Commercial analysis: Christian Toon, Head of Cyber Professional Services and Regina Bluman, Cybersecurity adviser of Pinsent Masons consider the challenges manufacturers of small products in the UK may face once the Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023, SI 2023/1007 (PSTI regulations 2023) come into effect in April 2024.

This Q&A considers the starting point for the time limit to notify the Information Commissioner’s Office (ICO) of a personal data breach under the General Data Protection Regulation (GDPR). This may be triggered by a cybersecurity breach or another type of personal data breach.

Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. Each week these highlights focus on developments in key topics such as data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. Each week these highlights focus on developments in key topics such as data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

On 7 September 2026, China’s Supreme People’s Court issued the Opinions on Lawfully Hearing artificial intelligence(AI)-related Dispute Cases, containing 24 provisions on the adjudication of AI-related disputes. The Opinions apply existing legislation, including the Civil Code, Cybersecurity Law, Copyright Law and Personal Information Protection Law and set out principles of protecting individuals’ rights, supporting innovation and safeguarding security.

Law360, London: The EU has taken a significant step forward in modernising its liability framework with the adoption of a new Product Liability Directive in October 2024, effective from 9 December 2026.

The European Parliament and the Council of the EU have reached a provisional deal on the Cyber Solidarity Act which aims to strengthen the EU’s solidarity and capacities to detect, prepare for and respond to cybersecurity threats and incidents. The new rules will establish EU capabilities to make Europe more resilient and reactive in front of cyber threats, while strengthening cooperation mechanisms. These objectives would be primarily achieved through a ‘cyber security alert system’ which is pan-European network of National Cyber Hubs and by establishing a Cyber Emergency Mechanism which will increase preparedness and enhance incident response capabilities in the EU, and a European Cybersecurity Incident Review Mechanism which will, among others, assess the effectiveness of the emergency mechanism. The Parliament and Council have also agreed on a targeted amendment to the Cybersecurity Act 2019 which aims to enhance EU’s cyber resilience by enabling the future adoption of European certification schemes for ‘managed security services’. Both texts will have to be endorsed by the Council of the EU and the European Parliament in view of their formal adoption.

This week's edition of EU Law weekly highlights includes analyses on the interplay between the EU AI Act and the EU General Data Protection Regulation, what legal teams need to know about AI standards, navigating the EU AI Act in 2025, and the impact of imminent European design reforms on companies’ future IP strategies. Further this week, the European Commission published its 2025–2030 Ecodesign Working Plan, launched a call for evidence on its proposed Industrial Decarbonisation Accelerator Act, adopted three Delegated Regulations under the European Green Bond Regulation, fined Apple €500m and Meta €200m for breaching EU Digital Markets Act obligations and closed its EU Digital Markets Act investigation into Apple's user choice obligations. Finally, this week’s highlights cover the publication of new guidelines on sharing cybersecurity information in the electricity sector and MedTech Europe’s warnings on the risks associated with medical import tariffs.

Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. Each week these highlights focus on developments in key topics such as data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. These highlights focus on key topics including data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. These highlights focus on key topics including data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

This Q&A considers the starting point for the time limit to notify the Information Commissioner’s Office (ICO) of a personal data breach under the General Data Protection Regulation (GDPR). This may be triggered by a cybersecurity breach or another type of personal data breach.