Blog

Assessing Europe’s Digital Markets Act One Year In

Europe's Digital Markets Act (DMA) marked its one-year anniversary amid efforts to enhance competition and fairness in digital markets. The DMA targets major digital “gatekeepers,” providing a regulatory framework intended to empower consumers and small businesses through increased market contestability. A recent conference highlighted ongoing assessments of the DMA's effectiveness, where experts noted emerging competition signals such as new app stores and user choice in browsers. However, the act faces geopolitical challenges, particularly from U.S. industry pushback, raising concerns about potential weakening of its enforcement. Comparatively, countries like South Korea are also grappling with regulatory frameworks shaped by local contexts and pressures from dominant U.S. tech firms. The conversation underscores the need for global collaboration in crafting equitable digital regulations amidst differing national interests.

https://www.techpolicy.press/assessing-europes-digital-markets-act-one-year-in/

Dear Younger Me: 6 Leadership Lessons From CIOs on International Women’s Day, ET CIO

Women tech leaders share six key leadership lessons for aspiring leaders on International Women's Day:

  1. Confidence is essential for effective leadership.
  2. Adopt a strategic vision beyond operations.
  3. Overcome various biases by mastering skills.
  4. Leadership is about finding your unique style, not conforming.
  5. Ensure visibility of your work to gain recognition.
  6. Foster mentorship and professional relationships.

These insights emphasize the importance of confidence, strategic thinking, overcoming bias, being visible, and building networks in leadership.

https://cio.economictimes.indiatimes.com/news/corporate-news/dear-younger-me-6-leadership-lessons-from-cios-on-international-womens-day/118797711

AI, Friend or Foe?

AI: Friend or Foe?
Experts discuss AI legislation's future, moving focus from capabilities to regulation. Bunnings’ facial recognition case highlights privacy concerns and the need for risk-based regulatory frameworks, as seen in the EU's 2024 AI Act. A global consensus on AI's societal benefits is needed, emphasizing ethical principles over tech-specific laws. Trust in AI is crucial, particularly regarding open-source models. The call for regulations promotes safe AI deployment while balancing innovation, with Australian laws lagging behind global standards.

https://www.monash.edu/alumni/monash-life/articles-2025/ai-friend-or-foe

CJEU: Trade Secrets Protection Does Not Automatically Trump GDPR Disclosure

CJEU ruling clarifies that trade secrets protection does not override GDPR disclosure obligations. Businesses may have to share algorithms used in automated decision-making if deemed necessary by courts or regulators to meet data subject access rights under GDPR. This ruling emphasizes the need for information provided to be clear and understandable, rather than merely technical.

https://www.pinsentmasons.com/out-law/news/cjeu-trade-secrets-gdpr-disclosure

A Quarter of Startups in YC’s Current Cohort Have Codebases That Are Almost Entirely AI-generated

A quarter of Y Combinator's current startups have primarily AI-generated code, with 95% of their codebases created by AI. Founders are technical and capable but now rely on AI for coding. Concerns exist about AI-generated code introducing bugs and security flaws, emphasizing the need for developers to retain coding skills for debugging. The trend, considered by investors to be lasting, is termed “vibe coding,” where intuition is key in coding with AI assistance.

https://techcrunch.com/2025/03/06/a-quarter-of-startups-in-ycs-current-cohort-have-codebases-that-are-almost-entirely-ai-generated/

18 Cybersecurity Tools That May Cause a False Sense Of Security

18 cybersecurity tools create a false sense of security; adding more doesn't always enhance protection and can introduce complexities or vulnerabilities. Reliance on standard measures like traditional antivirus, SMS-based 2FA, and certifications can obscure real threats. Proper security requires holistic approaches, employee education, and continuous monitoring, not just tool accumulation.

https://www.forbes.com/councils/forbestechcouncil/2025/03/07/18-cybersecurity-tools-that-may-cause-a-false-sense-of-security/

NIST Releases Draft Cybersecurity White Paper on Crypto Agility, Aims to Shape Future Cybersecurity Strategies

NIST released a draft cybersecurity white paper on crypto agility, analyzing strategies and challenges for adapting cryptographic algorithms. The paper highlights the need for operational mechanisms to ensure security and interoperability during algorithm transitions, especially in light of threats from future quantum computing. NIST seeks stakeholder input to develop sector-specific strategies and emphasizes collaboration among experts to enhance cryptographic resilience.

https://industrialcyber.co/nist/nist-releases-draft-cybersecurity-white-paper-on-crypto-agility-aims-to-shape-future-cybersecurity-strategies/

What PCI DSS V4 Really Means

PCI DSS v4 mandates stricter payment security standards impacting third-party scripts and continuous monitoring. Businesses risk $100,000/month fines for non-compliance, highlighted by Abercrombie & Fitch's experience with audits, script security, and tamper detection. Key challenges include managing third-party dependencies and ongoing compliance. A&F’s journey stresses the importance of proactive risk assessment and continuous monitoring to mitigate potential attacks and fines. Compliance isn't a one-time effort; regular audits and vendor reviews are essential. The deadline looms on March 31, 2025, emphasizing immediate action for security and compliance.

https://thehackernews.com/2025/03/what-pci-dss-v4-really-means-lessons.html

EU’s Ai Dilemma: Balancing Regulation, Competitiveness, and Global Pressures  –

EU aims to balance AI regulation with global competitiveness amid pressures from the U.S. and China. The EU's regulatory-first approach prioritizes ethical values but risks economic growth. Recent initiatives, such as the AI Act and substantial investments in AI, aim to enhance competitiveness while facing challenges like resource dependency and complex legislation. The EU must simplify regulations without compromising human rights to become a leader in ethical AI, attract investment, and sustain its geopolitical influence. However, achieving consensus among member states and securing funding remains critical for successful implementation.

https://iari.site/2025/03/07/eus-ai-dilemma-balancing-regulation-competitiveness-and-global-pressures/

CJEU Clarifies GDPR Rights on Automated Decision-Making and Trade Secrets

CJEU clarifies GDPR rights regarding automated decision-making and trade secrets. On February 27, 2025, the court ruled that data controllers must give clear, accessible information about automated decisions impacting individuals, without sacrificing trade secrets. It emphasized the balance between data subject rights and commercial interests and stated national laws cannot broadly exclude access to data based on trade secrets. Companies must ensure transparency while still protecting proprietary information, aligning with the explainability requirements in the AI Act.

https://www.insideprivacy.com/gdpr/cjeu-clarifies-gdpr-rights-on-automated-decision-making-and-trade-secrets/

Scroll to Top