2nd June 2025
“In this edition of the Technology & Digital round-up we look at key updates on the topics of cyber, AI and data. This is followed by a selection of other interesting legal and non-legal tech stories from the past month.”
If you’d like to receive the Technology & Digital round-up and other similar updates direct to your inbox, please click here.
Get in touch with Luke Jackson, Nick Stubbs, Sally Mewies, Andrew Northage or any member of our Technology & Digital team if you have any queries or need advice or assistance.
Confused about what AI is and how to introduce it into your business? Click here to access our guide to demystifying AI.
The National Cyber Security Centre is urging all businesses to confront the stark reality of the cyber threat they face, to follow official guidance and to redouble their efforts both to defend and prepare for how they would respond if an attack were successful.
On the same day that the government announced that the cyber sector will be a “prime target for economic growth” in the upcoming Industrial Strategy, the government and NCSC launched a new software security code of practice. Described as the first step in establishing clear expectations for a market baseline regarding cybersecurity, the code is relevant for both software vendors and customer organisations and is part of a wider package of cybersecurity codes of practice.
In related news, a new specification from the European Telecommunications Standards Institute is the first global standard that sets minimum security requirements across the entire AI life cycle for all stakeholders in the AI supply chain. A new NCSC report warns that organisations unable to defend AI-enabled threats are exposed to greater cyber risk.
We look at other recent NCSC activity further below.
In other developments, the government is asking for views on the security of enterprise connected devices – devices such as office printers, internet-connected telephones, building entry systems and room booking systems. Recent government-commissioned research found a wide range of serious vulnerabilities across a number of devices commonly used by businesses. Feedback is requested by 7 July 2025.
With AI rarely out of the news these days, we’ve picked out some interesting highlights from the past month.
According to a new survey commissioned by Acas, when asked what they thought was the most important benefit of AI at work, 35% of employers said ‘increased productivity’. Interestingly, only 11% thought that more work would be done with fewer staff. Acas sets out some top tips for employers on the use of AI at work. This includes highlighting how AI can improve workers’ roles and reassuring staff that human involvement will still be needed.
In a related development, a survey commissioned by Henley Business School found that workers are feeling optimistic but overwhelmed when it comes to AI. The survey identifies lack of training as a critical barrier to wider AI adoption. Almost half of respondents said that there were no formal guidelines for AI use at work, adding to the uncertainty. The results also suggest that concerns around job security and automation appear to be easing, with many respondents now focusing on the practical benefits of AI.
We’ve talked before about the rise of ‘agentic AI’, autonomous AI systems that can make decisions and perform actions with minimal human intervention. Google recently announced the integration of AI Mode into its search engine. Available currently to US users, AI Mode is described as Google’s most powerful AI search, with more advanced reasoning and multimodality, and the ability to go deeper through follow-up questions and helpful links to the web. Agentic AI features will help users get tasks done quicker, such as purchasing tickets and acting as a ‘shopping partner’ to find and pay for the perfect products (you can even try on clothes virtually, for example, as part of the experience).
In other news, following the UK’s recent new deal with the EU, the government announced plans to supercharge AI collaboration across Europe.
“With more and more businesses looking to integrate AI into their operations, making sure the right policies and procedures are in place, and educating staff, will be key. As we’re seeing with the rise of agentic AI, the technology is advancing at pace. Having those core measures in place, which can then be adapted to keep pace with developments, is essential.”
The Data (Use and Access) Bill is edging towards becoming law. The Bill is at the ‘ping-pong’ stage, with amendments going back and forth between the House of Commons and the House of Lords. The House of Commons recently rejected proposed amendments relating to AI copyright, a topic which continues to be intensely debated. The Technology Secretary said that pitting the AI and creative sectors against each other is “unnecessarily divisive and damages both” and that the Bill was never intended to be about this issue, which “needs properly considered and enforceable legislation”. A series of expert working groups is being set up “to bring together people from both sectors on the issues of transparency, licensing and other technical standards to chart a workable way forward”. Critics are concerned that separate legislation will come too late. Watch this space.
In other news, the Information Commissioner’s Office is consulting until 24 June 2025 on draft updated guidance on encryption. The ICO is updating the guidance to follow its ‘must, should, could’ framework to be clearer on which encryption measures it expects organisations to implement. It has also updated the ‘encryption in practice’ section to reflect the current state of technology, especially HTTPS, which it expects all organisations to use.
And in a statement on the ransomware attack that affected the British Library in 2023, the ICO reiterated that organisations must take proactive steps to assess and mitigate risks against cyberattacks, such as implementing comprehensive multifactor authentication (or an equivalent measure), regularly scanning for vulnerabilities and keeping systems up to date with the latest security patches.
“These developments highlight how intertwined the topics of data, AI and cyber have become. Our multidisciplinary team of experts is here to help you navigate the complexities of this evolving landscape. Please get in touch.”
If you have queries about any of the points covered in this edition of the Technology & Digital round-up, or need further advice or assistance, please get in touch with Luke, Nick, Sally, Andrew or one of our Technology & Digital experts.
Want to watch a previous webinar? Visit our digital academy, home to a library of digital content including webinars, our bite-sized video nuggets and podcasts, including our 60 second videos on what is an NFT and what is a blockchain.
Want to learn more from our Technology & Digital experts and be the first to receive important updates, developments and events from the team? Then visit our #WMTechTalk page or sign up for our newsletter, the Technology & Digital round-up here.
“We’ve seen a flurry of activity from the National Cyber Security Centre over the past month as the issue of cybersecurity continues to hit the headlines. The recent high-profile cyberattacks on a number of major retailers are a reminder of the ever-present threat facing all businesses.”
– Nick Stubbs, Partner, Commercial