Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. These highlights focus on key topics including data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

The US Department of the Treasury's Office of Foreign Asset Control (OFAC) has designated cybersecurity experts who are affiliated with the Islamic State of Iraq and Syria (ISIS). This follows the cybersecurity experts providing ISIS leadership and supporters with training in cybersecurity, enabling virtual currency use and supporting their recruitment. The OFAC have also designated a financial facilitator of ISIS who transferred funds to ISIS-affiliated individuals in Syria. This action means that the property, interests and entities of the designated individuals 'that are in the US or in possession or control of US or control of US persons will be blocked and reported to OFAC'.

The European Union Agency for Cybersecurity (ENISA) has published version 2.0 of its national capabilities assessment framework (NCAF), designed to support EU Member States in assessing the maturity of their national cybersecurity strategies (NCSSs) in line with the evolving threat landscape and EU legislation, including the EU Network and Information Security Directive 2 (NIS2). The framework enables Member States to carry out a voluntary self-assessment of cybersecurity capabilities at both the strategic and operational levels, using a five-level maturity model ranging from foundation to advanced, across 20 strategic objectives grouped into capacity-building and awareness, cooperation and collaboration, cybersecurity governance, and regulatory and policy frameworks. The framework sets out a structured methodology, including indicators and a scoring mechanism based on maturity levels and coverage ratios, to help identify gaps, support capability building and track progress over time. It is intended to support long-term strategic planning, preparation for NIS2 peer reviews and transparency.

Unfortunately, we do not have a single document comprising modern slavery, data protection, anti-bribery and sanctions, however, we refer you to the following Precedents which may be of interest: • Modern slavery—contract clauses • Modern slavery—supplier questionnaire • Information and cybersecurity—supplier questionnaire • Anti-bribery clause • Financial crime prevention compliance—due diligence questionnaire for agent/intermediary Also see: • for a broadly

This Practice Note provides an overview of the key Irish legal and regulatory requirements that a website operator should take into account when operating a website, including: • The type and functionality of the website • Information disclosure requirements • Consumer protection • Privacy and data protection • Cookies • Accessibility • Cybersecurity • Platform-to-business • Online payments • Advertising, promotions and direct marketing • Competition law • Taxation • Liability for third party content • Intellectual property and respecting copyright • Geographic and territorial considerations Consideration of electronic data interchange (EDI) arrangements, blockchain, smart contracts or sector-specific laws or regulations, including those applicable to financial services, intermediation services or online auctions, is beyond the scope of this Practice Note. The type and functionality of the website The compliance requirements and applicable rules and regulations for a website will depend on its nature, functionality or purpose. Identifying these factors will be the key first step for the operator to determine its legal and compliance obligations in Ireland. For example, will the website be an ‘information

The European Union Agency for Cybersecurity (ENISA) has launched a public consultation on a draft candidate EU Digital (EUDI) Wallet certification scheme. The consultation seeks to validate the key principles and overall structure of the proposed scheme, while gathering feedback on its elements and annexes. This initiative follows a request from the European Commission for ENISA to support the certification of EUDI Wallets, including the development of a candidate European cybersecurity certification scheme under Regulation (EU) 2019/881, the EU Cybersecurity Act. ENISA has signed a €1.6 million contribution agreement with the Commission for a two-year period to support the development, roll-out and implementation of national certification schemes. Member States are required to provide at least one certified EUDI Wallet by the end of 2026. ENISA will facilitate this by developing national schemes, strengthening knowledge, capacity and promoting alignment with the European cybersecurity certification scheme. The consultation closes on 30 April 2026.

Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. Each week these highlights focus on developments in key topics such as data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

This week’s edition of Information Law weekly highlights includes a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. Each week these highlights focus on developments in key topics such as data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

Law360, London: UK organizations that sponsor overseas workers have been targeted by fraudsters posing as the Home Office and using a sophisticated phishing scam to steal sensitive data, according to cybersecurity company Mimecast.

Law firms are increasingly falling prey to scams that either take money from the firm’s client account or trick staff into transferring money into a fraudulent account. The following cyber threats are involved with this type of scam: • malware • voice phishing (vishing) and traditional phishing • bogus firms Malware A firm’s online system may be accessed through malicious software (commonly known as malware) being downloaded from unsolicited emails. Spam, which consists of unsolicited bulk emails, is frequently used to spread malware; see Practice Note: A–Z of law firm cyber threats. Having accessed a firm’s online system, it may be possible for cybercriminals to intercept emails between firms and replace them with their own, in an attempt to access the client account or divert payments into their own account. To avoid the risks arising from malware, the SRA recommends you: • ensure your firm has up-to-date malware protection • adopt systems that eliminate the need for data sticks and minimise the need for email attachments;

UK Research and Innovation (UKRI) has announced the launch of the Cyber Security Research and Networking Environment NetworkPlus, led by the University of Oxford. This initiative, backed by a £6m investment from the Engineering and Physical Sciences Research Council, aims to bolster the UK's cybersecurity capabilities across various sectors, including manufacturing, healthcare, and law enforcement. The network will focus on how to achieve security by design and default, foster collaboration between academia and industry, and establish the first learned society for cybersecurity research.

This week's edition of Life Sciences weekly highlights includes analysis of the EU Cybersecurity Package 2026 by Hogan Lovells International LLP and analysis by Lexis+ that discusses key developments in the field of Information Law in England & Wales and at supranational EU level in 2025 and looks ahead to what is coming up in 2026. Also included is news that the Department for Science, Innovation and Technology (DSIT) has announced a package of UK–Japan science and technology collaborations, the Health Research Authority (HRA) has announced plans to introduce changes for non-clinical trials of investigational medicinal products (CTIMPs) studies to align with the new clinical trials regulations, the Secretary of State launched the National Cancer Plan for England with a strong emphasis on digital, data and innovation, alongside a House of Lords report calling for stronger leadership on medicines supply security, the European Commission has published two new Implementing Decisions updating the references of harmonised standards under the EU medical devices framework, as well as news that the Prescription Medicines Code of Practice Authority (PMCPA) has updated its guidance on pharmaceutical companies’ use of social media, among other stories.