• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to secondary sidebar

Alston & Bird Privacy, Cyber & Data Strategy Blog

  • Home
  • Services
  • Events
  • Contacts

Kelly Hagedorn

UK Government Publishes Cyber Governance Code of Practice for Boards and Directors

April 10, 2025 By Hanna Hewitt and Kelly Hagedorn

On April 8, 2025, the UK government published the Cyber Code of Practice (the “Code”) to support board directors in governing cybersecurity risks. The Code is available online. The UK’s data protection regulator is actively investigating and, in some instances, fining companies for personal data breaches caused by cybersecurity issues. It is therefore more important […]

Filed Under: Cyber Risk, Cybersecurity, International Tagged With: Cyber resilience, Cyber risk, Cybersecurity, UK Cybersecurity

UK’s Data Protection Regulator fines a UK SaaS provider ~$4 million following a ransomware incident

April 4, 2025 By Hanna Hewitt and Kelly Hagedorn

On March 26, 2025, the UK data protection regulator (the Information Commissioner’s Office (“ICO”)) fined Advanced Computer Software Group Ltd (“Advanced”) £3.07 million (approximately $4 million). In 2022, Advanced suffered a ransomware incident that put the personal data of 79,404 people at risk. In its penalty notice, the ICO found that Advanced failed to implement […]

Filed Under: Cybersecurity, Data Breach, International, Ransomware Tagged With: Data breach, ICO, UK Cybersecurity, UK data protection, UK GDPR

European Commission Moves to Extend Free Flows of Personal Data to the UK

March 24, 2025 By Paul Greaves and Kelly Hagedorn

On March 18, 2025, the European Commission proposed to extend its adequacy decision in favor of the United Kingdom (‘UK’) for an additional six-month period. This would allow free flows of personal data from the EU to the UK to continue until December 2025. The existing adequacy decision – which was adopted in 2021 in […]

Filed Under: Data Protection, International, Privacy, Regulation Tagged With: Cross-border, EU Data Protection, EU Privacy, EU Regulation, GDPR

UK Government Proposes Targeted Ban on Ransom Payments and Increased Ransomware Incident Reporting

February 5, 2025 By Kelly Hagedorn and Kristen Bartolotta

On January 14, 2025, the United Kingdom government published a consultation on ransomware proposing new measures to increase incident reporting and reduce ransom payments (the “Consultation”). The Consultation outlines three objectives in this regard and is open for responses until April 8, 2025. Proposal 1: Targeted Ban on Ransomware Payments The UK government is proposing […]

Filed Under: Cyber Risk, Cybersecurity, Enforcement, Ransomware, Security Breach Tagged With: Cybersecurity, Incident Reporting, Ransomware, United Kingdom (UK)

UK’s National Cyber Security Centre Releases 2024 Annual Review

December 30, 2024 By Kelly Hagedorn

The United Kingdom’s National Cyber Security Centre (NCSC) has released its Annual Review for 2024. As in prior years, the report covers the UK’s cyber security position, both in terms of threats to the public and private sectors, as well as the country’s readiness to deal with those threats. Unsurprisingly, the NCSC notes that the […]

Filed Under: Cybersecurity, International Tagged With: Artificial Intelligence, Cybersecurity, Ransomware

  • « Go to Previous Page
  • Page 1
  • Page 2
  • Page 3
  • Go to Next Page »

Primary Sidebar

This blog is a service of Alston & Bird’s Privacy, Cyber & Data Strategy team and focuses on key data privacy and data security issues.


Receive email notifications when new posts are added.

Receive email notifications when new posts are added.


RANSOMWARE FUSION CENTER
Click here to request access

THE DIGITAL DOWNLOAD
Click here to see the editions

PRIVACY & CYBER EVENTS
Click here to see upcoming and past events

PRIVACY & CYBER MAILINGS
Click here to sign up

@ALSTONPRIVACY
Click here to follow us on Twitter

Secondary Sidebar

Categories

Recent Posts

  • The EU Data Act Comes Into Force
  • Chilean Regulator Launches Public Consultation on New Cybersecurity Law
  • Texas Expands Data Broker Act Requirements
  • United States, International Coalition Issue Joint Warning of Increasing PRC Backed Threat Activity
  • CISA Gives Itself an Extension for Cyber Incident Reporting Rules
Copyright © 2025 · Alston & Bird · All Rights Reserved. Privacy.
This website uses cookies to improve functionality and performance. By continuing to browse this site, you are consenting to the use of cookies on this website.