With 2027 approaching, businesses are continuing to navigate a fast-moving legal and regulatory landscape. But keeping up with change is...

Most businesses do not choose the programming language behind their website or client portal. A vendor, developer or hosting provider...

Comparatively few serious cyber incidents begin with a failure of sophisticated technology. Far more often, they start with a misplaced...

In guidance published on 2 October 2026, the French Data Protection Authority (CNIL) clarifies an important point: a personal data breach...

“Keep it just in case” may sound like a cautious approach to managing information. From a cybersecurity perspective, however, it can...

The UK regulator Ofcom is engaging with industry, technical experts and vendors to better understand the impact of AI on the cyber...

When a data protection infringement comes to light, the first question most organizations ask is: What is our exposure to a fine? New...

Artificial intelligence is moving from the margins of healthcare into its everyday operation — from tools that summarise clinical records...

The annual S&B Activate Conference brings together senior in-house lawyers for a day of forward-looking legal insight, market...

National Instrument 26-101: Information Technology System Integrity On October 1, 2026, the Canadian Securities Administrators (CSA)...

As the EU Cyber Resilience Act (CRA) continues to reshape the regulatory landscape for connected products, organisations across the...

Organizations spend heavily on tools designed to protect information. Worldwide spending on information security is expected to reach...

Introduction  Cybersecurity has become a central component of the European Union's pursuit of technological sovereignty. Measures...

Earlier this month, the Spanish data protection regulator (AEPD) disclosed that it had received the first notification of a personal data...

When we published our Tech Predictions 2026 report, we predicted that organisations would face an increasingly complex cybersecurity...

Portugal's transposition of the NIS 2 Directive recently entered into force through Decree-Law No. 125/2025, of 4 December ("DL...