Information security

Copyright © 2025 LexisNexis

Information security has become a business-critical issue. It is not something you can tackle in isolation, as there are obvious overlaps with cyber security and data protection.

Identifying what information you hold

There are a number of management tools you can use to identify what information you hold and are legally responsible for, such as an information audit.

An information audit is a process through which you:

  1. •

    identify and consider all of the information you hold (or are responsible for), and

  2. •

    consider how and why the information is processed

To undertake an effective audit, you need to consider each class of information you hold

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

Existing user? Sign-in TAKE A FREE TRIAL
Powered by Lexis+®
Latest Risk & Compliance News

UK strategic export control list updated with new penalties and revised goods schedules

The Export Control (Amendment) Regulations 2025, SI 2025/532 has amended the Export Control Order 2008, SI 2008/3231 and Council Regulation (EC) No 428/2009. The key changes include increasing fines for certain offences from £1,000 to £2,500, updating military goods and dual-use items lists to reflect technical updates from the Wassenaar Arrangement and other multilateral regimes and administrative amendments to control entries. These modifications ensure the UK's regulatory framework for strategic exports remains current with global export control standards. The regulations will take effect from 20 May 2025.

Risk & Compliance weekly highlights— 1 May 2025

This week's edition of Risk & Compliance weekly highlights includes: an analysis on what legal teams need to know about AI standards and the main identified challenges of EU AI Act-GDPR interplay, the latest sanctions news, approval of AML guidance for the legal sector by HMT and new guidance on corporate self-reporting and DPAs by the SFO.

Export Control Joint Unit announces Syria sanctions amendments and licence revocation

The Export Control Joint Unit has announced that amendments to Syria sanctions by the Foreign, Commonwealth and Development Office (FCDO) took effect from 25 April 2025. The changes include the removal of certain export prohibitions and the revocation of the general trade licence previously issued for earthquake relief efforts in Syria. The notice forms part of the ongoing notices to exporters collection addressing embargoes and sanctions.

Main challenges of EU AI Act-GDPR interplay identified by Member States

MLex: Potentially conflicting legal requirements, national governance approaches to ensure regulatory consistency, as well as clear legal advice to minimise the compliance burden, are the main issues seen by EU Member States in the interplay between the EU AI Act and the EU’s General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR). European governments have pointed out that the two laws' diverging regulatory approaches might lead to conflicting outcomes, which should be avoided with systematic cooperation between the responsible authorities.

View Risk & Compliance by content type :  
News
Practice notes
Precedents
Q&As

Popular documents

Information and security audit questionnaire for outsourcing service provider

Information and security audit questionnaire for outsourcing service providerPlease complete, sign and date this questionnaire. You should then return the completed questionnaire to [insert details of relevant person within customer organisation] at [insert address].Name of [prospective] outsourcing

Micklefield clauses

Micklefield clausesWhat is a Micklefield clause?It is common for employee share plans to provide that, on termination of employment (or when an employee is given or receives notice of termination of employment), subsisting share awards will be forfeited and subsisting share options will lapse.It is

What is the difference between an appeal and a review?

What is the difference between an appeal and a review?What is an appeal?An appeal in insolvency proceedings is no different to an appeal in normal litigation. An appeal will be allowed only if the appeal court is satisfied that the decision of the lower court was 'wrong' or 'unjust because of a

Financial clean break orders in family proceedings

Financial clean break orders in family proceedingsDuty of the court to consider a clean breakAlthough there is no presumption in favour of there being a financial clean break between parties on divorce, the court is under a duty to consider whether it would be appropriate to exercise its powers so
Information and security audit questionnaire for outsourcing service provider

Information and security audit questionnaire for outsourcing service provider

Information and security audit questionnaire for outsourcing service providerPlease complete, sign and date this questionnaire. You should then return the completed questionnaire to [insert details of relevant person within customer organisation] at [insert address].Name of [prospective] outsourcing

Micklefield clauses

Micklefield clauses

Micklefield clausesWhat is a Micklefield clause?It is common for employee share plans to provide that, on termination of employment (or when an employee is given or receives notice of termination of employment), subsisting share awards will be forfeited and subsisting share options will lapse.It is

What is the difference between an appeal and a review?

What is the difference between an appeal and a review?

What is the difference between an appeal and a review?What is an appeal?An appeal in insolvency proceedings is no different to an appeal in normal litigation. An appeal will be allowed only if the appeal court is satisfied that the decision of the lower court was 'wrong' or 'unjust because of a

Financial clean break orders in family proceedings

Financial clean break orders in family proceedings

Financial clean break orders in family proceedingsDuty of the court to consider a clean breakAlthough there is no presumption in favour of there being a financial clean break between parties on divorce, the court is under a duty to consider whether it would be appropriate to exercise its powers so