Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. Each week these highlights focus on developments in key topics such as data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. These highlights focus on key topics including data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. These highlights focus on key topics including data protection, ePrivacy, and cybersecurity.

Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. Each week these highlights focus on developments in key topics such as data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. Each week these highlights focus on developments in key topics such as data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

The European Commission has proposed a new Digital Package aimed at simplifying EU technology and data rules and boosting business efficiency across Member States. The Digital Package includes a Digital Omnibus to streamline legislation on artificial intelligence (AI), cybersecurity and data. The proposal for a Digital Omnibus includes:

This week’s edition of Information Law weekly highlights includes a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. Each week these highlights focus on developments in key topics such as data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

This week's edition of Practice Compliance weekly highlights includes a High Court ruling on AML oversight failures at a City law firm and updates to the ICO's guidance on transfer risk assessments and international data transfers. We also feature insights on developments in UK whistleblowing protections and new guidance from the Legal Ombudsman on improving early complaint resolution.

This week's edition of EU Law weekly highlights includes analyses on the Court of Justice ruling on the concepts of average consumer and aggressive or unfair commercial practice, the scope and impact of the upcoming Digital Operational Resilience Act, proposals for new EU telecom rules to be released in 2025, and Meta challenging Irish EU GDPR fine for ‘plaintext’ passwords data breach. In addition, this week the revised EU Product Liability Directive entered into force, the Council of the EU approved conclusions to strengthen the EU cybersecurity agency ENISA, adopted negotiating positions to strengthen EU passenger rights and approved conclusions on farmer-focused post-2027 Common Agricultural Policy, the European Commission established the European Board on Agriculture and Food and finalised ground-breaking EU-Mercosur trade deal, and the European Union Intellectual Property Office revealed EU Member States' readiness for new Geographical Indication protection system.

The European Commission has announced the launch of the European Vulnerability Database (EUVD), managed by the EU Agency for Cybersecurity. The EUVD is designed to strengthen digital security across the EU by helping organisations comply with supply chain and vulnerability management requirements under Directive 2022/2555 (the NIS2 Directive), while also supporting the implementation of the Cyber Resilience Act to safeguard products with digital elements—such as software and smart devices—from cyber threats. It collects vulnerability information from trusted sources and provides tools to assist both public and private sector stakeholders in identifying and managing cybersecurity risks across information and communication technology products and services, particularly in critical sectors such as energy, transport, and health.

This week's edition of EU Law weekly highlights includes the publication of the Cyprus Presidency of the Council’s programme for the first half of 2026, publication of a new cybersecurity package aimed at addressing increasingly sophisticated cyber and hybrid threats facing the EU, and publication of a proposed EU Digital Networks Act to modernise, simplify and harmonise EU rules on electronic communications networks. In addition this week, the European Data Protection Board adopted a Joint Opinion on the Digital Omnibus on AI proposal, the European Parliament adopted its second-reading position on proposed changes to EU air passenger rights rules, the Council adopted an amendment to the Regulation governing the European High‑Performance Computing Joint Undertaking, and the European Parliament adopted their negotiating position on the proposed Critical Medicines Regulation. These highlights also include analyses on the Procedural Regulation on EU-wide procedural rules for the enforcement of the EU GDPR and Lego’s failure to persuade the General Court to reinstate design protections for one of its blocks.

The Information Commissioner's Office (ICO) has launched a new audit framework to assist organisations in assessing compliance with data protection laws. This framework features nine toolkits covering areas such as accountability, cybersecurity, and personal data breach management, empowering organisations to identify areas for improvement. By using the framework, organisations can enhance their data protection practices and foster a culture of compliance, ultimately building trust with the public.