IT legislation and regulation
Understanding the law as it applies to IT management can be one of the hardest task for IT leaders, but the growing burden of regulatory compliance makes it essential. Legislation and regulation affects enterprise IT in many ways, not just in long-standing tasks such as contracts and software licensing. We examine the latest legal development and how they affect IT managers, and talk to the experts in IT legislation and regulation to explain what it means to your organisation.
-
News
30 Oct 2025
Trump administration’s One Big Beautiful Bill Act promises to fill Meta’s coffers
The owner of Facebook, WhatsApp and Instagram is spending billions on new datacentres for artificial intelligence Continue Reading
-
News
30 Oct 2025
US senators seek to prohibit minors from using AI chatbots
Two US senators have proposed legislation that would require AI chatbot companies to verify the ages of people using their chatbots, in attempt to limit their harmful effects on children Continue Reading
-
News
11 Oct 2021
Singapore refreshes cyber security strategy
The city-state updates its national cyber security strategy to shore up the security of critical infrastructure and enterprises while growing its cyber security industry, among other goals Continue Reading
-
News
08 Oct 2021
Craft beer specialist Brewdog fixes serious app vulnerability
Vulnerability in brewer’s mobile app could have resulted in serious consequences for its shareholders and customers Continue Reading
-
News
08 Oct 2021
NatWest admits to weaknesses in anti-money laundering systems
Bank pleads guilty to failures concerning the laundering of hundreds of millions of pounds, but says it has since improved its anti-money laundering systems Continue Reading
-
News
07 Oct 2021
ICO expresses concerns over its future independence
In its response to the government’s data protection consultation, the Information Commissioner’s Office has raised worries over its future ability to function independently of government interference Continue Reading
-
News
07 Oct 2021
Twitch data breach investigations continue
Investigations are ongoing into a 125GB data breach that hit livestreaming platform Twitch, apparently the work of hacktivists Continue Reading
-
News
06 Oct 2021
MEPs approve report opposing certain uses of AI by police
European policymakers have approved a report on the use of AI in criminal matters, rejecting several amendments in the process that would have made it easier for police to potentially conduct predictive analytics and biometric surveillance Continue Reading
-
News
06 Oct 2021
US lawmakers propose ransomware reporting rules
Former presidential candidate Elizabeth Warren lends her support to a bill that would require corporate ransomware victims to disclose more information about their attacks to the authorities Continue Reading
-
Opinion
06 Oct 2021
Security Think Tank: Responsible vulnerability disclosure is a joint effort
By working hand-in-hand, developers and security researchers can both play a vital role in ensuring newly-discovered vulnerabilities are addressed appropriately, writes Paddy Francis of Airbus CyberSecurity Continue Reading
-
News
06 Oct 2021
Gaming service Twitch hacked, data leaked
Users of livestreaming platform Twitch may be at risk after a 125GB torrent of data was leaked Continue Reading
-
News
05 Oct 2021
CIO interview: Lisa Heneghan, chief digital officer, KPMG
KPMG UK’s digital leader says that in her 25-year career she has never known a more exciting time to work in IT Continue Reading
-
Opinion
05 Oct 2021
Invest in cyber security with confidence using a structured approach
Cyber security has never been more challenging or important in rapidly changing business, regulatory, IT and threat environments. There is a need for a more structured approach to investment Continue Reading
-
Opinion
05 Oct 2021
Keeping the UK in the global race to adopt digital identity
The UK government’s proposed digital ID trust framework is a step in the right direction, but more is needed to ensure the successful adoption of digital identity across the economy Continue Reading
-
Opinion
05 Oct 2021
ICO cookie consent: How will the plan affect businesses?
A data privacy and compliance expert considers what the ICO’s proposals for an overhaul of cookie consent procedures could mean for businesses Continue Reading
-
News
04 Oct 2021
Two arrests made in European ransomware investigation
Unnamed ransomware operation was disrupted last week in Kiev, Ukraine, following a coordinated investigation Continue Reading
-
News
01 Oct 2021
Met Police purchase new retrospective facial-recognition system
Retrospective facial-recognition software purchased for £3m by the Met Police will be deployed in coming months amid continuing controversy around the use of biometric technologies by law enforcement bodies Continue Reading
-
News
01 Oct 2021
BEIS urged to prioritise funding to protect umbrella workers in government Spending Review
In an open letter to the Department for Business, Energy and Industrial Strategy, umbrella regulation draft policymakers Rebecca Seeley Harris and James Poyser urge the government to prioritise funding for a single enforcement body Continue Reading
-
News
01 Oct 2021
IR35: Giant Group cyber attack prompts renewed calls for statutory regulation of umbrella companies
As details about the fallout from the cyber attack on the Giant Group umbrella company emerge, stakeholders say the incident should prompt the government to expedite regulating contractor payroll processing firms Continue Reading
-
News
30 Sep 2021
Digital bank fined by regulator due to weak anti-money laundering controls
German digital bank is fined by financial services regulator for failing in relation to its anti-money laundering practices Continue Reading
-
News
30 Sep 2021
UK consumers would collectively pay over £1bn a year for control of their data
UK consumers are willing to pay a small fee per month to have control of the data they share with Google and Facebook Continue Reading
-
News
29 Sep 2021
Russia arrests prominent cyber security executive
Founder and CEO of cyber security firm Group-IB detained in Moscow on treason charges Continue Reading
-
News
28 Sep 2021
Digital regulators need discrete but cooperative remits
The UK’s information commissioner has told MPs that digital economy regulators need discrete remits backed up by strong information sharing powers to both provide clear focus as well as allow for greater cooperation between their disparate but interlinked regimes Continue Reading
-
Feature
28 Sep 2021
Ultimate questions require ultimate understanding in the quantum era
In The Hitchhiker’s Guide to the Galaxy, Deep Thought calculates the answer to the ultimate question of life, the universe and everything as ‘42’. But what of quantum computing? Continue Reading
-
News
27 Sep 2021
Dubai International Finance Centre’s data protection law to be boosted by new federal regulation
New UAE data protection regulation on the horizon a year after a Dubai-specific law came into force Continue Reading
-
News
24 Sep 2021
IR35 reforms: HMRC confirms compliance checks under way in financial services, oil and gas sectors
Less than six months after the roll-out of the IR35 reforms to the private sector, HMRC has confirmed it has started writing letters to companies requesting details of their compliance procedures Continue Reading
-
Opinion
24 Sep 2021
Facial recognition cannot be a standalone authentication method
As more organisations look to facial recognition to improve their digital identity practices, they must remember that it cannot stand in isolation Continue Reading
-
News
24 Sep 2021
London publishes guidelines for ethical use of smart city tech
Latest draft of the ‘Emerging Technology Charter for London’ encourages local authorities, public services and technology companies to improve how they implement technology in the capital Continue Reading
-
News
23 Sep 2021
MoD in second leak of Afghan citizens’ data
A second breach of data relating to Afghan citizens at risk of Taliban reprisals has been reported by the Ministry of Defence Continue Reading
-
News
22 Sep 2021
AI cannot be regulated by technical measures alone
The regulation of artificial intelligence must address the power of tech companies, as technical measures alone will not be enough to prevent the harms caused by AI-driven technologies, says report Continue Reading
-
Opinion
21 Sep 2021
Managing cyber risk through integrated supply chains
High-profile supply chain cyber attacks have caused huge disruption this year. PA Consulting’s Carl Nightingale considers key questions business leaders should be asking of their organisations Continue Reading
-
News
21 Sep 2021
US sanctions Suex crypto exchange over ransomware links
US Treasury cracks down on cryptocurrency exchange that supposedly facilitated proceeds from multiple ransomware gangs Continue Reading
-
News
21 Sep 2021
UK government claims ‘gigaboom’ as next-gen broadband reaches one in two premises
Hot on the heels of major expansion in fibre networks across the nation by a number of leading operators, government data shows 50.2% of UK premises are now able to access gigabit-capable broadband, up from 6% in 2019 Continue Reading
-
News
21 Sep 2021
Dutch scientist receives top award for work on digital media’s effect on society
Utrecht University media scientist José van Dijck wins the Spinoza Award and funds for her research into the effects of social media on society Continue Reading
-
News
21 Sep 2021
Spanish police bust Mafia-linked phishing gang
A joint operation between European authorities has dismantled a cyber criminal gang with links to the Italian Mafia Continue Reading
-
News
21 Sep 2021
BlackMatter gang ramps up attacks on multiple victims
A wave of new BlackMatter ransomware attacks is hitting organisations around the world, even as the US authorities mull new sanctions on ransom payment infrastructure Continue Reading
-
E-Zine
21 Sep 2021
The cities planning for ethical use of AI
In this week’s Computer Weekly, we talk to tech leaders in Barcelona and London about a collaboration to ensure ethical use of AI in the era of smart cities. The UK government wants to reform data protection law – we assess the implications. And we examine the latest best practice in hybrid cloud. Read the issue now. Continue Reading
-
News
20 Sep 2021
NGO Fair Trials calls on EU to ban predictive policing systems
The use of artificial intelligence to predict criminal behaviour should be banned because of its discriminatory outcomes and high risk of further entrenching existing inequalities, claims Fair Trials Continue Reading
-
Opinion
16 Sep 2021
IR35 reforms: Tech firms warned off relying on high-risk compliance workarounds
Several months have passed since the onset of the IR35 reforms in the private sector, but compliance with the rules remains an ongoing process, warns Brookson Legal’s Matt Fryer Continue Reading
-
Blog Post
16 Sep 2021
The UK government data protection reforms - good for business, but are they good for you?
This is a guest post by Computer Weekly security editor Alex Scroxton, which features in the 21 September issue of the Computer Weekly digital magazine as its leader column. It is hard to sum up ... Continue Reading
-
News
16 Sep 2021
European president outlines tech vision to drive Europe
President of the European Commission has set out plans for a stronger European economy, with less reliance on US and Chinese tech giants Continue Reading
-
News
16 Sep 2021
Network Rail U-turns on blanket inside IR35 contractor determinations
The Department for Transport’s 2020-2021 accounts suggest Network Rail has switched up its IR35 compliance strategy, with more than 70% of its contractors now classified as working outside IR35 Continue Reading
-
News
15 Sep 2021
UN human rights chief calls for moratorium on AI technologies
High commissioner’s call for a moratorium on the use of AI systems that pose a serious risk to human rights is accompanied by a UN report on the negative human rights impacts associated with the technology Continue Reading
-
News
15 Sep 2021
Nordic central banks drive fintech and digital currency
Banks are working together through a cross-border financial technology development hub Continue Reading
-
News
14 Sep 2021
Mass health tracker data breach has UK impact
The leak of a database of 61 million users of health-tracking devices includes records on individuals located in the UK Continue Reading
-
News
14 Sep 2021
Cost of ransomware attack in financial sector exceeds $2m
Mid-sized financial services organisations worldwide spend an average of over $2m recovering from ransomware attacks Continue Reading
-
News
14 Sep 2021
Apple patches ForcedEntry vulnerability used by spyware firm NSO
Apple patches ForcedEntry vulnerability that was used to target political activists with spyware Continue Reading
-
News
13 Sep 2021
Smishing attacks up sevenfold in six months
Scam text messages are reaching pandemic proportions, thanks in part to the pandemic Continue Reading
-
News
10 Sep 2021
Microsoft, Nokia seal space, 5G agreement for South Australia
IT giant and leading communications technology provider team to work with South Australian development board and local companies to bring together interdisciplinary experts to develop, test, and deploy new space technologies Continue Reading
-
News
10 Sep 2021
UK full-fibre forges ahead but broadband digital divide persists
Comms regulator’s survey finds full-fibre networks are being built at a record rate, but work is still needed to get decent broadband to remote parts of the country Continue Reading
-
News
09 Sep 2021
UK GDPR faces changes under planned reforms
DCMS is launching a major consultation on proposed changes to the UK’s data protection regime, under which several key elements of the GDPR are likely to change Continue Reading
-
Blog Post
08 Sep 2021
Law enforcement: Question the tech sector's motives
Perhaps there are application areas where law enforcement technology should not be used, one of the witnesses at a recent Justice and Home Affairs Committee meeting warned. Experts from the US, New ... Continue Reading
-
News
08 Sep 2021
Stolen credit card data worth about £13 on dark web, PayPal worth more
The average price of a stolen credit card on a dark web marketplace comes in at around $17.40, or £12.60, according to new data – but the real money for cyber criminals is in hacked PayPal accounts Continue Reading
-
Opinion
08 Sep 2021
Security Think Tank: Optimising privacy, post-GDPR
Airbus CyberSecurity CTO Paddy Francis explores the impact of regulation on data protection, and how it has changed how one goes about optimising data privacy in the enterprise Continue Reading
-
News
07 Sep 2021
ICO in bid to end cookie pop-ups
Outgoing information commissioner Elizabeth Denham will call on her equivalents across the G7 group of countries to collaborate on an overhaul of cookie consent pop-ups Continue Reading
-
News
07 Sep 2021
Openreach aims to plug digital divide by scrapping broadband connection fees in select homes
BT-owned broadband provision division makes latest step in campaign to address key financial issue that could hinder roll-out of broadband networks capable of supporting the ‘new normal’ of work Continue Reading
-
News
07 Sep 2021
Lords committee calls for evidence on digital regulation
House of Lords Communications and Digital Committee has called for evidence to inform its inquiry into the effectiveness of digital regulation Continue Reading
-
Opinion
07 Sep 2021
Security Think Tank: A response to planned data protection changes
The ISF’s Emma Bickerstaffe assesses how organisations might respond to proposed changes to the UK’s data protection regime Continue Reading
-
E-Zine
07 Sep 2021
Highways England delivers a digital roadmap
In this week’s Computer Weekly, we talk to the CDIO of Highways England about her digital services and asset management plans. We explore SIEM and SOAR security tools. And we find out how McLaren Racing is using data analytics to build its cars more efficiently. Read the issue now. Continue Reading
-
Opinion
06 Sep 2021
UK’s new data protection strategy risks costing business more than it gains
The apparent business benefits of pursuing data adequacy agreements around the world may not be as enticing as they at first appear Continue Reading
-
News
03 Sep 2021
Berlin court reverses ban on use of EncroChat evidence in criminal trials
Berlin Superior Court allows use of EncroChat evidence in criminal trials but lawyers say the question will ultimately need to be decided by the German Supreme Court Continue Reading
-
News
02 Sep 2021
How high can the contactless card limit go without two-factor authentication?
The spending limit for contactless cards has reached an eyebrow-raising triple-digit figure – £100 – raising questions about the need for user authentication Continue Reading
-
News
02 Sep 2021
WhatsApp fined €225m over GDPR breaches
Irish data protection watchdog has issued one of the largest GDPR fines to date against Facebook-owned WhatsApp Continue Reading
-
News
02 Sep 2021
Twitter tests auto-block feature for accounts at risk of abuse
Latest Twitter feature automatically blocks abusive users, and is intended to help victims regain control of their experience on the platform Continue Reading
-
News
27 Aug 2021
Are proposed data protection changes a threat to UK citizens’ privacy?
Though changes are as-yet undefined pending an upcoming consultation, concerns are already being expressed over the government’s plan to liberalise data protection laws in the service of innovation and growth Continue Reading
-
News
26 Aug 2021
Tech giants commit to Biden's cyber security action plan
Some of the world’s most prominent tech giants have made a series of commitments to enhance the US’ national cyber security posture following a high-profile meeting with president Biden Continue Reading
-
News
26 Aug 2021
Government unveils post-Brexit data flow proposals
The government will pursue data partnerships with countries including Australia, South Korea and the US as part of a post-Brexit data regime that may also see substantial changes to the UK’s data protection law Continue Reading
-
Opinion
26 Aug 2021
Security Think Tank: Steps to a solid data privacy practice
Petra Wenham of the BCS shares her expertise on building, or rebuilding, a solid business data privacy practice in a post-Covid-19 world Continue Reading
-
News
26 Aug 2021
NZ privacy lead John Edwards named new information commissioner
DCMS has named John Edwards, currently New Zealand privacy commissioner, to succeed Elizabeth Denham as UK information commissioner Continue Reading
-
News
25 Aug 2021
Algorithmic accountability needs meaningful public participation
Global analysis by Ada Lovelace Institute and other research groups finds algorithmic accountability mechanisms in the public sector are hindered by a lack of engagement with the public Continue Reading
-
News
25 Aug 2021
Calling the cops for ransomware attacks doesn’t help, say cyber pros
A new study for the #Ransomaware campaign reveals some insight into why so few victims report ransomware attacks Continue Reading
-
News
25 Aug 2021
UK loses £1.3bn to fraud and cyber crime so far this year
New figures from the National Fraud Intelligence Bureau show a threefold spike in reported financial losses to fraud and cyber crime in the first six months of 2021 Continue Reading
-
Opinion
25 Aug 2021
Basel III: How fintech can provide allocated gold for banks
Banking rules that were over 10 years in the making as a response to the financial crisis have finally come into effect, marking a seismic shift for European banks and their dealings with gold – potentially completely altering the landscape of precious metal investment. Sylvia Carrasco, CEO of Goldex, explains Continue Reading
-
News
24 Aug 2021
UK government adds to Northern Ireland gigabit broadband funding
Further financial support given to develop next-generation full-fibre network across rural regions in province, particularly those that currently have the slowest speeds, such as Mid Ulster, Fermanagh and South Antrim Continue Reading
-
Opinion
24 Aug 2021
The ransomware debate – to pay or not to pay?
The debate around banning ransomware payments is highly nuanced, and we must take care to avoid overt victim-blaming, in favour of an open and honest approach, says SASIG’s Martin Smith Continue Reading
-
News
24 Aug 2021
Campaign groups claim police have bypassed Parliament with plans for live facial-recognition tech
Civil society groups call for Parliament to scrutinise the use of live facial-recognition cameras Continue Reading
-
News
23 Aug 2021
Cities worldwide band together to push for ethical AI
The chief digital and technology officers of London and Barcelona speak to Computer Weekly about their joint initiative launched with other cities to promote the ethical deployment of artificial intelligence in urban spaces Continue Reading
-
News
20 Aug 2021
Swedish IT industry braced for China’s response to Huawei 5G ban
Swedish IT and communications equipment suppliers fear economic backlash from China following Huawei ban Continue Reading
-
News
19 Aug 2021
Pub apps harvesting swathes of customer data unnecessarily
Some pub and restaurant chain apps demand data such as gender and marital status, raising eyebrows among privacy campaigners Continue Reading
-
News
18 Aug 2021
UK government criticised for proposed facial-recognition guidance
Privacy campaigners say the government's updated 'surveillance camera code of practice' does not do enough to mitigate abuses of facial-recognition technology Continue Reading
-
Opinion
18 Aug 2021
Security Think Tank: Data privacy and ethics in a post-Covid world
The radical change caused by the pandemic requires new approaches to data privacy practice, says PA Consulting’s Daniel Gordon Continue Reading
-
News
17 Aug 2021
Educational publisher Pearson fined for data breach cover-up
Securities and Exchange Commission says publisher misled its investors over the extent of a 2018 data breach Continue Reading
-
News
16 Aug 2021
ICO consults public on personal data in employment practices
The ICO has launched a public consultation on employers’ use of personal data to help it provide practical guidance for both businesses and workers Continue Reading
-
News
12 Aug 2021
ICO consults on new international data transfer agreement
Information Commissioner’s Office to consult on its draft international data transfer agreement and guidance, which will replace standard contractual clauses to protect personal data during overseas transfers Continue Reading
-
News
11 Aug 2021
The Netherlands still lacks digital resilience, says report
Report by National Coordinator for Counterterrorism and Security says the Netherlands’ digital resilience has improved, but is still insufficient Continue Reading
-
News
10 Aug 2021
Third of finance firms accelerate use of artificial intelligence to detect money laundering
Financial services firms are stepping up their use of artificial intelligence and machine learning technology to fight increasing money laundering activity Continue Reading
-
News
09 Aug 2021
UK broadband trial to investigate connectivity through water pipes
Government-backed scheme to target broadband for hard-to-reach homes with fibre optic cables fed through utility mains, businesses and mobile masts without digging up roads Continue Reading
-
News
06 Aug 2021
Apple unveils plans to scan US iPhones for child sex abuse images
Apple will introduce child sexual abuse material detection for US users later this year, but some experts are worried that the technology could be repurposed to scan phones for other kinds of content Continue Reading
-
News
04 Aug 2021
Leading venture capital firms are failing to protect human rights
Venture capital firms and high-profile tech accelerators are not conducting human rights due diligence on their investments, which means they cannot be sure the companies they invest in are not causing, or contributing to, human rights abuses Continue Reading
-
News
02 Aug 2021
IR35 reforms: TUC demand for government ban on umbrella companies raises eyebrows
The Trades Union Congress has raised eyebrows within the contracting community by calling for a ban on umbrella companies to help stamp out malpractice Continue Reading
-
Opinion
02 Aug 2021
Five tips to ensure your crisis comms plan is ready for a cyber attack
Business leaders take note: standard crisis communications plans are inadequate if you have fallen victim to a cyber attack. HPL’s Ted Birkhahn shares five tips to make sure you are ready to face the public Continue Reading
-
News
02 Aug 2021
Government publishes second version of digital identity trust framework
The second iteration of the framework, still in alpha version, sets out how organisations can become certified digital identity service providers Continue Reading
-
News
29 Jul 2021
HMRC hits Home Office with £33.5m bill over ‘careless’ application of IR35 rules
The Home Office is the latest ministerial department to be hit with a multimillion-pound tax demand from HMRC after errors were discovered in its implementation of the IR35 rules Continue Reading
-
News
27 Jul 2021
ICO ends its involvement in dispute between NatWest Bank and data breach whistleblower
The Information Commissioner’s Office has ended its involvement in a dispute between a data breach whistleblower and NatWest bank Continue Reading
-
News
27 Jul 2021
US lawmakers call for probe into ‘arrogant’ spyware firm
US members of Congress have called for an investigation into NSO Group, the spyware supplier at the centre of a massive surveillance scandal Continue Reading
-
News
27 Jul 2021
TikTok sets up cyber security hub in Dublin
Dublin-based cyber centre will oversee the security of TikTok’s users across Europe Continue Reading
-
News
23 Jul 2021
DWP hit with £87.9m tax bill by HMRC over 'historic' IR35 status contractor assessment errors
The Department for Work and Pensions’ (DWP) annual accounts highlight the challenges the public sector body has faced with implementing the IR35 reforms since they came into force in the public sector in April 2017 Continue Reading
-
News
22 Jul 2021
Plans to address legal but harmful content ‘threaten free speech’
House of Lords report criticises the government’s forthcoming Online Safety Bill for imposing duty of care on tech platforms to deal with ‘legal but harmful’ content, which it says threatens freedom of expression online Continue Reading
-
News
21 Jul 2021
France’s Macron among alleged Pegasus targets
Data relating to devices used by French president Emmanuel Macron and the head of the World Health Organization, among others, has been uncovered in a dataset linked to government use of spyware Continue Reading
-
News
20 Jul 2021
Government shares vision for digitised energy system as it pursues net-zero emissions target
Strategy is geared towards readying the UK energy system for the transition from fossil fuels to renewable power through digital transformation Continue Reading
-
News
20 Jul 2021
NCSC’s Cameron urges deeper cyber alliance-building
Speaking to an event in Israel, NCSC CEO Lindy Cameron has praised joint UK-Israeli efforts on security collaboration Continue Reading
-
News
20 Jul 2021
NHS Digital tightens rules for GPDPR data scrape
The proposed collection of patient data held by GPs will now only commence when three key criteria have been fulfilled, says NHS Digital Continue Reading