Insights

London – November 11, 2025: Computer Weekly has named Emma Wright, co-chair of Crowell & Moring’s Privacy and Cybersecurity Group, to its “50 Most Influential Women in UK Tech” list for 2025. The annual list recognizes women who are driving innovation and leadership within the UK technology sector.

London – October 16, 2025: Chambers and Partners has ranked Crowell & Moring U.K. LLP and its lawyers across the United Kingdom as leaders in their respective practice areas in the Chambers UK 2026 Guide.

London – October 14, 2025: Crowell & Moring U.K. LLP has been recommended in five practice areas in the Legal 500 United Kingdom 2026.

Major changes have been proposed to EU AI, data and wider digital laws. On 19th November 2025, the European Union Commission issued its much anticipated Digital Omnibus Regulation Proposal, (the “Digital Omnibus”) and also its Digital Omnibus on AI Regulation Proposal, (the “AI Omnibus”). The mooted changes potentially impact the “Brussels effect” seen post GDPR and add potential complexities to the compliance efforts of businesses.

On 12 November, the highly anticipated Cyber Security and Resilience (Network and Information Systems) Bill (“Bill”) was introduced to Parliament, representing a significant expansion and modernisation of the UK’s cyber security rules. Building on the foundation set by the Network & Information Systems Regulations 2018 (“NIS”), the Bill aims to enhance national security and safeguard essential services. The Department for Science, Innovation and Technology (“DSIT”) has published a policy paper detailing the Bill’s objectives.

The UK’s cyber threat landscape continues to evolve, with the rapid emergence of new technologies introducing novel risks across all sectors and attacks escalating in frequency and sophistication. Regulatory bodies and the UK Government have intensified their focus on cyber security and resilience, as evidenced by the latest National Cyber Security Centre (NCSC) 2025 annual review (Review) and the proposed UK Cyber Security and Resilience Bill (Bill), alongside recent developments in ransomware regulation.