October 2025

Cyber and Data Insider

Welcome to the latest edition of our global cyber and data newsletter, focusing on the latest developments in data protection, AI, cyber incident response, and digital regulations.

In this edition, we highlight UK and DIFC data-protection reforms; EU AI governance with UK AI contracting and security risks; security obligations and breach trends across the UK, US and APAC; and US/UK digital regulation (including DMCC and whistleblowing governance), with practical guidance for organisations navigating compliance.

Data protection

The Dubai International Financial Centre amends the Data Protection Law (EMEA)

23/10/2025

The UK DUA Act’s Reform Pillars: Divergence from the EU GDPR (UK)

02/07/2025

Preparing for the UK DUA Act’s new complaints handling regime: ICO guidance and practical steps for...

29/10/2025

AI

Transparency, copyright, security: has the EU’s General-Purpose AI Code of Practice found a fair balance? (EU)

27/10/2025

Managing AI in the workplace: five key legal and compliance risks and how to mitigate them (UK)

29/10/2025

Cyber

Written Data Security Programs Under the Pennsylvania Insurance Data Security Act (US)

27/10/2025

API-related data breaches in the Singapore data protection landscape (APAC)

27/10/2025

Spilling the tea on ID risk: Unintended consequences of the Online Safety Act (UK)

22/10/2025

Digital regulations

A Short Primer to DOJ’s Data Security Program (US)

27/10/2025

What the Digital Markets, Competition and Consumers Act 2024 (DMCC Act) means for your online Ts&Cs (UK)

Whistleblowing and Ethics Hotlines: legal and governance considerations for UK and EU organisations (UK and...

27/10/2025

Locations