United Kingdom: Cybersecurity

The Financial Stability Board (FSB) has published a letter from its Chair and Governor of the Bank of England, Andrew Bailey, to G20 Finance Ministers and Central Bank Governors.

Explore comprehensive legal insights and expert commentary across diverse practice areas and industries. Access thought leadership through written articles and podcast discussions that address current legal developments and emerging trends.

The FCA and Bank of England have simultaneously published significant material examining how frontier AI models with cyber capabilities are being used in financial services. While these publications introduce no new rules, they reveal detailed regulatory thinking on governance, harness design, and organisational resilience that signals the direction of future supervisory expectations.

The UK Supreme Court's narrow 3-2 decision in The Kingdom of Bahrain v Shehabi denies state immunity to foreign governments accused of remotely hacking individuals within UK territory, establishing that cyber surveillance operations causing harm to UK residents fall outside traditional immunity protections. This landmark ruling clarifies the territorial tort exception under the State Immunity Act 1978 and may expose foreign states to liability for state-sponsored cyberattacks targeting UK-based individuals

In this edition we round up FinTech-related financial services regulatory developments for the week ending 7 Aug 2026.

France's Gironde department has replaced human fire lookouts with AI-assisted cameras that can detect forest fires at longer ranges with fewer false alarms. While the technology excels at early fire detection, firefighting itself still requires human crews on the ground, demonstrating a balanced approach where AI enhances rather than replaces critical human work.

The rapid advance of artificial intelligence is creating unprecedented demand for data center capacity, raising complex questions about power availability, regulatory frameworks, and access to finance. This report explores seven critical themes shaping the future of the data centers sector, from geopolitical considerations and behind-the-meter power solutions to emerging partnership models and cybersecurity challenges.

As data centers surge in size, density, and interconnection to meet AI-driven demand, they have evolved into high-value cyber targets that form part of our critical infrastructure. While operators often defer cybersecurity responsibility to tenants, the resilience of the physical plant itself—including power, cooling, backups, and building management systems—remains squarely within operator control, raising urgent questions about shared responsibility and preparedness in an era of escalating thr

The UK's data protection and cyber security landscape is undergoing significant transformation through three major developments: the Cyber Security and Resilience Bill expanding regulatory scope to managed service providers and data centres, the Data (Use and Access) Act 2025 modernising UK GDPR provisions, and the NCSC's voluntary Cyber Governance Code of Practice for boards.