Refine By
Clear all filter
About 703 results for "cybersecurity"
PRACTICE NOTES
This negotiation guide sets out practical guidance on some of the key issues that may arise when negotiating contracts to procure artificial intelligence (AI) technologies. It is primarily designed to support customers procuring AI solutions but it also considers some of the positions that suppliers may take. It is intended to cover some of the common themes that may arise, rather than considering any specific use case or delivery model, but it includes guidance about the potential impact of these considerations on negotiations. It summarises some of the key aims of the parties and highlights common pitfalls that can be encountered when negotiating contracts. For example AI clauses, see Precedents: • AI clauses—Warranties • AI clauses—IP rights in an AI system • AI clauses—Ownership of customer data • AI clauses—Ownership of output • AI clauses—Use of Generative AI by Supplier • AI clauses—Third party IP warranties • AI clauses—Third party IP indemnity For further guidance on AI projects and specific aspects of AI contracting, see Practice Notes: The AI project lifecycle—a quick guide, Artificial intelligence (AI) resource kit,
NEWS
The European Commission has proposed a draft implementing regulation establishing the operational arrangements for the Digital Product Passport Registry under Regulation (EU) 2024/1781, defining its technical structure, governance, and user obligations. The registry is designed as a secure, central system to store and manage digital product passport data, including unique identifiers and compliance information, supported by components such as a user interface, application programming interface, verification mechanisms, semantic repository, and logging system to ensure interoperability, traceability, and accountability. Access is limited to verified economic operators and other value chain actors who must undergo electronic identity verification, with responsibilities to register and maintain accurate data, while national and customs authorities access the system through designated national administrators. The regulation establishes procedures for registering passports, including automated validation, assignment of unique identifiers, and issuance of proof of registration, alongside rules on data versioning and retention. It also provides for standardised data models via a semantic repository, technical support services, and comprehensive logging to support oversight and enforcement. The Commission is responsible for managing, securing, and maintaining the registry in compliance with data protection rules, while Member States oversee national access and systems, with measures included to ensure cybersecurity, prevent misuse, and support market surveillance and customs controls. The consultation closes on 27 May 2026.
NEWS
The Pensions Regulator (TPR) has published its 2025/26 Corporate Plan and 2024/25 Annual Report and Accounts. The Corporate Plan sets out how TPR intends to support the pensions industry in preparing for the Pension Schemes Bill, which is set to reshape the market across both defined contribution (DC) and defined benefit (DB) schemes. TPR notes that its focus remains on raising standards of trusteeship and investment governance, delivering value for savers, and encouraging the development of safe pathways to good retirement outcomes. It highlights the shift to a more prudential style of regulation, addressing risks not only at the individual scheme level but also those affecting the wider financial ecosystem. TPR also confirms the launch of a new approach to master trust supervision, a digital, data and technology strategy, and an innovation support service. According to the Annual Report, TPR met or almost met 30 of its 31 key performance indicators (KPIs) for 2024/25. It did not meet the KPI relating to cyber risks and pensions technology, but states that it is engaging with cybersecurity experts to improve performance in this area.
NEWS
This week's edition of Practice Compliance weekly highlights includes: publication of the NECC’s 2024–2025 Annual Report detailing a rise in fraud-related disruptions and convictions, new guidance from DSIT on the phased implementation of the Data Use and Access Act 2025, the Law Society’s recommendation to increase minimum salaries for trainee solicitors and SQE candidates, updates to OFSI’s general guidance on UK financial sanctions and the Russian Oil Services ban, and the UK government’s ongoing work on AI legislation.
NEWS
This week's edition of Practice Compliance weekly highlights includes: the latest sanctions news, an update on forthcoming guidance on the new offence of failure to prevent fraud, an ICO report on the prevalence of data breaches and steps to prevent them, a DSIT report on its AI cyber security survey, and the publication of joint guidance on considering payment in ransomware incidents.
PRACTICE NOTES
How the fashion industry works The fashion industry is a globalised, billion-dollar, fast-moving industry, with clothing and accessories often being designed in one country, manufactured in another country and sold worldwide in retail stores or online. Each year, fashion houses design, manufacture, show and sell at least a spring/summer and autumn/winter collection. Each creates hundreds of designs, all of which need to be attractive to consumers and more desirable than those of competitors. As attractive as these designs may be, they often have a very short shelf life—a garment that is this season’s hit may be completely outdated the following year. These issues pose certain challenges to the creators of fashion items, in particular when it comes to protecting their designs from being copied by competitors or counterfeiters. The transient nature of fashion items raises a number of issues such as: • whether it is worthwhile seeking protection through registrations of IP rights • what rights should be protected, and
PRACTICE NOTES
This Practice Note provides a brief overview of and links to a wide selection of case law trackers, legislative trackers, regulatory trackers and horizon scanning resources from across Lexis+® UK that may be of interest to in-house lawyers. This Practice Note is designed to act as a signposting tool, and these resources have been listed by Lexis+® UK Practical Guidance practice area to aid ease of use and to enable focus on specific areas of law of interest and/or relevance to role. NOTE: Access to these resources is subject to subscription. Additional trackers and tools may be available in other Lexis+® UK Practical Guidance practice areas. Banking & Finance Tracker Overview Banking & Finance—key dates and future developments tracker: 2026 and beyond Tracks key upcoming developments, dates and horizon scanning for banking and finance lawyers. Banking & Finance case tracker Displays the status of cases (including appeals) which the Banking & Finance team has reported on since January 2013 to date. Additional Banking & Finance
NEWS
This week's edition of Practice Compliance weekly highlights includes: the latest sanctions news, confirmation that the Cyber Security and Resilience Bill will be introduced to Parliament in 2025, and new LeO guidance on the types of disputes involving legal fees.
NEWS
This week's edition of Risk & Compliance weekly highlights includes: the latest Risk & Compliance forecast, details of an ICO fine for illegal marketing calls, an analysis of the EU Data Act, the European Commission’s conclusions of its adequacy decisions review, and new guidance from the NCSC for SMEs on using online services safely.
NEWS
This week's edition of Practice Compliance weekly highlights includes: the latest financial sanctions, the opening of a consultation on new legislative proposals to tackle cybercrime and response to House of Lords Committee Report on Modern Slavery Act 2015 by the Home Office, and an analysis on how forced labour imports raise criminal risks for UK retailers.
NEWS
This week's edition of Risk & Compliance weekly highlights includes: an ICO report on the prevalence of data breaches and steps to prevent them, the latest sanctions news, an update on forthcoming guidance on the new offence of failure to prevent fraud, a DSIT report on its AI cyber security survey, and the publication of joint guidance on considering payment in ransomware incidents.
NEWS
This week's edition of Risk & Compliance weekly highlights includes the EU’s 21st package of sanctions against Russia, the Court of Appeal’s refusal of permission to appeal in R v Osmond, a case involving tipping off and analysis of proposed reforms to the transparency in supply chains regime under section 54 of the Modern Slavery Act 2015. We also cover concerns raised by the Serious Fraud Office about Güralp Systems’ bribery controls and new NCSC guidance on responding to and recovering from highly disruptive cyber attacks.