Data and cyber

Contact: Jon Bartley and Richard Breavington

Data and cyber

The ICO's privacy notices tool for small businesses

The ICO has launched a new tool for small organisations and sole traders to create a privacy notice protecting peoples' information rights. It offers two different types of privacy notice: one for customer and supplier information, and another for staff and volunteer information. This tool is expected to reduce the cost of compliance, stress and time demanded of small businesses.

Find out more

Data Dispatch – July 2024

Data Dispatch from RPC’s Data Advisory team aims to provide an easy-to-digest summary of key developments in data protection law.
The latest edition explores a range of updates including:

ICO consults on "consent or pay" business model
ICO plans to create a tool to identify websites which are using non-compliant cookie banners
AI Update
UK's ICO and USA's FCC collaborate to tackle unwanted communications.

Find out more

Data and cyber

Beyond the Radar event
Navigating ransomware incidents: an interactive masterclass
18 September

Themed "navigating changing regulation", our Beyond the radar event on 18 September will be a deep dive into the regulatory landscape and the key themes emerging from our research.

We will be holding a series of masterclass sessions, including, Navigating ransomware incidents: an interactive masterclass. Led by Richard Breavington, this will be a hands-on session where you will step into the shoes of a company responding to a ransomware incident. This introductory masterclass offers a dynamic exploration of data breach scenarios, including the immediate priorities, understanding regulatory implications, and evaluating potential claims. Participants will engage in a simulated extortion, deciding whether to engage with the extortionist under expert guidance. Equip yourself with practical skills and insights to effectively manage and mitigate the impacts of ransomware incidents.

Following the masterclasses, you will have the opportunity to hear from our expert panel as they debate key challenges faced by in-house legal teams and regulatory bodies, and explore how businesses can best prepare to effectively navigate changing regulation. We are very pleased to be welcoming Stephen Almond, Executive Director for Regulatory Risk from the ICO as one of our panel speakers.

EU Cyber 2025: NIS2 & DORA event
2 October

On 2 October, we will be collaborating with leading cyber security consultancy and intelligence experts S-RM for an informative evening of networking and discussion on NIS-2 and DORA, as they enter their final chapters. With a new era of EU regulations requiring organisations in scope to bolster their security systems beginning, there has never been a more important time to prepare for this significant change in the legal landscape. Join industry experts as they consider the impact of these regulatory frameworks on impacted organisations and how these entities are enhancing their ability to defend against digital threats, respond to cyber attacks and manage data breach incidents.

Register here

The impact of the ICO's approach to assessing technical standards

The ICO recently confirmed its provisional decision to fine Advanced Computer Software Group £6.09m following a data breach that it suffered in 2022. Rather than being a result of process-based failures, this decision is based on Advanced's technical failures. With this in mind, it's a good idea to take a moment to consider how the ICO assesses technical standards and what implications these decisions might have on the data subject litigation landscape.

Find out more

Data and cyber

Cyber_Bytes Issue 66

This time, our regular round-up of developments in cyber, tech and evolving risks brings you:

the CrowdStrike incident
the Cyber Resilience law announced in the King's Speech
ICO reprimands Electroral Commission
NCSC and partners issue warning over North Korean state-sponsored cyber campaign to steal military and nuclear secrets
ICO takes action against two organisations for "risking public trust" by failing to respond to public requests for information
NCSC and partners issue warning about evolving techniques used by China state-sponsored cyber attackers.

Find out more