DLA Piper

This month, the Department of Homeland Security (“DHS”) Cybersecurity and Infrastructure Security Agency (“CISA”) released its long-awaited proposed draft regulations pursuant to the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (“CIRCIA” or the “Act”).

The Act was enacted on March 15, 2022, following several significant and disruptive cyberattacks on critical infrastructure in the

On 25 March 2024, the Cabinet Office published Procurement Policy Note (PPN) 02/24: Improving Transparency of AI use in Procurement.  This PPN provides guidance on the use by bidders of Artificial Intelligence in public procurements and in the delivery of government services.  In particular, it highlights the need for greater transparency from bidders regarding

AI is increasingly at the forefront for the insurance sector, as methods to tackle fraud, manage claims and improve customer service are developed. In terms of how these developments are addressed in the contracts that underpin such arrangements there are significant issues to bear in mind.

Contracts involving AI still take the form of a

In the evolving legal landscape of data protection, several decisions by data protection regulators and courts across the EU and UK underscore the importance of proactive GDPR compliance from a contractual perspective. These issues are being scrutinised more closely in corporate due diligence transactions and by regulators in the event of a data breach or

In good news, on 22 March 2024, the Cyberspace Administration of China (“CAC”) finalised long-awaited guidelines setting out exemptions to some of the more challenging cross-border data transfer (“CBDT”) compliance requirements (“Guidelines”). As well the exemptions, there are updated filing templates for those still falling outside the exemptions; and a reminder that consent and contractual/other