Yindi Gesinde

Cross-border risk has shifted from episodic to systemic. Today, a single trigger can cascade into parallel regulatory inquiries, civil litigation and contractual disputes spanning multiple jurisdictions. As a result, legal and compliance leaders are tasked with responding faster, preserving defensible evidence and protecting business continuity, often while also navigating conflicting rules on data, privilege and disclosure.

In brief On 29 June 2026, section 250 of the Crime and Policing Act 2026 (CPA) enters into force, significantly expanding the scope of corporate criminal liability in the UK. Under the previous regime1, a corporate could be held liable only for specified economic crimes committed by a “senior manager”. The CPA repeals this limitation and extends attribution for all criminal offences.

On 26 November 2025, the Serious Fraud Office (SFO) published updated . The new guidance replaces the previous guidance introduced in January 2020 and sets out six scenarios in which the SFO may assess an organisation’s compliance programme.