On Thursday 7 May 2026 the European Parliament and Council of the EU reached political agreement on the Digital Omnibus on AI, which will amend…
As we reach the one‑year mark since the NIS2 transposition deadline (17 October 2024), many businesses are still navigating uneven national implementations across the…
Member States were required to transpose NIS2 into local laws by 17 October 2024, but progress has been slow: to date only 11 member…
The deadline for NIS2 implementation passed more than 3 months ago. To date, 9 EU Member States have enacted implementing legislation, with registration requirements…
On 2 February 2025 the first deadlines under the EU AI Act took effect. We consider where these are likely to sit on your…
On 18 December 2024, the European Data Protection Board (“EDPB”) adopted its new opinion on the use of personal data for the development and…
The new Cyber Resilience Act is the first EU regulation on the cyber security of products with digital elements. This includes not only software…
The deadline for NIS2 implementation passed on 17 October, but only 6 EU Member States met that deadline, and 14 of the remaining 22…
While the GDPR imposes strict rules on sensitive data processing, gender identity does not automatically fall under this category. Only personal data revealing racial…
GDPR compliance and inclusion: striking the right balance The General Data Protection Regulation (GDPR) generally prohibits the processing of sensitive data relating to, e.g.,…