to...more

A&O Shearman

What Might The BA And Marriott Fines Tell Us About The ICO’s Approach To Penalties?

A&O Shearman on

Few will have been surprised that, when the ICO eventually published details of the BA and Marriott fines, the final penalties were very much lower than the £183+ million and £99+ million proposed in the original notices of...more

Faegre Drinker Biddle & Reath LLP

Marriott Cyberattack Fine Reduced as ICO Shifts Penalty Policy

On 30 October 2020, the UK’s data privacy regulator, the Information Commissioner’s Office (ICO) issued a final penalty notice (Penalty Notice) to fine the hotel chain Marriott International, Inc. (Marriott) for a GDPR data...more

Morgan Lewis - Tech & Sourcing

ICO GDPR Fines Reduced to £20m and £18.4m to Reflect British Airways and Marriott Mitigating Factors

The UK Information Commissioner’s Office (ICO) has recently handed down two of the largest fines relating to a data breach in UK history. In August 2018, British Airways (BA) was subject to a cyberattack which breached the...more

Bennett Jones LLP

Data Breach and Vicarious Liability for Employee Misconduct

Bennett Jones LLP on

It is not only hackers who pose a risk to an organization's information security; hostile insiders do as well. According to Verizon, an estimated 34 percent of data breaches involve internal actors. Hostile insiders may be...more

Thomas Fox - Compliance Evangelist

Life With GDPR: Episode 41-Morrisons at the UK Supreme Court

In this episode I visit with Jonathan Armstrong are back to discuss issues relating to data privacy, data protection and GDPR. Today, we consider the recent decision by the UK Supreme Court on the Morrisons case.  ...more

54 Results
 / 
View per page
Page: of 3

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide