Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Amber Strickland
Cyber Security And Resilience Bill: What's The Latest And What Should Businesses Do Now?
A board-level issue, managing cyber risk is now recognised as a business resilience necessity carrying operational, regulatory, financial, and reputational exposure and, at worst, existential threat. The numbers tell their own story. According to the UK Government's Cybersecurity Breaches Survey 2025/26, 43% of businesses identified a cyber security breach or attack in the previous 12 months.
How to strengthen supply chain security in retail: from contractual controls to operational resilience
Cyber Resilience Programme activities techUK brings together key players across the cyber security sector to promote leading-edge UK capabilities, build networks and grow the sector. techUK members have the opportunity to network, share ideas and collaborate, enabling the industry as a whole to address common challenges and opportunities together. Visit the programme page here.
Court Confirms Broad Data Security Duty: Controllers Must Protect Against Third-party "Jigsaw" Identification
Loretta Pugh’s articles from Gowling WLG are most popular: within Privacy topic(s) with Inhouse Counsel in United Kingdom with readers working within the Banking & Credit, Media & Information and Pharmaceuticals & BioTech industries In DSG Retail Limited -v- The Information Commissioner [2026] EWCA Civ 140, the Court of Appeal delivered a landmark judgment (19 February 2026) clarifying the scope of the security duty imposed on data controllers under data protection law.
Court confirms broad data security duty: controllers must protect against third-party "jigsaw" identification
In DSG Retail Limited -v- The Information Commissioner [2026] EWCA Civ 140, the Court of Appeal delivered a landmark judgment (19 February 2026) clarifying the scope of the security duty imposed on data controllers under data protection law.
The UK Cyber Security And Resilience Bill And What It Means For Your Business
Gowling WLG are most popular: within Wealth Management topic(s) with Senior Company Executives, HR and Inhouse Counsel with readers working within the Healthcare industries The Cyber Security and Resilience (Network and Information Systems) Bill (the Bill) was introduced to Parliament on 12 November 2025. Once it becomes law, it will bring significant change to the UK's cyber legislative framework.
The UK Cyber Security and Resilience Bill and what it means for your business
The Cyber Security and Resilience (Network and Information Systems) Bill (the Bill) was introduced to Parliament on 12 November 2025. Once it becomes law, it will bring significant change to the UK's cyber legislative framework. This landmark reform aims to strengthen national security, protect critical infrastructure and address the escalating threat of cyberattacks that cost the UK economy an estimated £14.7 billion annually.
Cybersecurity: Are You Prepared To Report Ransom Payments?
Gowling WLG are most popular: within Wealth Management and Compliance topic(s) with Senior Company Executives, HR and Finance and Tax Executives with readers working within the Healthcare industries In this insight, we explore the UK's proposed ransomware legislation and what it could mean for organisations. We look at three key proposals: a potential ban on ransom payments, a regime to prevent payments under certain conditions, and mandatory incident reporting.
Cybersecurity Are you prepared to report ransom payments
In this insight, we explore the UK’s proposed ransomware legislation and what it could mean for organisations. We look at three key proposals: a potential ban on ransom payments, a regime to prevent payments under certain conditions, and mandatory incident reporting. The article also considers how these changes could affect cyber response planning, legal risk, and business continuity.
Cyber Resilience Essentials - How To Implement Effective Organisational Measures
One overlooked policy. One untrained employee. One phishing email. That's all it takes. Are you prepared? In today's hyper-connected world, organisations face a constantly evolving landscape of cyber threats. From phishing to ransomware attacks, the vulnerabilities are endless. But often, the most significant cybersecurity risk is not an IT issue – it is the human element. Whether through lack of knowledge or a moment of carelessness, individual employees can unintentionally open the door to criminals.
Product Cybersecurity: How to comply with UK and EU law
Introduction Recently, both the UK and EU have introduced legislation with the aim of enhancing the cybersecurity of certain digital products. The UK enacted the Product Security and Telecommunications Infrastructure Act 2022 and the Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023 (PSTI). The EU's equivalent is the Cyber Resilience Act 2024 (EU CRA).
Data Protection In A Quantum Enabled Future
Quantum computing is advancing rapidly. Whilst there is potential for ground breaking developments in technology, such as quantum sensing in the medical field, this new era also brings significant risks, particularly for data security. Quantum computers (QC) threaten to render many of our current cryptographic methods obsolete. The unparalleled processing power of QC will lead to decryption of data protection by traditional cryptographic measures.
Data protection in a quantum enabled future
Quantum computing is advancing rapidly. Whilst there is potential for ground breaking developments in technology, such as quantum sensing in the medical field, this new era also brings significant risks, particularly for data security. Quantum computers (QC) threaten to render many of our current cryptographic methods obsolete. The unparalleled processing power of QC will lead to decryption of data protection by traditional cryptographic measures.
Cyber Data Resilience In Retail: How To Improve Risk Management Processes
With huge growth in e-commerce in recent years and the number and type of digital touchpoints and digital services to consumers growing, the need for robust cybersecurity risk management strategy remains critical in the retail sector. UK online sales accounted for 27% of total retail sales in 20241 and this is projected to increase in 2025, reflecting the continued shift towards digital shopping platforms.
Cyber data resilience in retail: how to improve risk management processes
With huge growth in e-commerce in recent years and the number and type of digital touchpoints and digital services to consumers growing, the need for robust cybersecurity risk management strategy remains critical in the retail sector. UK online sales accounted for 27% of total retail sales in 2024[1] and this is projected to increase in 2025, reflecting the continued shift towards digital shopping platforms.
Top Five Data And Cyber Security Issues For Pension Scheme Trustees To Be Aware Of In 2025
In this article we provide an overview of some of the most significant data and cyber security issues for pension scheme trustees, details on the latest legislation in these areas, and essential information that trustees need to know to manage these risks as they continue to evolve. Most trustees will already be well advanced with their projects to comply with the Pensions Regulator's General Code of Practice (General Code).
Top five data and cyber security issues for pension scheme trustees to be aware of in 2025
In this article we provide an overview of some of the most significant data and cyber security issues for pension scheme trustees, details on the latest legislation in these areas, and essential information that trustees need to know to manage these risks as they continue to evolve. 1. Cyber and General Data Protection Regulation (GDPR) risk management Most trustees will already be well advanced with their projects to comply with the Pensions Regulator's General Code of Practice (General Code).
What Are The Top Five Six Data Protection Developments For 2025?
We are celebrating Data Privacy Day (28 January 2025) by reflecting on the evolving landscape of data protection. In the coming year, organisations will face significant shifts across the realm of data privacy from legislation and Artificial Intelligence (AI) to cybersecurity and the growing risk of data related group litigation.
Data And Cyber School: Essential Guide To Cyber Insurance
GW Gowling WLG More Gowling WLG is an international law firm built on the belief that the best way to serve clients is to be in tune with their world, aligned with their opportunity and ambitious for their success. Our 1,400+ legal professionals and support teams apply in-depth sector expertise to understand and support our clients’ businesses. As cyber threats increase, cyber insurance is essential for businesses.
Data And Cyber School: Beware Of Business Email Compromise
Estimated to result in worldwide losses in the millions every year, invoice fraud and business email compromise are scams which should now be identified in every cyber security risk register. The key legal problem arising from such scams is: who bears the responsibility when an email address is hacked and money is unwittingly sent to a fraudster?
The ripple effect of data breaches - the importance of empathy when notifying individuals
The Information Commissioner’s Office (ICO) this week is raising awareness about the “ripple effect” of data breaches on individuals’ lives. John Edwards, Information Commissioner, shares on the ICO blog examples of how data breaches can expose individuals’ sensitive information, leading to stigma, discrimination or physical danger, particularly for those who are vulnerable. Examples of real scenarios where the effects of data breaches can be life-altering are shared by the ICO.
Email heist: Beware of business email compromise
Estimated to result in worldwide losses in the millions every year, invoice fraud and business email compromise are scams which should now be identified in every cyber security risk register. The key legal problem arising from such scams is: who bears the responsibility when an email address is hacked and money is unwittingly sent to a fraudster?
Data & Cyber School: Do You Know How To Deal With A Cyber Incident?
You are probably sick of hearing that a cyber incident is now an inevitability – it's "when – and not if". A cyber incident extends beyond a cyber attack and includes for example, a denial-of-service incident arising from a flood of traffic taking down a website. Our 5th space of warfare article shares guidance on how to avoid, manage and respond to a cyber incident and focuses on technical response.
Data & cyber school: do you know how to deal with a cyber incident?
You are probably sick of hearing that a cyber incident is now an inevitability – it's "when – and not if". A cyber incident extends beyond a cyber attack and includes for example, a denial-of-service incident arising from a flood of traffic taking down a website. Our 5th space of warfare article shares guidance on how to avoid, manage and respond to a cyber incident and focuses on technical response.
Data & Cyber School: The 5th Space Of Warfare - How To Shield Your Cyber Space
Cyber space is increasingly recognised as the fifth domain of warfare, with rising numbers of attacks by organised crime, hackers and state actors exploiting technological vulnerabilities. Businesses must prioritise cyber security, implementing cyber incident response plans to act swiftly during incidents to minimise damage and regulatory risks. Our 'data and cyber school' series explores the importance of cyber security and the blockades businesses can put in place to minimise breaches.
Data & Cyber School: An Essential Guide To 'Alerting The Affected' When Managing Data Breach Notifications
GW Gowling WLG More Gowling WLG is an international law firm built on the belief that the best way to serve clients is to be in tune with their world, aligned with their opportunity and ambitious for their success. Our 1,400+ legal professionals and support teams apply in-depth sector expertise to understand and support our clients’ businesses. This article outlines UK GDPR notification procedures following a personal data breach.
Data And Cyber School: Top Tips On Dealing With Data Subject Access Requests
Managing data security, compliance and cyber risk are key topics for any company board – especially as technology evolves and the business and regulatory environment changes apace. Staying ahead of developments is crucial for any organisation as it looks to grow its business, manage potential risks and demonstrate good governance.
Data & cyber school: an essential guide to 'alerting the affected' when managing data breach notifications
In the event of a personal data breach, organisations face critical responsibilities regarding notification procedures. Primarily, there is a legal obligation under the UK General Data Protection Regulation (GDPR) to inform the Information Commissioner's Office (ICO) of a personal data breach under specific circumstances. Additionally, in cases where the breach is likely to result in a high risk to the rights and freedoms of individuals, organisations must also notify the affected data subjects.
Data & cyber school: an essential guide to 'alerting the affected' when managing data breach notifications
In the event of a personal data breach, organisations face critical responsibilities regarding notification procedures. Primarily, there is a legal obligation under the UK General Data Protection Regulation (GDPR) to inform the Information Commissioner's Office (ICO) of a personal data breach under specific circumstances. Additionally, in cases where the breach is likely to result in a high risk to the rights and freedoms of individuals, organisations must also notify the affected data subjects.
Data centres: Managing the cyber resilience of the newest form of critical digital infrastructure
On 12 September 2024 the UK government announced that data centres will be added to the Critical National Infrastructure (CNI) regime. This means that data centres are now grouped with energy, water, finance and healthcare systems, all of which are already classed as CNI. This new designation, the first in 10 years, marks political recognition of the growing importance of data infrastructure for the UK, as the backbone of the economy, health services, financial services, public services and more.
Exploring The Legal Ramifications Of Delays In IT Projects - Insights Into TCS v DBS (Part Four)
Welcome to 'Insights from TCS v DBS' – a four-part series providing an in-depth look at the judgment handed down in Tata Consultancy Services Ltd v Disclosure and Barring Service [2024] EWHC 1185 (TCC) (17 May 2024). In the final article of this series, we focus on TCS's claim for £77 million of lost revenue and the distinction between wasted expenditure and lost profits in exclusion clauses. See part three for our discussion on the liability cap.
Exploring The Legal Ramifications Of Delays In IT Projects - Insights Into TCS v DBS (Part Three)
Welcome to 'Insights from TCS v DBS' four-part series providing an in-depth look at the judgment handed down in; Tata Consultancy Services Ltd v Disclosure and Barring Service [2024] EWHC 1185 (TCC) (17 May 2024). In the second article of the series, we looked at the court's decision on partial termination and when a breach is capable of remedy under the contract.
How well equipped is your organisation to respond to a Data Subject Access Request (DSAR)?
Managing data security, compliance and cyber risk are key topics for any company board – especially as technology evolves and the business and regulatory environment changes apace. Staying ahead of developments is crucial for any organisation as it looks to grow its business, manage potential risks and demonstrate good governance.
Exploring The Legal Ramifications Of Delays In IT Projects - Insights Into TCS v DBS (Part Two)
Welcome to 'Insights from TCS v DBS' – a four-part series providing an in-depth look at the judgment handed down in Tata Consultancy Services Ltd v Disclosure and Barring Service [2024] EWHC 1185 (TCC) (17 May 2024). In the first article of the series, we looked at the judicial focus on delay and notice provisions, conditions precedent, compliance and the importance of contractual language, and estoppel.
Delays in IT Projects: Insights from the TCS v DBS series - part three
Limitation of liability Welcome to 'Insights from TCS v DBS' four-part series providing an in-depth look at the judgment handed down in; Tata Consultancy Services Ltd v Disclosure and Barring Service [2024] EWHC 1185 (TCC) (17 May 2024). In the second article of the series, we looked at the court's decision on partial termination and when a breach is capable of remedy under the contract.
Delays in IT Projects: Insights from the TCS v DBS series - part four
Exclusion and "loss of anticipated savings" Welcome to 'Insights from TCS v DBS' – a four-part series providing an in-depth look at the judgment handed down in Tata Consultancy Services Ltd v Disclosure and Barring Service [2024] EWHC 1185 (TCC) (17 May 2024). In the final article of this series, we focus on TCS's claim for £77 million of lost revenue and the distinction between wasted expenditure and lost profits in exclusion clauses. See part three for our discussion on the liability cap.
Exploring The Legal Ramifications Of Delays In IT Projects - Insights Into TCS V DBS (Part One)
Welcome to 'Insights from TCS v DBS' – a four-part series providing an in-depth look at the judgment handed down in Tata Consultancy Services Ltd v Disclosure and Barring Service [2024] EWHC 1185 (TCC) (17 May 2024). In the first article of this series, we look at the judicial focus on delay and notice provisions, conditions precedent, compliance and the importance of contractual language, and estoppel.
Exploring the Legal Ramifications of Delays in IT Projects - Insights into TCS v DBS (part one)
Notices in delay regimes (conditions precedent and estoppel). Welcome to 'Insights from TCS v DBS' – a four-part series providing an in-depth look at the judgment handed down in Tata Consultancy Services Ltd v Disclosure and Barring Service [2024] EWHC 1185 (TCC) (17 May 2024). In the first article of this series, we look at the judicial focus on delay and notice provisions, conditions precedent, compliance and the importance of contractual language, and estoppel.
Are You Meeting New, Enhanced UK Cyber Security Requirements For Consumer "Smart" Products?
If your business manufactures, imports or distributes consumer "smart" products in the UK, your product cyber security regime should be reviewed in light of new, enhanced UK law in force from 29 April 2024. Businesses in the supply chain of internet of things (IoT) devices must conform with upgraded UK product security standards. Product design, manufacturing and documentation processes must all be assessed for conformity.
Are you meeting new, enhanced UK cyber security requirements for consumer "smart" products?
If your business manufactures, imports or distributes consumer "smart" products in the UK, your product cyber security regime should be reviewed in light of new, enhanced UK law in force from 29 April 2024. Businesses in the supply chain of internet of things (IoT) devices must conform with upgraded UK product security standards. Product design, manufacturing and documentation processes must all be assessed for conformity.
Cyber Security For Pension Scheme Trustees: How To Protect Your Scheme And What To Do When The Worst Happens? (Video)
GW Gowling WLG More Gowling WLG is an international law firm built on the belief that the best way to serve clients is to be in tune with their world, aligned with their opportunity and ambitious for their success. Our 1,400+ legal professionals and support teams apply in-depth sector expertise to understand and support our clients’ businesses.
Cyber security for pension scheme trustees: how to protect your scheme and what to do when the worst happens?
Click here to watch the video This second session will consider how trustees can move beyond compliance with the regulatory requirements to adopt robust processes to address cyber threats, what happens when incidents occur and how to deal with third parties from a cyber security and data perspective. We will be focussing on practical steps trustees can take to improve their position.
Five Tips To Avoid, Manage And Respond To A Cyber Attack
The digitisation of businesses and the increasing reliance on technology for core business operations has heightened the risk of a cyber attack. In fact, in this day and age, it's a matter of when – and not if – a cyber attack will take place. A cyber attack can cause significant financial loss, intellectual property theft, disruption to business services and can also damage investor and consumer confidence in a particular organisation.
Five tips to avoid, manage and respond to a cyber attack
The digitisation of businesses and the increasing reliance on technology for core business operations has heightened the risk of a cyber attack. In fact, in this day and age, it's a matter of when – and not if – a cyber attack will take place. A cyber attack can cause significant financial loss, intellectual property theft, disruption to business services and can also damage investor and consumer confidence in a particular organisation.
British Airways data breach compensation claim settled
Earlier this week, British Airways (BA) settled a legal claim brought by some of the 420,000 people affected by a major 2018 data breach. The BA compensation claim is known to be the largest personal data claim in UK history. Whilst details of the settlement are confidential, the size of the class that opted-in and therefore the potential sum BA may have paid in settlement, illustrates the risks of potential mass data breach claims to companies who experience cyber security incidents.
COVID-19 And Senior Living: What Approach Should You Take With Staff To Increase Vaccinations? - Coronavirus (COVID-19) - UK
UK: COVID-19 And Senior Living: What Approach Should You Take With Staff To Increase Vaccinations? 03 February 2021 by Vivienne Reeve , Amber Strickland , Martin Chitty and Andrew Litchfield Gowling WLG Your LinkedIn Connections with the authors To print this article, all you need is to be registered or login on Mondaq.com.
Getting Employees Back To Work During COVID-19: What To Think About From A Legal And Practical Point Of View?
Mondaq Ltd requires you to register and provide information that personally identifies you, including your content preferences, for three primary purposes (full details of Mondaq’s use of your personal data can be found in our Privacy and Cookies Notice): Mondaq hopes that our registered users will support us in maintaining our free to view business model by consenting to our use of your personal data as described below. Mondaq has a "free to view" business model.
How Will Automotive Production Restart After COVID-19 Lockdown?
Mondaq Ltd requires you to register and provide information that personally identifies you, including your content preferences, for three primary purposes (full details of Mondaq’s use of your personal data can be found in our Privacy and Cookies Notice): Mondaq hopes that our registered users will support us in maintaining our free to view business model by consenting to our use of your personal data as described below. Mondaq has a "free to view" business model.
Legal Implications Of COVID-19 On Your UK Business (Video)
To print this article, all you need is to be registered or login on Mondaq.com. Amidst these uncertain times, many businesses find themselves face to face with significant challenges which cause major disruptions and carry various legal implications.
How Can Employers Discharge Their Duty To Protect The Health, Safety And Welfare Of Employees Who Are Still Working In The Workplace?
To print this article, all you need is to be registered or login on Mondaq.com. COVID-19 is a new risk. Our understanding of it and of the measures that need to be taken to manage it are evolving all the time, as is the guidance issued by the Government and public health bodies.
How Can Employers Discharge Their Duty To Protect The Health, Safety And Welfare Of Employees Who Are Working From Home?
To print this article, all you need is to be registered or login on Mondaq.com. The coronavirus (COVID-19) needs no introduction and, as the pandemic continues to spread extensively, it poses significant challenges to employers and to their employees. On Monday 15 March, Boris Johnson announced at a press conference: "Now is the time for everyone to stop non-essential contact with others and to stop all unnecessary travel.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Amber
Contact Amber, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack