The importance of cyber security compliance – an overview of the EU regulatory framework
Axel von dem Bussche and Niklas Banaschek look at the network of cyber security regulation in the EU.
More
Digital resilience and cyber security
The amount of legislation in the EU and UK governing digital resilience and cyber security has exploded in an attempt to combat ever-growing cyber threats. We help businesses navigate the complex framework by providing overviews of requirements and taking a look at how to handle various compliance points across a range of sectors and jurisdictions.
Spotlight on ICT subcontracting: digital resilience compliance in the supply chain
Clare Reynolds looks at how to manage ICT supply chain digital resilience risk in light of the complex regulatory framework.
MoreMonitoring preparedness and governance under EU cyber security legislation
Dominique Lensink looks at processes to adopt to help comply with the complex EU framework around cyber security.
MoreSecurity is the best policy – documenting digital security compliance in an increasingly regulated landscape
Jo Joyce looks at the types of policies needed and what they should include to ensure compliance with digital resilience and cyber security laws.
MoreLessons from CrowdStrike – a particular focus on financial services
Nicholas Crossland looks at the importance of building in digital resilience and other lessons from the CrowdStrike incident.
MoreWhat does the new EU digital resilience regime mean for UK businesses?
Prachi Vasisht looks at the impact of the EU's digital resilience and cyber security laws on UK businesses which also operate in the EU.
MoreCyber security and open-source software in products with digital elements
Marc Schuler and Julie Dumontet look at digital resilience issues with open-source software, particularly in light of the EU's Cyber Resilience Act.
MoreDigital resilience and cyber security reporting requirements in the UK and EU
We provide a high level overview of UK and EU cyber security and digital resilience reporting requirements.
MoreEU case digest
The UK's Data (Use and Access) Bill
EU AI Act obligations
(UK) GDPR – what you really need to know
Cyber security – weathering the cyber storms
Children's data and online harms
Facial recognition technology, biometrics and monitoring
Financial data
AI and data - what does the UKs approach to regulating AI mean in the context of data protection and cyber security?
International update 2023
Digital advertising and data privacy
GDPR enforcement
Cyber security
The UK's Data Protection and Digital Information Bill
Managing HR data
Managing HR data is an ongoing exercise for employers. We look at data protection requirements for HR data in light of current and incoming law and in the context of recent developments, covering SARs, the EU Whistleblowing Directive, employee monitoring and data breaches as well as top tips for employers.
MoreData sharing
Data exports continue to be high on the agenda but data sharing (of personal and non-personal data) is being looked at much more widely by the EU and the UK in the context of providing individuals with control over their data, opening up the potential of big data, and breaking down barriers to competition. We look at incoming EU legislation relating to data sharing with particular focus on the draft Data Act, as well as at the ICO's Code of Practice on Data Sharing, Privacy Shield 2.0 and data sharing requirements for the UK's Pensions Dashboard.
MoreHealth data – getting the right balance between innovation and data protection
Personal health data attracts special protection but also benefits from exemptions under UK and EU data protection law. Have legislators and regulators got the balance between innovation and privacy right or do the rules overly restrict advances in healthcare provision and research?
MoreData protection, freedom of expression, journalism and the media
We look at the UK's implementation of the GDPR journalistic exemption, at the ICO's recently published draft Code of Practice on journalism, the use of data protection law in media cases, and at the tensions between the right to privacy and to freedom of expression.
MoreInternational update – it's not all about GDPR
Update
Data transfers – a clearer picture?
Data breaches
Data exports
UK and EU data policy
Health data
Data transfers after Schrems II and Brexit transition
HR data: an update
Processing personal data associated with the COVID-19 pandemic
Data protection by design and default
Digital Legislation Tracker
To help you stay on top of developments we've built a high-level legislation tracker looking at areas relevant to digital businesses across the EU, UK and Germany.
Access TrackerWebinars
Our international team of experts discuss key data privacy issues and developments. Listen to our latest webinars and access our full library.
View recordingsTools
Digital Legislation Tracker SCC generator Draft EU ePrivacy Regulation – preliminary guidance and commentaryInsights by sector & service
GDPR compliance Cyber security & data breaches Data governance HR data Health data Data exports New digital products & data Policy agreements & transactions Data subject rights Dealing with DPAs ePrivacy (cookies) Marketing & dataInsights by location
China England & Wales EU France Germany UAEAll insights
Filters
Global Data Hub - Digital resilience and cyber security
Click here to find out more
Monitoring preparedness and governance under EU cyber security legislation
Dominique Lensink looks at processes to adopt to help comply with the complex EU framework around cyber security.
24 March 2025
3 of 8 Insights
Global Data Hub - Digital resilience and cyber security
Click here to find out more
Cyber security and open-source software in products with digital elements
Marc Schuler and Julie Dumontet look at digital resilience issues with open-source software, particularly in light of the EU's Cyber Resilience Act.
24 March 2025
7 of 8 Insights
Global Data Hub - Digital resilience and cyber security
Click here to find out more
Lessons from CrowdStrike – a particular focus on financial services
Nicholas Crossland looks at the importance of building in digital resilience and other lessons from the CrowdStrike incident.
24 March 2025
5 of 8 Insights
Global Data Hub - Digital resilience and cyber security
Click here to find out more
Digital resilience and cyber security reporting requirements in the UK and EU
We provide a high level overview of UK and EU cyber security and digital resilience reporting requirements.
24 March 2025
8 of 8 Insights
Global Data Hub - Digital resilience and cyber security
Click here to find out more
Spotlight on ICT subcontracting: digital resilience compliance in the supply chain
Clare Reynolds looks at how to manage ICT supply chain digital resilience risk in light of the complex regulatory framework.
24 March 2025
2 of 8 Insights
Global Data Hub - Digital resilience and cyber security
Click here to find out more
The importance of cyber security compliance – an overview of the EU regulatory framework
Axel von dem Bussche and Niklas Banaschek look at the network of cyber security regulation in the EU.
24 March 2025
1 of 8 Insights
Global Data Hub - Digital resilience and cyber security
Click here to find out more
What does the new EU digital resilience regime mean for UK businesses?
Prachi Vasisht looks at the impact of the EU's digital resilience and cyber security laws on UK businesses which also operate in the EU.
24 March 2025
6 of 8 Insights
Global Data Hub - Digital resilience and cyber security
Click here to find out more
Security is the best policy – documenting digital security compliance in an increasingly regulated landscape
Jo Joyce looks at the types of policies needed and what they should include to ensure compliance with digital resilience and cyber security laws.
18 March 2025
4 of 8 Insights
Global Data Hub - EU case digest
Click here to find out more
What does the recent CJEU decision in Schrems v Meta mean for data aggregation practices in online advertising?
Christopher Bakier and Julia Pranz look at the CJEU's views on data minimisation and special data processing in the context of targeted digital advertising.
20 January 2025
3 of 6 Insights
