This week's edition of Risk & Compliance weekly highlights includes OFSI’s penalty on Colorcon for Russia sanctions breaches, OFSI’s new and updated General Licences, and an update to the OFSI UK Financial Sanctions FAQs. We also cover EU pressure on member states to implement new AML ruless, the NCA and Law Society campaign targeting payment diversion fraud, and a High Court ruling restricting unqualified employees from conducting litigation.

This week's edition of Practice Compliance weekly highlights includes: the latest Practice Compliance forecast, analysis of the SRA’s recent £500k fine for AML failures, an ICO consultation on generative AI, the European Commission’s conclusions of its adequacy decisions review, and new guidance from the NCSC for SMEs on using online services safely.

This week's edition of Practice Compliance weekly highlights includes OFSI’s imposition of a £4.7 million penalty on Citibank London for 970 sanctions breaches, government proposals to double OFSI’s maximum penalty and an NCA alert on the A7 sanctions evasion network. Other updates include a £3.84 million forfeiture following a suspected money laundering and sanctions evasion investigation, the conclusion of the SFO’s ENRC litigation, a landmark Court of Appeal ruling on tipping-off liability and new ICO guidance on anonymisation, pseudonymisation and research.

The European Commission has published a Strategic Roadmap for Digitalisation and Artificial Intelligence (AI) in the energy sector as part of the EU Technological Sovereignty Package. The roadmap addresses the growing energy demand from digital infrastructure and sets out how AI and digital solutions can support a clean, competitive and secure EU energy system. This includes helping consumers shift electricity consumption to periods when electricity is cheaper, improving industrial efficiency and providing real-time visibility, interoperability and control of electricity grids as more renewable energy is integrated. The roadmap is based on three pillars: (1) integrating data centres into the energy system in a sustainable and transparent way; (2) accelerating the uptake of digital and AI solutions, including improving grid-enhancing technologies and the faster rollout of smart meters and (3) developing a framework for secure and efficient cross-border data sharing. These pillars are complemented by further actions on trust in AI solutions, cybersecurity of critical energy infrastructure, tailored digital skills for the energy industry and international co-operation.

The International Medical Device Regulators Forum (IMDRF) has published its strategic plan for 2026–2030, outlining measures to accelerate global regulatory convergence for medical devices and strengthen governance. The plan sets out five strategic focus areas: (1) modernising governance to support sustainable and transparent growth; (2) reinforcing foundational regulatory principles by converting legacy Global Harmonization Task Force (GHTF) documents into updated IMDRF guidance; (3) addressing regulatory challenges posed by innovative technologies through the development of new technical documents and joint workshops with the IMDRF Industry Group; (4) expanding stakeholder engagement through new and enhanced mechanisms for participation and outreach; and (5) strengthening support for the implementation of IMDRF documents through training and practical guidance. To support consistent application across jurisdictions, the plan also calls for a more systematic and structured approach to IMDRF training programmes. The plan builds on progress made during the 2021–2025 strategic period, which was marked by rapid technological innovation, increased use of regulatory reliance mechanisms and significant regulatory disruption arising from the coronavirus (COVID-19) pandemic. During this time, regulators faced accelerating technological developments, including artificial intelligence (AI), machine learning (ML) and digital therapeutics, while adapting regulatory systems to pandemic-related pressures. IMDRF responded by issuing guidance on personalised medical devices, Software as a Medical Device (SaMD), AI-enabled medical devices and cybersecurity, and by developing the Reliance Playbook to promote more efficient and coordinated regulatory cooperation.

This week's edition of Risk & Compliance weekly highlights includes: publication of the NECC’s 2024–2025 Annual Report detailing a rise in fraud-related disruptions and convictions, new guidance from DSIT on the phased implementation of the Data Use and Access Act 2025, the Law Society’s recommendation to increase minimum salaries for trainee solicitors and SQE candidates, updates to OFSI’s general guidance on UK financial sanctions and the Russian Oil Services ban, and the UK government’s ongoing work on AI legislation.

This week's edition of Practice Compliance weekly highlights includes: the latest sanctions news, guidance on the ‘failure to prevent fraud’ offence giving nine months for companies to get their house in order, approval of certification criteria for EU Data Protection Seal under EU GDPR by the European Data Protection Board (EDPB), and the NCSC annual review warning of escalating cyber threats and calling for increased vigilance.

This week's edition of Risk & Compliance weekly highlights includes: the latest financial sanctions news; confirmation that the Cyber Security and Resilience Bill will be introduced to Parliament in 2025; and new LeO publication guidance on the types of disputes involving legal fees.

This week's edition of Risk and Compliance weekly highlights includes new ICO guidance on anonymisation, pseudonymisation and research and significant sanctions developments including OFSI’s imposition of a £4.7 million penalty on Citibank London for 970 sanctions breaches, government proposals to double OFSI’s maximum penalty and an NCA alert on the A7 sanctions evasion network. Other updates include a £3.84 million forfeiture following a suspected money laundering and sanctions evasion investigation, a landmark Court of Appeal ruling on tipping-off liability and new NCSC guidance on the targeting of internet-exposed operational technology systems.

This week's edition of Risk and Compliance weekly highlights includes: news of the ICO’s launch of a direct marketing advice generator, the latest on financial sanctions, the FATF’s annual report, and other risk and compliance updates.

This week's edition of Risk & Compliance weekly highlights includes: the latest Risk & Compliance forecast, a review of changes to PECR under the Data (Use and Access) Act 2025, OFSI’s updated sanctions guidance and FAQs, and final amendments to AML guidance from JMLSG.

This Practice Note identifies key actual and proposed regulatory or legislative changes affecting the legal sector as at 14 December 2021. It is intended to allow you to plan ahead. Whenever a predicted regulatory or legislative change occurs, we will report the change via our news updating service. We will also ensure we provide relevant guidance and, if necessary, amend or draft new Precedents. Compliance forecast key dates 2021–2022 When? What? Will I have to do something? 2021 UK government’s revised Modern Slavery Act 2015 statutory guidance expected to be published (originally expected before the end of 2020)—see: Modern slavery Yes Sometime in 2022 Law Commission’s ‘options paper’ on failure to prevent offences expected to be provided to the Government—see: Other financial and corporate crime For information 10 January 2022 ICO consultation on draft journalism code of practice closes—see: Data protection For information 12 January 2022 Updated Surveillance camera code of practice comes into effect—see: Data protection For information 24 January 2022 New version of the National Cyber Security