Skip to content
UK Court of Appeal Ruling on DSG Retail's Data Security Responsibilities

UK Court of Appeal Ruling on DSG Retail's Data Security Responsibilities

First seen 27 Feb 2026, 13:11 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 16:10 UTC

On February 19, 2026, the UK Court of Appeal ruled in the case of DSG Retail Limited v The Information Commissioner, clarifying that a data controller's security obligations extend to all personal data it manages. This decision comes in the context of a cyber attack on DSG's point-of-sale systems that occurred between 2017 and 2018, affecting the company's data security practices.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 213d ago How this analysis works

Timeline

2017-01-01
Cyber attack on DSG Retail's point-of-sale systems began
2018-12-31
Cyber attack on DSG Retail's point-of-sale systems ended
2026-02-19
UK Court of Appeal ruling issued

More articles in this cluster (2)

Following this threat?

Track Covington And Burling in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed