Appears on
Articles6
AI transparency code of practice: what the Commission’s adequacy opinion means for UK businesses
In short: the AI transparency code of practice is now the EU-wide route to demonstrating compliance with Articles 50(2), (4) and (5) of the EU AI Act. The European Commission concluded on 8 July 2026 that the code is adequate, and the AI Board agreed on 9 July 2026. Signing is not a safe harbour,...
Web scraping for AI training: what the EDPB’s draft guidelines mean for UK data controllers
In short: Web scraping for AI training is lawful under the GDPR only where a data controller has a lawful basis for it, and in practice that means the three-part legitimate interest test in Article 6(1)(f). On 8 July 2026 the European Data Protection Board adopted draft guidelines on web scraping for generative AI, out...
APP fraud reimbursement: the evidence after one year
In short: APP fraud reimbursement, mandatory over Faster Payments since 7 October 2024, cut in-scope scam losses by around 21% (about £73m a year) in its first year, the Payment Systems Regulator’s independent evaluation by Frontier Economics found on 1 July 2026. Reimbursement of losses rose from 54% to 65%. A formal consultation follows in...
The Mills Review: AI, autonomy and accountability
In short: The Mills Review, published by the FCA on 6 July 2026, finds that accountability in retail financial services does not shift as AI takes on more of the work. The Senior Managers Regime still applies, firms remain answerable for AI-driven outcomes, and the report sets out seven recommendations for the FCA Board to...
The EU cybersecurity and AI action plan and the UK’s different route
In short: the EU cybersecurity and AI action plan, published by the European Commission on 7 July 2026 (COM(2026) 577 final), sets nine actions to make frontier AI safe for cyber defence, harden critical infrastructure under NIS2 and the Cyber Resilience Act, and build sovereign AI capacity. The UK pursues the same goals without a...
Software licence exhaustion: what ValueLicensing v Microsoft means for resale
In short: Software licence exhaustion is the principle that once a copyright owner has sold a copy of its software, it cannot use copyright to control the resale of that copy. On 7 July 2026, in ValueLicensing v Microsoft [2026] EWCA Civ 872, the Court of Appeal dismissed Microsoft’s appeals and allowed a reseller’s competition...