At the recent Artificial Intelligence (AI) Action Summit in Paris, the UK and the United States refused to sign an international declaration advocating for “inclusive and sustainable” AI development.

60 Other Nations Signed It

With 60 other nations (including China, France, India, and Canada) endorsing the agreement, the absence of two major AI powerhouses has ignited some debate over regulation, governance, and the global AI market’s future.

The Paris AI Summit and The Declaration

The AI Action Summit, held on 10–11 February, brought together representatives from over 100 countries to essentially discuss AI’s trajectory and the need for ethical, transparent, and sustainable frameworks. The summit concluded with a declaration designed to guide AI development responsibly. The key principles of this declaration include:

– Openness and inclusivity. Ensuring AI development is accessible and equitable across different nations and communities.

– Ethical standards. Establishing guidelines that uphold human rights and prevent AI misuse.

– Transparency. Mandating clear AI decision-making processes and accountability.

– Safety and security. Addressing risks related to AI safety, cybersecurity and misinformation.

– Sustainability. Recognising the growing energy demands of AI and the need to mitigate its environmental impact.

The declaration emphasised the importance of global cooperation to prevent market monopolisation, reduce digital divides, and ensure AI benefits humanity as a whole. However, despite broad support, both the US and UK opted out of signing.

A Hands-Off Approach to Regulation For The US

US Vice President JD Vance delivered a fairly candid speech at the summit (his first major speech overseas in government), making clear that the Trump administration favours minimal AI regulation. For example, Vance warned that “Excessive regulation of the AI sector could kill a transformative industry just as it’s taking off”. He also criticised Europe’s approach, particularly the EU’s stringent AI Act and other regulatory frameworks like the Digital Services Act (DSA) and General Data Protection Regulation (GDPR), arguing that they create “endless legal compliance costs” for companies.

Vance’s remarks positioned the US as a clear advocate for innovation over restrictive oversight, stating, “We need international regulatory regimes that foster the creation of AI technology rather than strangle it.” He also expressed concerns that content moderation could lead to “authoritarian censorship,” a nod to the ongoing debates over misinformation and AI’s role in shaping public discourse.

Also, Vance (more subtly) warned against international partnerships with “authoritarian” nations (i.e. basically implying China) by stating that working with such regimes risked “chaining your nation to an authoritarian master that seeks to infiltrate, dig in, and seize your information infrastructure.” Some critics of Trump’s government in the US may have found this remark to be ironic given Trump’s past praise for authoritarian leaders and his administration’s own controversies regarding misinformation, media control, and political influence over tech and AI regulation.

Concern

US Vice President JD Vance’s speech at the Paris AI Action Summit was met with a mix of concern and criticism from European leaders. Vance’s strong stance against European AI regulations and his emphasis on an “America First” approach to AI development seemed to highlight quite a significant policy divergence between the US and its European allies. French President Emmanuel Macron and European Commission President Ursula von der Leyen responded by advocating for a balanced approach that fosters innovation while ensuring ethical standards, underscoring the contrasting perspectives on AI governance.

Why Didn’t The UK Sign?

The UK government’s stated reasons for not signing the declaration were its concerns over national security and AI governance. The UK was represented at the AI Action Summit in Paris by Tech Secretary Peter Kyle, with Prime Minister Keir Starmer opting not to attend. On the decision not to sign the summit’s AI declaration, a spokesperson for Starmer said the UK would “only ever sign up to initiatives that are in the UK’s national interest.” While the government agreed with much of the declaration, they argued it lacked practical clarity on global governance and failed to sufficiently address national security concerns.

A Downing Street spokesperson has also been reported as saying, “We felt the declaration didn’t provide enough practical clarity on global governance, nor sufficiently address harder questions around national security and the challenge AI poses to it.”

While the UK has previously championed AI safety, hosting the first-ever AI Safety Summit in November 2023, critics have argued that its refusal to sign the Paris declaration could now undermine its credibility as a leader in ethical AI development. For example, Andrew Dudfield, head of AI at fact-checking organisation Full Fact, has warned, “By refusing to sign today’s international AI Action Statement, the UK Government risks undercutting its hard-won credibility as a world leader for safe, ethical, and trustworthy AI innovation.”

Are The Real Reasons For Not Signing Geopolitical?

All that said, some analysts have argued that economic and geopolitical factors (rather than concerns about governance) may actually be the driving forces behind the US and UK’s decision. For example, by not signing the declaration, both countries retain the freedom to shape AI policy on their own terms, thereby potentially allowing domestic companies to operate with fewer regulatory constraints and gain a competitive edge in AI markets.

The decision may also be seen as aligning with broader economic policies. For example, the Trump administration has pledged significant investment in AI infrastructure, including a $500 billion private sector initiative to enhance US AI capabilities. Meanwhile, UK AI industry leaders, such as UKAI (a trade body representing AI businesses), have cautiously welcomed the government’s stance, arguing that AI’s energy demands must be balanced with environmental responsibilities.

However, some political voices in the UK have suggested that the UK has little room for manoeuvre but to align with the US, e.g. for fear of losing engagement from major US AI firms if it adopted a restrictive approach.

The Implications for AI in the US and UK

The refusal to sign the Paris declaration could have some serious effects on the AI landscape in both countries. These could include, for example:

– Regulatory divergence. The US and UK are likely to diverge further from the EU’s AI regulatory approach, which could create complexities for companies operating in multiple jurisdictions.

– Market positioning. AI firms in these countries may benefit from a less regulated environment, attracting more investment and talent.

– Global cooperation. The lack of a unified stance could complicate international efforts to set AI standards, leading to regulatory fragmentation.

– Public perception and trust. Concerns over AI safety and misinformation could be exacerbated, potentially undermining public trust in AI systems developed in more lightly regulated markets.

The Possible Impact on the AI Market and Business Users

For businesses trying to get the benefits of leveraging AI, these developments could signal both opportunities and challenges, such as:

– Regulatory uncertainty. Companies may need to navigate a fragmented regulatory landscape, balancing compliance in stricter jurisdictions like the EU with more flexible environments in the US and UK.

– Competitive advantage. Firms operating in the US and UK may see accelerated innovation and reduced compliance costs, while those in heavily regulated regions may struggle to keep pace.

– Investment trends. Investors might favour jurisdictions with fewer regulatory barriers, shifting funding patterns in the AI sector.

A Growing Divide

The refusal of the UK and US to sign the Paris AI declaration essentially highlights a growing global divide over AI regulation. For example, while Europe and other signatories are pushing for stringent oversight to ensure ethical and sustainable AI, the US and UK appear to be prioritising market-driven approaches that foster innovation with fewer constraints. As AI continues to shape industries and societies, this divergence in policy is likely to significantly influence the future of AI governance, business strategy, and global competitiveness.

What Does This Mean For Your Business?

The decision by the UK and US to abstain from signing the Paris AI declaration reveals the fundamental and growing divergence in global AI governance. While Europe and other signatories advocate for regulatory frameworks designed to ensure ethical, transparent, and sustainable AI development, the UK and US are instead opting for a more market-driven approach. This contrast highlights deeper geopolitical and economic considerations, as both nations seek to maintain a competitive edge in the rapidly evolving AI sector.

Companies operating in the US and UK may benefit from reduced compliance burdens and faster innovation cycles, but they also risk regulatory uncertainty when engaging with more tightly controlled markets such as the EU. Meanwhile, concerns over AI safety, misinformation, and ethical considerations could influence public trust, potentially shaping consumer and business adoption patterns in the years ahead.

Beyond immediate market implications, the lack of a unified international stance raises broader questions about the future of AI governance. The absence of the UK and US from the Paris declaration may complicate global efforts to establish common AI standards, increasing the likelihood of regulatory fragmentation. This, in turn, could lead to inconsistencies in AI oversight, making it more challenging to address issues such as bias, cybersecurity risks, and the environmental impact of AI systems on a global scale.

That said, the refusal to sign the declaration does not mean the UK and US are simply abandoning AI regulation altogether; rather, both countries will continue to shape policy on their own terms. However, their decision does signal a clear preference for maintaining regulatory flexibility, even at the cost of global consensus. Whether this approach actually fosters long-term innovation or leads to unintended risks remains to be seen, but what is certain is that AI governance is now a defining battleground in the race for technological leadership. The coming years will likely reveal whether a hands-off approach delivers the promised benefits, or whether the cautionary stance of other nations proves to be the wiser path.

A new study in Wales has shown that nearly half (46 per cent) of young people aged 8 to 17 have fallen victim to online scams, with 9 per cent (including children as young as eight) having lost money to fraudulent schemes.

Scams A Regular Part of Online Life For Young People

A recent study by the UK Safer Internet Centre (UKSIC) has unveiled a worrying trend, with findings released in conjunction with Safer Internet Day 2025 on 11th February. The results highlight how exposure to online scams has become a regular part of life for young internet users.

The Scale of the Issue

As part of the research, the UKSIC conducted an extensive survey to assess the frequency with which young people come across online scams, the types of scams they encounter, and their effects. Alarmingly, a massive 79 per cent of those surveyed said they come across scams at least once a month, with 45 per cent encountering them weekly and 20 per cent seeing scams every single day! These figures appear to show that scams are not occasional threats but are a persistent online hazard.

An Urgent Matter

Will Gardner OBE, Director of UKSIC, has highlighted the urgency of the matter, stating: “This Safer Internet Day, we want to put the importance of protecting children from online scams on the agenda. For too long, young people have been overlooked, yet our research clearly demonstrates how much of an impact online scams can have on them.”

What Are The Most Common Scams Targeting Young People?

The research identified several scams that young people are particularly vulnerable to. The most common include:

– Fake giveaways. Scammers promise free prizes or rewards to lure victims into sharing personal information.

– Phishing scams. Fraudsters send messages or emails pretending to be from a trusted source to trick individuals into handing over sensitive details.

– Fake websites. Counterfeit online stores or platforms that appear legitimate but are designed to steal money or data.

– Online shopping scams. These include fake ticket sales and fraudulent in-game purchases or ‘trust trades.’

Mostly On Social Media

Social media platforms were found to be the most common space for encountering scams (35 per cent), followed by email (17 per cent) and online gaming (15 per cent). The research revealed, perhaps not surprisingly, that younger children (8 to 11) are particularly vulnerable in online gaming environments, with 22 per cent reporting that they had experienced scams in this setting.

The Emotional and Psychological Toll

The impact of online scams appears to extend far beyond any financial loss. For example, the research found that almost half (47 per cent) of those scammed felt anger and frustration, while 39 per cent felt sadness. Other emotional reactions highlighted in the research included stress (31 per cent), embarrassment (28 per cent), and shock (28 per cent). Also, and alarmingly, over a quarter (26 per cent) said they blamed themselves for falling victim to a scam, a figure that rises to 37 per cent among 17-year-olds.

This sense of self-blame and embarrassment is thought to be preventing many from seeking help. For example, nearly half (47 per cent) of young people in the research said they believe embarrassment is the biggest barrier to reporting scams, while 41 per cent worry they would be blamed, and 40 per cent fear getting into trouble, such as having their devices taken away.

What Can Be Done?

The research appears to highlight an urgent need for better education about online scams. Encouragingly, 74 per cent of young people want to learn more about spotting and avoiding scams. Schools and parents must play a key role in this education, equipping children with the knowledge and tools to stay safe online.

For parents and carers, open conversations about online safety may also be essential in tackling this issue. For example, the study found that 72 per cent of young people would turn to a parent or carer if they were worried about an online scam, and 40 per cent of parents reported that their child had taught them how to recognise scams.

To help young people protect themselves, some steps that experts often recommend include:

– Think before you click. Avoid clicking on links from unknown sources, especially if they promise prizes or seem urgent.

– Verify sources. Check if a website or message is genuine before sharing any personal information.

– Protect personal data. Be cautious about sharing personal details online.

– Use security features. Enable two-factor authentication and use strong passwords.

– Recognise red flags. Poor spelling, urgent demands, and ‘too good to be true’ offers are common signs of a scam.

Government Action and Industry Responsibility

With online scams becoming more sophisticated, particularly with advancements in artificial intelligence (AI), there is growing concern that fraudsters will find it even easier to deceive young people. The study found that 32 per cent of young people worry that AI will make scams harder to spot.

Will The Online Safety Act Help?

The UK government has taken some steps to combat the rise in online fraud. For example, from next month, the Online Safety Act will require tech companies to take proactive measures to remove illegal content, including scams. As Tech Minister Baroness Jones says: “The normalisation of scams online is a shocking trend. Fraudsters are clearly targeting vulnerable young people who should be able to connect with friends and family without being subject to a barrage of scams.”

Technology companies also have a responsibility under the Act to ensure their platforms do not provide a hiding place for fraudsters. Scam job offers are a growing issue, with fraudsters impersonating TikTok employees and offering fake roles that promise high earnings in exchange for engaging with content.

The Importance of Intergenerational Learning

The study, which was focused on children in Wales, also highlighted the value of intergenerational learning when it comes to online scams. It seems that young people are not just learning from parents and carers but are also educating them. For example, a significant 40 per cent of parents admitted that their child had taught them how to spot scams. This exchange of knowledge may be crucial in strengthening online safety for all age groups.

What Does This Mean For Your Business?

The findings of this study paint a pretty stark picture of the digital landscape for young people, where online scams are no longer an occasional nuisance but a persistent and deeply embedded threat. With nearly half of young internet users having fallen victim to fraud, and a substantial proportion experiencing distress as a result, it’s clear that online safety must be given greater priority.

Much of the public discourse around scams tends to focus on older people being the primary victims, with news reports frequently highlighting cases of pensioners losing their life savings to fraudsters. While these concerns are entirely valid, this research sheds light on an overlooked reality, i.e. young people are also being targeted and, in many cases, successfully deceived. Their relative inexperience, combined with the digital environments they frequent (particularly social media and gaming platforms) make them attractive targets for scammers. This should serve as a wake-up call that online fraud is not just an issue for the elderly but one that affects all age groups.

Beyond the personal impact on victims, the prevalence of scams among young people may also carry wider implications for UK businesses. As the next generation of digital consumers, young people are forming habits and attitudes towards online transactions that could shape the future of e-commerce. If scams continue to erode trust in online platforms, businesses (particularly those reliant on digital sales) could face challenges in attracting and retaining younger customers. Companies that fail to create secure and transparent online experiences may find themselves losing out to competitors that prioritise fraud prevention and user safety. Also, with AI making scams more sophisticated, businesses will need to stay ahead by investing in stronger verification processes and customer education initiatives to protect their brand reputation.

It’s been reported that international law firm Hill Dickinson has introduced new restrictions on the use of artificial intelligence (AI) tools following a sharp increase in staff engagement with the technology.

What Happened?

The development was first reported by the BBC after it allegedly obtained an internal email from Hill Dickinson’s senior management. The email reportedly revealed that the firm had identified a “significant increase in usage” of AI tools by employees, prompting a review of its policies and subsequent restrictions on access. It seems that the move may have been prompted by growing industry concerns over data security, compliance, and the ethical implications of AI in legal work.

The Email

According to reports about the data cited in the email, in just one week between January and February 2024, Hill Dickinson staff recorded over 32,000 interactions with the AI chatbot ChatGPT, 3,000 with the Chinese AI service DeepSeek, and nearly 50,000 with the writing assistance tool Grammarly. While these figures may illustrate widespread engagement, they don’t clarify how many individuals were actually using the tools or how frequently they returned, as each use could generate multiple interactions.

Limited General Access To The Tools

In response, it’s been reported that the firm has now limited general access to such tools, introducing a request-based approval system to monitor and regulate AI usage more closely. It seems that the internal communication may have highlighted that much of the AI use may not have been in line with the firm’s AI policy, thereby perhaps necessitating stricter oversight.

Why Impose These Restrictions?

It seems that the firm’s AI policy (implemented back in September 2024) actually prohibits employees from uploading client information to AI platforms and requires them to verify the accuracy of AI-generated content. The recent spike in AI engagement may have, therefore, raised concerns that these guidelines were not being strictly followed, potentially exposing the firm to regulatory and security risks.

A spokesperson for Hill Dickinson has been quoted clarifying its stance, stating: “Like many law firms, we are aiming to positively embrace the use of AI tools to enhance our capabilities while always ensuring safe and proper use by our people and for our clients.”

Not An Outright Ban

The firm maintains that it is not banning AI outright but ensuring its application is controlled and compliant. It has already received and approved some individual AI usage requests under the new system.

Broader Industry Implications

The legal profession does appear to be facing a bit of an increasing dilemma over AI adoption. For example, while AI has the potential to streamline tasks such as legal research, contract analysis, and document drafting, it also presents risks related to data security, accuracy, and ethical considerations.

Enter The ICO

Now the UK’s Information Commissioner’s Office (ICO) has weighed in on the debate, warning against excessive restrictions. A spokesperson for the ICO stated: “With AI offering people countless ways to work more efficiently and effectively, the answer cannot be for organisations to outlaw the use of AI and drive staff to use it under the radar. Instead, companies need to offer their staff AI tools that meet their organisational policies and data protection obligations.”

AI Can Help, But Needs Oversight

The Law Society of England and Wales has emphasised its view that AI has potential benefits, with its chief executive, Ian Jeffery, saying: “AI could improve the way we do things a great deal.” However, he also stressed that AI tools require human oversight and that legal professionals must adapt to their responsible use.

Concerns About A Lack of Expertise

Meanwhile, the Solicitors Regulation Authority (SRA) has expressed concerns about an apparent general lack of digital expertise in the legal sector. For example, a spokesperson was recently quoted as warning that “despite this increased interest in new technology, there remains a lack of digital skills across all sectors in the UK. This could present a risk for firms and consumers if legal practitioners do not fully understand the new technology that is implemented.”

This highlights a broader challenge for the legal industry, i.e. embracing AI innovation while ensuring legal professionals are adequately trained and aware of the risks.

Mixed Reactions

Reports of Hill Dickinson’s approach have drawn mixed reactions. Some industry figures argue that overly strict AI regulations could stifle innovation and slow the adoption of technologies that could make legal work more efficient.

Others point out that firms must proceed with caution, particularly regarding data privacy and regulatory compliance. High-profile cases of data breaches linked to AI use have reinforced concerns about inadvertently exposing confidential client information to external platforms.

Not An Isolated Case

It should be noted here that the reported move by Hill Dickinson is certainly not an isolated case. For example, other major corporations (including Samsung, Accenture, and Amazon) have also implemented restrictions on AI tools over concerns about data security and the potential for AI-generated content to be unreliable or misleading.

The Legal Sector Needs To Find A Balance

AI’s increasing presence in the legal world is undeniable, and firms may now be tasked with finding the right balance between harnessing its benefits and mitigating its risks. Hill Dickinson’s decision highlights a broader industry trend of cautious AI integration, ensuring that its use remains secure, ethical, and compliant with professional standards.

What Does This Mean For Your Business?

The reported move by Hill Dickinson to restrict general AI access highlights a growing tension within the legal sector between technological advancement and regulatory caution. AI undoubtedly holds transformative potential, offering efficiencies in legal research, contract analysis, and document drafting. However, its use comes with inherent risks, particularly in an industry where confidentiality, accuracy, and compliance are paramount.

The firm’s reported decision to implement a request-based approval system reflects an industry-wide concern about data security, regulatory obligations, and ethical considerations. While this is not an outright ban, it does indicate that unregulated AI usage in professional settings remains a real concern. It seems that the spike in AI interactions may have signalled that existing policies were not being strictly adhered to, thereby prompting a need for greater oversight. Such caution is understandable, given the possible risks associated with AI-generated inaccuracies or inadvertent data leaks.

At the same time, broader industry voices, including the ICO and the Law Society, have warned against overly restrictive measures that could stifle innovation. Their position suggests that rather than banning AI, firms should focus on implementing clear, structured policies that allow for responsible usage while maintaining compliance with legal and data protection standards. The Solicitors Regulation Authority’s concerns about a lack of digital expertise in the sector further highlight that law firms must not only regulate AI usage but also ensure that legal professionals are adequately trained in its application.

Hill Dickinson’s approach is not just a legal sector issue and, in fact, it has far-reaching implications for businesses of all sizes across the UK. Many large corporations, such as Samsung and Amazon, have already imposed AI restrictions, reflecting wider concerns about security, compliance, and the reliability of AI-generated content. However, for smaller businesses that lack dedicated legal or IT departments, these challenges could be even more pressing. Without clear guidance or internal expertise, SMEs risk either underutilising AI and missing out on its benefits or adopting it without proper safeguards, exposing themselves to potential legal and reputational risks.

This highlights the need for a balanced, industry-wide approach to AI governance. Government agencies and industry bodies may need to step in to provide clearer guidance. Hill Dickinson’s move is far from isolated, as many large corporations have taken similar steps to control AI’s integration into their workflows.

According to TechCrunch, it’s alleged that Italian spyware maker SIO has been distributing malicious Android apps designed to masquerade as WhatsApp and other widely used applications while covertly harvesting sensitive data from targeted devices.

The spyware, dubbed ‘Spyrtacus,’ has been operating undetected for years, raising fresh concerns about government-backed surveillance tools and the extent of their reach.

It’s been reported that the discovery was triggered late last year when a security researcher provided TechCrunch with three suspicious Android apps, believed to be government spyware used in Italy. Following independent analyses by Google and mobile security firm Lookout, it was confirmed that these apps contained spyware designed to infiltrate users’ devices. Spyrtacus has been found capable of stealing text messages, social media chats, and contact details, recording calls and ambient audio, and even taking images via a device’s cameras.

SIO, the company behind the spyware, is an Italian firm that sells surveillance tools to the Italian government. Lookout has reported that Spyrtacus samples were found to be embedded within apps mimicking popular services, including those belonging to Italian mobile providers TIM, Vodafone, and WINDTRE. It’s alleged that these fraudulent applications were distributed through malicious websites disguised as official sources. While Google confirmed that no versions of this malware exist on its Play Store, a 2024 report by Kaspersky suggests that earlier versions were available there in 2018 before moving to independent distribution channels.

The spyware appears to have been used in a highly targeted campaign, but the identities of those affected remain unclear. Given that the apps and distribution sites were in Italian, security analysts believe that law enforcement agencies in Italy were the likely operators of the campaign. The scandal comes amid separate allegations that Israeli spyware firm Paragon provided sophisticated surveillance tools used against journalists and NGO founders in Italy.

Kristina Balaam, a researcher at Lookout, revealed that 13 distinct Spyrtacus samples had been identified, with the earliest dating back to 2019 and the most recent traced to October 2024. The continued presence of these samples across multiple years highlights the persistence of state-sponsored spyware and its evolving distribution methods. Also, Kaspersky researchers report finding indications of a Windows version of Spyrtacus and possible variants for iOS and macOS, suggesting a broader cross-platform surveillance effort.

Despite multiple requests for comment, neither SIO nor its senior executives, including CEO Elio Cattaneo, CFO Claudio Pezzano, and CTO Alberto Fabbri, have responded to the allegations. Also, the Italian government and Ministry of Justice have remained silent on the issue, leaving major questions unanswered about the scope and legality of such surveillance operations. The case adds to growing concerns about the global spyware industry and the blurred lines between national security and invasive digital espionage.

What Does This Mean For Your Business?

The allegations against SIO and its Spyrtacus spyware highlight growing concerns over state-backed surveillance and the ethical boundaries of digital espionage. While governments often justify such tools for security purposes, the secrecy surrounding their use raises serious questions. The knowledge of the deployment of spyware disguised as legitimate apps undermines public trust and exposes broader cybersecurity risks.

For UK businesses, this case is a reminder of the dangers posed by sophisticated malware. While not direct targets, organisations handling sensitive data must remain vigilant against similar threats. The methods used, i.e. malicious websites and fake applications, demonstrate vulnerabilities that cybercriminals could exploit.

More widely, this case reflects the unchecked expansion of the spyware industry. With no accountability from SIO or the Italian government, concerns grow over how such tools can be used without oversight. Stronger international regulations are needed to balance security with the protection of civil liberties, or the lines between lawful surveillance and invasive digital monitoring will only continue to blur.

Cyber criminals are exploiting trusted services like Microsoft, Google, and DocuSign to deliver malware and phishing attacks.

Known as Living off Trusted Services (LOTS), this tactic allows them to evade detection by leveraging widely used platforms.

Mimecast’s H2 2024 Global Threat Intelligence Report flagged LOTS attacks as a growing concern, with over 5 billion threats detected. Attackers use CAPTCHAs to block security scans and host malicious payloads on cloud platforms.

By infiltrating third-party providers, cyber criminals gain deep access to networks, making detection difficult. Traditional security measures based on domain reputation and authentication often fail.

To defend against LOTS attacks, businesses should implement AI-driven threat detection, Zero Trust policies, enhanced email security, and user training to mitigate risks and prevent exploitation of trusted services.

The world’s electricity consumption is forecast to rise at its fastest pace in recent years, growing at close to 4 per cent annually through 2027, according to a new report by the International Energy Agency (IEA).

The “Age of Electricity”

This IEA report states that the sharp acceleration is being driven by a combination of industrial expansion, the rapid rise of data centres, increasing air conditioning demand, and the global push towards electrification. The report’s findings therefore (as the world enters what the IEA describes as the “Age of Electricity,”) can renewable energy and sustainability measures keep up with surging demand?

What’s Driving The Surge in Demand?

According to the IEA’s Electricity 2025 report, global electricity demand surged by 4.3 per cent in 2024 and is expected to continue rising at a similar rate, adding the equivalent of Japan’s entire annual electricity consumption to the grid each year! The scale of growth looks to be unprecedented, with global consumption set to increase by a massive 3,500 terawatt-hours (TWh) between 2025 and 2027.

Most of this additional demand looks likely to come from emerging economies, particularly China, India, and Southeast Asia, which will account for 85 per cent of global growth. China alone saw a 7 per cent increase in electricity consumption in 2024 and is projected to maintain an average growth rate of 6 per cent through 2027. The key drivers include the rise of electricity-intensive industries, particularly in manufacturing sectors linked to clean energy technologies such as solar panels, batteries, and electric vehicles (EVs). For example, in 2024, these industries consumed over 300 TWh of electricity, the equivalent of Italy’s entire annual power usage!

Meanwhile, India’s electricity demand is projected to grow at an annual rate of 6.3 per cent, outpacing its 5 per cent average growth over the past decade. Also, air conditioning use in India is soaring as temperatures rise due to climate change, with electricity demand for cooling contributing significantly to the overall increase.

The Rise of Energy-Hungry Sectors

Beyond industrial production, the global appetite for electricity is being fuelled by the rapid expansion of data centres and digital infrastructure. The explosion of artificial intelligence (AI), cloud computing, and 5G networks is contributing to massive and unprecedented electricity consumption. For example, in the United States alone, electricity demand from data centres is expected to grow so significantly that it will add the equivalent of California’s current power consumption to the national grid within three years.

Electric vehicle (EV) adoption also appears to be a major factor. The IEA notes that China’s EV fleet grew to 30 million vehicles in 2024, a near tenfold increase from 2021. Charging infrastructure expansion is set to push electricity demand even higher in the coming years.

Air conditioning is another major player in this surge. With climate change causing increasingly severe heatwaves, demand for cooling systems is soaring, particularly in emerging economies where AC penetration is still relatively low. The IEA highlights that in China, cooling already accounts for up to 40 per cent of peak electricity demand in some provinces, and demand is set to rise sharply.

Can Low-Carbon Energy Keep Up?

Thankfully, there is some good news, which is that renewables and nuclear power are expanding rapidly and, according to the IEA, should be able to meet nearly all the additional electricity demand by 2027. Solar photovoltaic (PV) energy, in particular, is leading the way. Solar generation surpassed coal in the European Union in 2024 and is expected to account for roughly half of global electricity demand growth through 2027.

China, the US, and India are all expected to see solar power exceed 10 per cent of their total electricity generation within the next three years. Wind power is also set to play a key role, meeting about one-third of the additional demand.

Also, it seems that nuclear power is undergoing a revival. The IEA forecasts that nuclear electricity generation will hit record highs each year from 2025 onwards, driven by a resurgence in nuclear projects in China, India, Korea, and France, as well as the reopening of previously shuttered plants in Europe and the US.

The Carbon Emissions Challenge

Despite the strong growth in renewables, global CO2 emissions from electricity generation are projected to plateau rather than decline in the coming years. The IEA warns that while coal-fired electricity generation is stagnating, fossil fuel use remains high, particularly in India and Southeast Asia. Although emissions in Europe and the US are declining, overall global emissions from electricity generation stood at a staggering 13.8 billion tonnes of CO2 in 2024.

Volatile Electricity Prices

One other critical issue highlighted in the report is the increasing volatility of electricity prices, largely due to the growing reliance on weather-dependent renewables. Instances of negative electricity prices (something that UK users can only dream about) where energy producers pay customers to use power, are becoming more common in markets where renewable output outpaces grid flexibility. The IEA states, “Negative pricing events highlight the need for greater system flexibility and storage solutions to accommodate variable renewable generation.”

The Risk of Grid Instability

Extreme weather events are also adding pressure to electricity systems worldwide. The IEA report details how winter storms, hurricanes, droughts, and heatwaves have caused widespread power outages in multiple countries. In 2024, severe weather disrupted electricity supply across the US, Australia, and Latin America, exposing vulnerabilities in grid resilience.

As Keisuke Sadamori, IEA Director of Energy Markets and Security, warns: “Ensuring a secure, affordable, and sustainable electricity supply is becoming increasingly complex. Policymakers need to urgently strengthen grid infrastructure, improve storage capacity, and enhance flexibility to cope with changing energy dynamics.”

The report stresses the need for significant investment in grid modernisation, energy storage, and demand-side management to prevent blackouts and price spikes as electricity consumption continues to soar.

What Does This Mean For Your Organisation?

The IEA’s findings paint a picture of a world that’s entering a new era of electricity consumption at an unprecedented pace. The rapid growth in demand (largely driven by industrial expansion, data centres, EV adoption, and air conditioning) looks like presenting some major challenges. While the acceleration of renewable energy and nuclear power is encouraging, it’s difficult not to ask the question ‘can these clean energy sources keep pace with the soaring appetite for electricity, especially in emerging economies?’

One of the most pressing concerns is, of course, the impact on global carbon emissions. Despite the expansion of renewables, the fact that emissions from electricity generation are likely to plateau rather than decline is a stark reminder of the continued reliance on fossil fuels. This highlights the urgency for policymakers to not only scale up clean energy but also implement stronger measures to phase out coal and gas-fired power generation. Grid instability and electricity price volatility further complicate the landscape, raising concerns about energy security and affordability, especially as extreme weather events become more frequent.

For UK businesses, these developments have significant implications. On one hand, the transition towards renewables could present opportunities for investment in energy-efficient technologies, on-site solar generation, and demand-side management solutions. Businesses with high energy consumption will need to adapt to potential price fluctuations and grid challenges, making resilience and sustainability key priorities. Furthermore, with data centres and AI-driven industries driving much of the global electricity surge, UK tech firms will need to assess the long-term viability of their energy strategies to remain competitive in an increasingly power-hungry digital economy.

It seems, therefore, that the world’s ability to navigate this energy transformation will depend on a combination of strategic investment, technological innovation, and policy reform. The rise in electricity demand is not inherently problematic (after all, electrification is crucial for decarbonisation) but without the right infrastructure and regulatory frameworks, it could become a bottleneck rather than a catalyst for progress. As we move deeper into the “Age of Electricity,” striking the right balance between growth, sustainability, and stability will be paramount.

Get more LinkedIn connections by requesting to connect with people the right way!

[Note – To Watch This Video without glitches/interruptions, It may be best to download it first]

You don’t always need to go through multiple menus to access key system tools—there’s a shortcut! Here’s how it works:

How to:

– Right-click the Start button (or press Win + X).

– This opens a hidden menu with direct access to Task Manager, Device Manager, Power Options, and more.

– This is ideal for quickly accessing system settings without searching.

The UK government has reportedly ordered Apple to grant it access to encrypted data stored in iCloud by users worldwide, a move that has sparked fierce debate over privacy, security, and government surveillance.

IPA

The demand, issued under the Investigatory Powers Act 2016 (IPA), represents one of the most significant clashes between a government and a major technology company over encryption and data protection.

What Has the UK Government Demanded?

According to recent reports (first published by The Washington Post and later confirmed by other media sources), the UK Home Office has served tech giant Apple with a “technical capability notice” under the IPA. This notice legally compels companies to provide law enforcement agencies with access to data, even if it is encrypted.

The government’s demand specifically targets Apple’s Advanced Data Protection (ADP) feature, which offers end-to-end encryption for iCloud storage. This means that only the user has the decryption keys and even Apple itself cannot access the data. By enforcing this demand, the UK government appears to be seeking the ability to bypass or weaken this encryption, potentially gaining access to vast amounts of personal data stored by Apple users worldwide.

It’s been reported that when asked about the order, a Home Office spokesperson declined to confirm or deny its existence, stating, “We do not comment on operational matters, including, for example, confirming or denying the existence of any such notices.”

Why Is the UK Government Doing This?

The UK government argues that encryption enables criminals, including terrorists and child abusers, to evade law enforcement. The National Society for the Prevention of Cruelty to Children (NSPCC) has previously criticised Apple’s encryption policies, arguing that they hinder efforts to track down online child abuse networks.

The UK’s intelligence agencies have long pushed for greater access to encrypted communications, claiming that end-to-end encryption makes it harder to investigate serious crimes. Officials insist that their goal is not mass surveillance but rather targeted access to individuals who pose security threats.

The Global Ramifications of Apple’s Response

The UK’s demand for access to encrypted iCloud data has raised global concerns over privacy and security. Security experts warn that creating a backdoor, even for government use, could expose vulnerabilities that may be exploited by cybercriminals or authoritarian regimes.

Apple now faces a difficult decision. Reports suggest that instead of complying with the UK order, Apple may remove the Advanced Data Protection feature for UK users altogether. While this would protect encryption standards globally, it would leave UK users more vulnerable to potential government access.

Privacy advocates, including Big Brother Watch, have condemned the UK’s move, calling it a “draconian overreach” that could set a precedent for other governments to demand similar access. The U.S.-based Electronic Frontier Foundation described the order as a global security emergency, warning that if Apple concedes, it could open the floodgates for further government-mandated backdoors worldwide.

Also, the timing of the order raises concerns. Recent revelations of large-scale cyber espionage campaigns, including Chinese state-sponsored hacks on telecoms firms, highlight the importance of strong encryption. Critics argue that weakening encryption in the name of security could paradoxically increase risks, exposing sensitive data to foreign adversaries and malicious actors.

The outcome of Apple’s decision will be closely watched by governments, privacy groups, and other tech giants, as it could define the future of encryption policies worldwide.

Privacy and Security Experts React

Privacy campaigners and cybersecurity experts have strongly condemned the UK government’s move.

For example, Rebecca Vincent, interim director of civil liberties group Big Brother Watch, described the demand as “an unprecedented attack on privacy rights that has no place in any democracy” and added that “we all want the government to be able to effectively tackle crime and terrorism, but breaking encryption will not make us safer. Instead, it will erode the fundamental rights and civil liberties of the entire population, and it will not stop with Apple.”

Professor Alan Woodward, a cybersecurity expert from the University of Surrey, has been quoted as saying he was “stunned” by the news, warning that creating a backdoor into encrypted systems poses a significant risk. “Once such an entry point is in place, it is only a matter of time before bad actors also discover it,” he cautioned.

Dangerous Precedent

On his X feed, Professor Woodward also said: “I fear the UK govt is being badly advised in picking this fight. For one thing, President Trump doesn’t welcome foreign regulation of US tech companies.”

Other major tech firms will be closely watching Apple’s response. If the UK government succeeds in forcing Apple to break its encryption, it could set a dangerous precedent, leading to similar demands for data access from other governments worldwide.

Can Apple Stop It?

Apple does have legal avenues to challenge the order. Under the IPA, companies can appeal. However, the law also states that compliance must continue during the appeals process, meaning Apple would have to implement the changes even as it fights the ruling in court.

If Apple refuses to comply outright, the UK government could impose financial penalties or take further legal action against the company. Given Apple’s previous stances on encryption, a legal battle between the tech giant and the UK government seems highly likely.

What Can Apple Users Do to Protect Their Data?

For concerned Apple users, there are a few steps to enhance personal data security:

– Turn off iCloud backups. Without iCloud backups, there would be no cloud-stored data for the government to access. However, this also means losing the ability to recover data if a device is lost or damaged.

– Use local device encryption. Data stored directly on Apple devices remains encrypted with hardware security features, making it more difficult for third parties to access.

– Enable two-factor authentication. This adds an extra layer of security to Apple accounts.

– Stay informed. Users should keep up to date with Apple’s response to this demand and any changes in privacy policies.

What Happens Next?

If the UK government successfully enforces this demand, it could mark the beginning of widespread government intervention in encrypted services. Other Western governments, including the United States, have previously attempted to pressure Apple into providing encryption backdoors, but so far, the company has resisted.

This case could be regarded, therefore, as being a crucial test of how far governments can push back against end-to-end encryption. If Apple bows to UK demands, it could embolden other governments to seek similar access. On the other hand, if Apple stands firm, it could set a precedent for other tech firms to resist government pressure on encryption.

Also, this may not stop with Apple. The UK government has previously targeted encrypted messaging services, such as Meta’s WhatsApp. In 2023, the UK government threatened to ban WhatsApp unless it provided a mechanism to scan encrypted messages for harmful content, a move that was widely criticised by privacy advocates. Other end-to-end encrypted services, including Signal and Telegram, could also face similar demands in the near future.

For now, the battle between Apple and the UK government is far from over. Whether the UK government backs down, Apple fights and wins, or encryption is permanently weakened, the outcome will have lasting implications for digital privacy and security worldwide.

What Does This Mean for Your Business?

The UK government’s demand for access to Apple users’ encrypted data has raised some fundamental questions about the balance between security, privacy, and government oversight in the digital age. While law enforcement agencies argue that such measures are necessary to combat serious crimes, critics warn that undermining encryption sets a dangerous precedent that could weaken security for all users.

At the heart of this debate is the issue of trust i.e., trust in governments to act proportionately and trust in technology companies to uphold user privacy. If Apple concedes to the UK’s demand, it could signal the beginning of wider state intervention in encrypted services, potentially opening the door for similar requests from other nations. However, if Apple refuses, it risks legal repercussions, financial penalties, or even restrictions on its UK operations. This standoff will be watched closely not only by tech firms and governments but also by privacy advocates and cybersecurity experts worldwide.

The case highlights the ever-growing tension between technological advancements and regulatory controls. Encryption is not just a tool for privacy but is also a safeguard against cyber threats, corporate espionage, and authoritarian overreach. Weakening it in the name of security may, paradoxically, create more vulnerabilities rather than resolve them.

Whatever the outcome, this confrontation is unlikely to be the last of its kind. As digital privacy becomes an increasingly contested space, both governments and tech companies will continue to grapple with the difficult task of balancing individual rights with national security. Whether Apple’s response sets a new global standard or merely delays the inevitable, the impact of this battle will be felt far beyond the UK’s borders.

For UK businesses that rely on Apple’s encrypted services, the implications could be significant. Many companies depend on end-to-end encryption to protect sensitive corporate data, financial transactions, and confidential communications. Also, compliance with UK government demands could create conflicts with data protection regulations, such as GDPR, raising legal uncertainties for organisations handling customer and client information. If Apple withdraws certain encryption services from the UK market, businesses may be left searching for alternative, potentially less secure, solutions. In a global economy where data security is paramount, UK firms could find themselves at a competitive disadvantage compared to counterparts operating in jurisdictions with stronger privacy protections.

The UK’s Cyber Monitoring Centre (CMC) has now started categorising cyber events using a scale designed to assess the impact and severity of attacks (similar to the Richter scale for earthquakes).

What is the Cyber Monitoring Centre?

The Cyber Monitoring Centre (CMC) is an independent, non-profit organisation founded by the UK’s insurance industry to enhance trust in cyber insurance markets and improve national understanding of digital threats. Officially unveiled at a Royal United Services Institute (RUSI) event on 6 February 2025, the CMC has been operating behind the scenes for a year, refining its methodology before making its system publicly available.

How Does the Cyber Event Severity Scale Work?

The CMC has introduced a five-level categorisation system to rank cyber events based on their severity and financial impact. The scale ranges from one (least severe) to five (most severe), considering two key factors:

1. The proportion of UK-based organisations affected.

2. The overall financial impact of the event.

Only incidents with a potential financial impact exceeding £100 million, affecting multiple organisations, and with sufficient available data will be classified. The CMC will collect insights from polling, technical indicators, and other incident data, all reviewed by a Technical Committee of cyber security experts.

Once categorised, cyber events will be published along with detailed reports that outline the impact, methodology, and response strategies. This information will be freely available to businesses and individuals worldwide.

CMC CEO Will Mayes emphasised the importance of this classification system, stating: “The risk of major cyber events is greater now than at any time in the past as UK organisations have become increasingly reliant on technology. The CMC has the potential to help businesses and individuals better understand the implications of cyber events, mitigate their impact on people’s lives, and improve cyber resilience and response plans.”

The rating system initiative is being spearheaded by a team of cyber security experts and industry leaders, with former National Cyber Security Centre (NCSC) chief Ciaran Martin serving as Chair. Explaining the importance of the CMC’s work, Martin says: “Measuring the severity of incidents has proved very challenging. This could be a huge leap forward. I have no doubt the CMC will improve the way we tackle, learn from, and recover from cyber incidents. If we crack this, and I’m confident that we will, ultimately it could be a huge boost to cyber security efforts, not just here but internationally too.”

Why Is the UK Introducing a Cyber Severity Scale?

The new initiative has been launched in the UK to essentially help measure the severity of cyber threats, thereby (hopefully) bringing much-needed clarity to an ever-evolving digital battleground.

Cyber attacks have become increasingly frequent and damaging. In 2023 alone, the UK suffered over seven million cyber attacks, costing the economy an estimated £27 billion per year. From ransomware crippling hospitals to large-scale data breaches exposing personal and financial information, the need for an organised, systematic approach to assessing cyber threats has never been greater.

Martin has stressed that a standardised metric for cyber event severity has been long overdue, and has highlighted how: “If you get a major incident in a large organisation, the results can be absolutely devastating. Hospitals can be brought to their knees.”

Martin has also noted the fact that because international threat actors, including state-backed groups from Russia and China, are constantly evolving their tactics, the UK must now be better prepared.

How Will This Benefit UK Businesses?

For UK businesses, the introduction of the CMC’s cyber severity scale could be an important step in cyber risk management and its benefits could include:

– Clarity and consistency. Businesses will have an easily understood, objective framework to gauge the severity of cyber incidents and make informed decisions.

– Better risk assessment. Insurers, regulators, and industry leaders will be able to assess cyber risks more effectively, leading to better cyber insurance policies and risk management strategies.

– Faster response times. With categorised reports on cyber incidents, organisations can respond more quickly and appropriately to emerging threats.

– Improved cyber resilience. Detailed incident reports will help organisations refine their cyber security measures and prepare for future attacks.

CMC CEO Will Mayes has also highlighted how the CMC’s work will be supported by a broad range of global cyber security experts, saying: “I would also like to acknowledge the support from a wide range of world-leading experts who have contributed so much time and expertise to help establish the CMC, and continue to provide data and insights during events. Their ongoing support will be vital, and we look forward to adding further expertise to our growing cohort of partners in the months and years ahead.”

Potential Challenges and Drawbacks

Despite its promise, and although it’s still very early days, it should be acknowledged that the CMC’s classification system is not without potential challenges. These include:

– Accuracy and data availability. Since categorisation relies on accurate data collection, incomplete or delayed reporting could affect the reliability of classifications.

– Speed (or lack of it) of assessment. The CMC aims to classify events within 30 days, but in 2025 this timeline may take longer. Delays in categorisation could impact real-time responses.

– The threshold for categorisation. By focusing on incidents causing over £100 million in damage, smaller but still significant attacks may not be classified, potentially leaving some businesses without crucial insights.

– The potential for misinterpretation. While the scale is designed to simplify communication, businesses and the public may misinterpret severity rankings, leading to unnecessary alarm or complacency.

UK Not The First Country To Try It

The UK is not the first nation to attempt a structured approach to cyber threat classification, but the CMC’s initiative represents a more comprehensive framework than many existing models. The US, for instance, has the Cyber Incident Severity Schema, a classification system used by federal agencies, but it does not currently have the public-facing clarity or structured ranking system that the CMC intends to implement.

Other European nations have also been watching the CMC’s developments closely, with cyber security experts suggesting that if successful, this model could be replicated in the EU or even standardised internationally. According to industry insiders, discussions are already taking place regarding cross-border data sharing agreements to strengthen global cyber response strategies.

Some cyber security experts have noted how a universal classification that could be used by all countries would make for a better system and, as the CMC begins classifying real-world incidents, there is potential for the UK to take a leading role in shaping a globally recognised cyber threat severity scale. Such a scale would help both businesses and governments get the data needed to make informed, strategic decisions in the fight against digital threats.

What Does This Mean For Your Business?

The introduction of the CMC’s severity scale could offer a clearer, more structured approach to understanding and responding to cyber threats. As cyber attacks grow in frequency and complexity, businesses, insurers, and policymakers require reliable data to assess risk and improve resilience. The CMC’s initiative looks like it could provide just that, i.e. a structured, transparent framework that could transform how the UK, and potentially the wider world, categorises and responds to major cyber incidents.

However, while the system has some clear benefits, it’s not without its limitations. The reliance on accurate and timely data presents an ongoing challenge, particularly given the complex and often opaque nature of cyber incidents. The CMC’s approach of only classifying large-scale events, while logical for identifying major risks, may also leave some significant but smaller-scale attacks unaccounted for. Also, the speed at which classifications are made will determine how effective the system is in providing real-time insights for businesses and policymakers.

Despite these concerns, the CMC’s work has already garnered some strong backing from cyber security experts and industry leaders, who recognise its potential to standardise risk assessment in a sector where clear benchmarks have long been lacking. The fact that other nations are closely monitoring the UK’s efforts also suggests that this initiative could, in time, help shape a globally recognised classification system, which is something that could prove invaluable in the fight against international cyber threats.

The success of the CMC’s cyber event severity scale will depend on its ability to consistently deliver accurate, timely, and actionable insights. If it achieves this, it has the potential to improve cyber resilience not just for UK businesses but for organisations worldwide. With cyber threats showing no signs of slowing, initiatives like this are going to be increasingly necessary.