In early 2023, it appeared that there would be a greater emphasis on legislation, regulation, and enforcement related to the use of personal information and data protection in a growing threat environment. In 2023, both threat actors and regulators introduced new challenges for technology and legal teams. Simultaneously, these teams are managing the utilisation of rapidly advancing artificial intelligence applications while addressing the security, legal, and associated risks that come with it.

In a recently published article, authors John P. Carlin et al. analyse ten significant developments of 2023 that have led to a more intricate legal and data security environment. These developments have compelled business leaders to allocate more resources and attention to strengthen their defences and ensure compliance with an expanding set of legal obligations. The authors anticipate a sustained surge of activity in 2024.