We have started to explore and trial the use of Artificial Intelligence in some of our investigative research projects. Whilst it has its benefits in the speed and sheer volume of the internet it covers it does have its limitations, particularly in jurisdictions where there are limited public records or information that is held behind a paywall.

Therefore, we continue to develop and work with on the ground sources who have direct access to the relevant registries and also good local knowledge of what information is/is not available and provide essential context. We also recognise human sources are vital for providing comment/opinions on a subject’s reputation and perceived integrity.

However, from our experience of using it and attending workshops/conferences it will be only as good as its user i.e. how you interrogate and question it to recover the information you need. Therefore, currently AI cannot replace an experienced analyst/investigator but rather it should be considered as another tool to support any investigative projects.

Cyberattacks regularly make headlines in the news. These crimes affect high-profile businesses including retailers, banks as well as individuals. Ian Stuart, until recently the head of the UK arm of HSBC, announced that the bank is “being attacked all the time” by online criminals, with cybersecurity now its biggest expense, costing the lender hundreds of millions of pounds.

The National Crime Agency states that cyberattacks are financially devastating and disrupting to both people and businesses. They undermine the economic stability of the UK and cost the UK economy millions of pounds each year.

Not all cyberattacks are financially motivated. Some are for espionage, and/or operational disruption motives. On 19th January 2026 the UK’s National Cyber Security Centre (NCSC) – a part of GCHQ – warned of Russian aligned ‘hacktivist’ groups continuing to target UK organisations with disruptive cyberattacks.

In addition to using AI to carry out cyberattacks, the use of AI technology connected to company systems, data, and operational technology for tasks leaves any company or organisation using AI technology at risk. It is therefore crucial for any organisation to maintain up-to-date cyber security measures on their AI systems and their dependencies. Whilst AI offers great potential for efficiency and creativity, organisations are strongly encouraged to follow the NCSC’s guidance on deploying AI tools securely, and to protect themselves from cyber threats. In addition the NCSC has developed a minimum standard of cyber security called Cyber Essentials. The self-certification scheme is aligned to five technical controls designed to prevent the most common internet based cyber security threats.

In July this year the Corporate Sustainability Due Diligence Directive ‘CSDDD or CS3D’ came into force. This is a European Union Directive which sets a corporate due diligence duty for larger companies concerning environmental and human rights transgressions.

CSDDD – Who it affects

The directive is applicable to EU and also to non- EU businesses depending on size (see below). The date set by which companies need to comply is staggered (up until the end of July 2029) depending on the size and turnover of the company. Importantly for all companies covered by this Directive is that it encompasses not only the business itself, but also its subsidiaries and the whole of its supply chain, globally.

The EU Commission outlines the following guidelines for those companies that need to comply:

Small and Medium-sized Enterprises (SMEs)

Micro companies and SMEs are not covered by the proposed rules. However, the Directive provides supporting and protective measures for SMEs, which could be indirectly affected as business partners in value chains.

Requirements for Compliance – Due Diligence

Each company affected by the Directive will have an obligation to undertake due diligence and make this part of the corporate strategy. The due diligence needs to take into consideration human rights, climate change, and the environmental impact of their actions and decisions – the findings of the due diligence will be made public.

For more information about the Corporate Sustainability Due Diligence Directive see the European Union website –
Corporate sustainability due diligence – European Commission

For more information about how Page Group can assist with due diligence please do not hesitate to contact us.