Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 14 JUNE 2024

UK Requests Views On Two New Codes Of Practice To Boost Cybersecurity In AI Models And Software

Finnegan, Henderson, Farabow, Garrett & Dunner LLP
Finnegan, Henderson, Farabow, Garrett & Dunner LLP
Contributor
Finnegan, Henderson, Farabow, Garrett & Dunner LLP

Finnegan, Henderson, Farabow, Garrett & Dunner LLP

Finnegan, Henderson, Farabow, Garrett & Dunner LLP is one of the world’s largest firms focusing on...

View firm profile
Explore more from Finnegan, Henderson, Farabow, Garrett & Dunner LLP

The UK government announced two voluntary cybersecurity codes of practice for AI models and software as part of its £2.6 billion National Cyber Strategy. Public consultations on these codes will run until 9 August 2024, aiming to enhance AI security and resilience.

United KingdomTechnology
Nessa Khandaker
Nessa Khandaker
Lynn Parker Dupree
Lynn Parker Dupree
Author LinkedIn connections

On 15 May 2024, the UK government announced two new voluntary codes of practice with the aim of improving cybersecurity in AI models and software. The two new proposals are part of the government's £2.6 billion National Cyber Strategy to increase cybersecurity and resilience. The UK government is seeking views from industry and the public on each of these codes of practice through two public consultations, each running between 15 May and 9 August 2024.

AI CyberSecurity Code of Practice and International Standard 

The AI industry in the UK contributes £3.7 billion to the economy as it brings innovation to many sectors, such as transport, agriculture, and crime prevention. Whilst developers continue to explore the ever-evolving capabilities of AI, AI is vulnerable to being exploited, which could result in increased privacy breaches and the loss of data.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

The UK Cyber Security And Resilience Bill: What You Need To Know

The UK Government has introduced the Cyber Security and Resilience Bill to address critical gaps in existing cyber security regulations, expanding coverage to data centres, managed service providers, and critical suppliers while granting regulators enhanced enforcement powers. With tightened incident reporting deadlines, turnover-based penalties up to £17 million, and mandatory supply chain resilience measures, organisations across essential services sectors must assess their readiness for compliance
United KingdomTechnology
Browne Jacobson LLP
Browne Jacobson LLP
Article

EDPB统一DPIA模板落地：欧盟数据合规正从“程序评估”走向“设计问责”

The European Data Protection Board has released a unified DPIA template for public consultation, marking a significant shift from fragmented national practices to coordinatead EU-wide compliance. This standardization effort aims to transform data protection impact assessments from procedural documents into substantive design accountability tools, requiring organizations to demonstrate not just that they conducted assessments, but that their processing activities can withstand rigorous evaluation.
European UnionTechnology
Jincheng Tongda & Neal
Jincheng Tongda & Neal
Article

EU Cyber Resilience Act: First Reporting Obligations Take Effect Today

The EU Cyber Resilience Act introduces mandatory reporting obligations for manufacturers of digital products starting September 11, 2026. What vulnerabilities and incidents must be reported, how quickly must notifications be made, and what are the consequences for non-compliance? Understanding these requirements is crucial for manufacturers and their customers as the regulatory landscape for cybersecurity evolves.
European UnionTechnology
Slaughter and May
Slaughter and May
Article

Updates On Export Controls Impacting AI & Advanced Computing

The U.S. Department of Commerce's Bureau of Industry and Security issued guidance on May 31, 2026, clarifying licensing requirements for advanced computing items and AI technologies. The guidance maintains export restrictions for entities in certain countries while providing limited relief for data center operators, though questions remain about future regulatory direction. Companies must now strengthen their compliance programs and supply-chain due diligence as BIS continues to prioritize national security
GlobalInternational Law
Finnegan, Henderson, Farabow, Garrett & Dunner LLP
Finnegan, Henderson, Farabow, Garrett & Dunner LLP
Article

Blaker V. NetScout Systems: A Narrow Reading Of The Pen Register And Trap And Trace Provisions Of The California Invasion Of Privacy Act In California State Court

On May 27, 2026, the Superior Court of California held that subdivision (a) of California Penal Code § 638.51 does not apply to software on commercial websites. Plaintiff Brian Blaker sued Defendant NetScout, Inc., alleging the Defendant had violated § 638.51 of the California Invasion of Privacy Act by implementing a software development kit (SDK) on its website.
United StatesPrivacy
Finnegan, Henderson, Farabow, Garrett & Dunner LLP
Finnegan, Henderson, Farabow, Garrett & Dunner LLP
Article

D. Mass. Patent Litigation Update: August 2026

Recent patent litigation orders from the United States District Court for the District of Massachusetts reveal critical claim construction disputes and discovery rulings that shape the boundaries of patent enforcement. How do courts balance claim definiteness requirements with the practical realities of patent scope, and what standards govern third-party discovery in indirect infringement cases?
United StatesIntellectual Property
Finnegan, Henderson, Farabow, Garrett & Dunner LLP
Finnegan, Henderson, Farabow, Garrett & Dunner LLP
Article

Privacy Law Mid-Year Update: Key EU And UK Data Protection Decisions

Recent EU and UK court decisions have reshaped the landscape of data protection compliance, clarifying critical boundaries around consent, data subject rights, cybersecurity obligations, and children's privacy. These rulings demonstrate that organizations must move beyond formal compliance to embed proportionality, accountability, and risk-based decision-making into their data processing activities, even when disclosures are legally required or supported by valid legal bases.
GlobalPrivacy
Finnegan, Henderson, Farabow, Garrett & Dunner LLP
Finnegan, Henderson, Farabow, Garrett & Dunner LLP
Article

Finding A Lack Of Bona Fide Use, TTAB Affirms Cancellation Of Everwise Credit Union Registration Under The Lanham Act’s Reexamination Procedure

The Trademark Trial and Appeal Board's precedential decision in In re Everwise Credit Union examines whether a credit union's use of its mark constituted bona fide commercial use or merely token use designed to reserve trademark rights. The case centers on whether Everwise Credit Union had actually used its mark in commerce by the deadline to file its Statement of Use, or whether the mark's appearance on its website was simply a placeholder for a future rebrand that occurred two months later.
United StatesIntellectual Property
Finnegan, Henderson, Farabow, Garrett & Dunner LLP
Finnegan, Henderson, Farabow, Garrett & Dunner LLP
Article

D. Mass. Patent Litigation Update: June 2026

A Massachusetts district court grants a joint motion to stay proceedings while the parties conduct venue discovery and brief a motion to dismiss or transfer in a patent infringement case between Advanced Surgical Concepts Limited and Intuitive Surgical, Inc. The order establishes specific parameters for discovery scope and briefing schedule before other case deadlines resume.
United StatesLitigation, Mediation & Arbitration
Finnegan, Henderson, Farabow, Garrett & Dunner LLP
Finnegan, Henderson, Farabow, Garrett & Dunner LLP
Article

Staying True To The Specification: Federal Circuit Vacates Preliminary Injunction Based On Unsupported Claim Constructions

The Federal Circuit vacated a preliminary injunction in a patent infringement case involving electrical outlet cover products, finding that the district court made critical errors in its claim construction analysis. The appellate court determined that the lower court improperly imposed unsupported limitations on key patent terms and incorrectly applied a presumption of irreparable harm.
United StatesIntellectual Property
Finnegan, Henderson, Farabow, Garrett & Dunner LLP
Finnegan, Henderson, Farabow, Garrett & Dunner LLP