Regulation & Policy
-
Commons committee opens long-term inquiry into AI safety and security governance
MPs will scrutinise AI safety testing, incident reporting and company accountability through a continuing parliamentary inquiry, including the relationship to proposed cyber resilience rules.
-
NCSC updates TLS guidance for post-quantum key establishment
The UK’s NCSC now recommends hybrid and pure post-quantum options for TLS 1.3, urging early deployment for high-priority data in transit while warning older TLS versions cannot be upgraded.
-
Journalists seek legal costs after unlawful PSNI surveillance proceedings
Two Belfast journalists have asked the Court of Appeal to determine whether a surveillance tribunal may compensate them for costs arising from abandoned hearings.
-
DfE updates schools’ data protection checklist for new UK rules
The Department for Education has replaced part of its schools guidance with a compliance checklist covering access requests, complaints, automated decisions, children’s data and educational technology.
-
UK consults on security rules for consumer-authorised energy data sharing
The Department for Energy Security and Net Zero is consulting on a framework that would require certain energy data holders to share specified information securely with authorised services at consumers’ request.
-
ICO orders Metropolitan Police to improve controls over unapproved intelligence platform
The UK information regulator has reprimanded the Metropolitan Police and issued an enforcement notice after staff used an unauthorised retail crime intelligence platform to process personal information.
-
French regulator closes Google injunction after Gmail and cookie changes
France’s privacy regulator has closed a specific enforcement injunction against Google after account-creation disclosures and Gmail advertising changes, while reserving judgement on broader compliance.
-
UK and eurozone bank supervisors intensify scrutiny of AI-related cyber recovery
Reuters reports that banking supervisors are questioning AI use and cyber recovery arrangements, with the Bank of England and ECB pressing institutions to strengthen operational resilience.
-
Wind Tre fined €16.7m over unlawful telemarketing and data controls in Italy
The EDPB has published details of an Italian enforcement decision imposing a €16.7m fine on Wind Tre. The underlying decision was adopted in June rather than this week.
-
EU privacy regulators warn smart glasses can expose bystanders to hidden recording
The European Data Protection Board has issued its first statement on smart glasses, highlighting recording transparency, controller responsibilities and particular risks in workplaces, schools and hospitals.