Data And Cyber Bulletin - May 2021

Published 27 May 2021

Welcome to the May edition of our Data And Cyber Bulletin.

This month marks the third anniversary of the implementation of the EU GDPR and since then, many millions of euros of fines have been handed out by the various European data protection regulators. With this in mind, we share a summary of the key fines and penalties which have been issued this month (see the tracker here). We also focus on:

The Online Safety Bill

Following last month’s article on the regulatory scrutiny of social media platforms and children’s privacy rights, we discuss the new draft Online Safety Bill which seeks to protect users from harmful online content, with a particular focus on the impact for the insurance market.

Read more

The US Colonial Pipeline Attack

The fallout from the Colonial ransomware attack for the security of critical infrastructure in Europe and the application of the NIS Directive.

Read more

Ireland’s Public Healthcare Body Suffers Major Ransomware Attack

Our Dublin office provides insight into the recent ransomware attack on Ireland’s HSE which has been referred to as “the most serious ever attack on the State’s critical infrastructure.”

Read more

Responding to Ransomware: Education Sector Focus

Noting the significant increase in ransomware attacks which we are advising upon in relation to educational establishments in the UK, we provide guidance on how to navigate such an incident from the perspective of schools, colleges and universities.

Read more

Victim of a Cyber-attack: Key Considerations

We share our suggested key considerations for entities that have fallen victim to a cyber-attack.

Read more

Guest Article: Asceris – We’ve Got Your Data

Last month we promised to deliver guest content from our expert partners and we are pleased to share an article by Asceris (cyber incident response and forensic investigators) addressing threat actor tactics for a successful data heist.

Read more

We hope you enjoy this month’s newsletter.