Data privacy & cyber security
March 2026 | SPECIAL REPORT: DATA PRIVACY & CYBER SECURITY
Financier Worldwide Magazine
March 2026 Issue
Q&A: Data centre cyber resilience
As data centres become the backbone of global artificial intelligence and digital transformation, cyber incidents are top of mind. While data centre potential seems limitless, rapid expansion significantly broadens the attack surface. FW discusses data centre cyber resilience with Jon Critelli and Luke Tenery at StoneTurn.
How AI powers cyber crime – and protects against it
Troutman Pepper Locke With the spread of AI-related attacks, security professionals are beginning to implement AI-aid security controls and defences of their own, and organisations are taking advantage of AI in many forms.
Evolving ransomware tactics with AI-enhanced attacks and ransomware as a service
Trowers & Hamlins LLP RaaS operators are targeting a range of industries and organisations – both large and small – and are making the most of developing technologies to do so.
Breaking down NIS2: the five main requirements of the updated NIS Directive
Information Security Forum NIS2 offers a strategy to turn that concern into concrete action, by setting a clear minimum bar for controls, accountability and resilience across sectors.
Regulating AI and enforcing privacy laws through landmark cases and regulatory practice
Haleon Across jurisdictions, regulators have consistently emphasised that AI systems remain fully subject to existing privacy and data protection obligations. Neither technical complexity nor automation reduces legal responsibility.
US state privacy landscape complicates global privacy compliance
WilmerHale The evolving landscape of US state privacy laws presents both challenges and opportunities for organisations navigating data protection requirements. As federal efforts continue to stall, the patchwork of state regulations will remain the primary framework for privacy compliance.
GDPR enforcement: how EU regulators are shaping AI governance
Gibson Dunn Differences in resources, technical expertise and national priorities have produced varying levels of scrutiny and intervention, contributing to a fragmented application of the GDPR in AI-related contexts.
Peru’s new data protection officer: obligations and practical issues
Garrigues Although the DPO has become a common standard in several jurisdictions, for Peruvian companies it represents a recent and complex obligation.
CONTRIBUTORS
Garrigues
Gibson Dunn
Haleon
Information Security Forum
StoneTurn
Troutman Pepper Locke
Trowers & Hamlins LLP
WilmerHale