The European Commission’s Template on Training Data Transparency: First Guidelines for the AI Act

The European Commission's guidelines for the AI Act mandate transparency in training data for general-purpose AI models, requiring public summaries detailing the data used. This has sparked debate over what constitutes “sufficiently detailed” information, balancing rights holders' needs for access against providers' interests in protecting strategic assets. A template to aid in compliance was released in January 2025, structured into sections covering model details, data sources, and processing aspects, with final guidelines expected by mid-2025. Legal disputes will ultimately shape the regulation's implementation and future AI standards globally.

https://www.advant-nctm.com/en/news/the-european-commissions-template-on-training-data-transparency-first-guidelines-for-the-ai-act

EU Pledged to Improve GDPR Cooperation

EU's attempt to improve GDPR cooperation has backfired, creating a more complex and ineffective enforcement system for data protection. The proposed “GDPR Procedural Regulation” complicates processes, leading to slower resolutions and more legal challenges. Critics highlight a lack of proper impact assessment and procedural expertise, resulting in poor lawmaking that undermines citizens' rights and increases burdens on authorities and businesses alike. Overall, the legislative effort appears to further entrench inefficiencies rather than streamline GDPR enforcement.

https://noyb.eu/en/eu-pledged-improve-gdpr-cooperation-and-made-it-worse

EU NIS2 Implementation: Mind the Growing Compliance Gap

EU Member States faced a compliance gap in implementing NIS2, with only 11 states having passed legislation by the October 2024 deadline. New laws surfaced in Finland and Malta, while Denmark plans to introduce legislation by April, effective July 2025. Early adopters like Belgium and Hungary are ahead in compliance, leaving multinational organizations to navigate varied progress across jurisdictions.

https://connectontech.bakermckenzie.com/eu-nis2-implementation-mind-the-growing-compliance-gap/#page=1

No AI Agents Are Allowed.’ EU Bans Use of AI Assistants in Virtual Meetings

EU bans AI assistants in online meetings due to security concerns. The rule was made during a recent European Commission presentation, marking the first official ban on AI agents, which automate tasks during virtual conferences. Potential risks arise from AI agents' unpredictable behavior and user awareness issues, leading to heightened caution in their deployment among tech companies.

https://www.techrepublic.com/article/news-eu-bans-ai-assistants-virtual-meetings/

AI Regulations: OpenAI Calls on EU to Review, Simplify AI Rules

OpenAI urges the EU to simplify AI regulations to enhance innovation and competitiveness, warning complexity may drive investment to non-democratic regions. They propose a unified pro-growth strategy, tripling computing capacity, and training 100 million Europeans in AI by 2026. OpenAI advocates for synergy between regulations and growth initiatives to ensure EU leadership in AI, emphasizing the need for urgent action against competing autocratic investments while also promoting responsible AI development aligned with European values.

https://www.pymnts.com/artificial-intelligence-2/2025/ai-regulations-openai-calls-on-eu-to-review-simplify-ai-rules/

EU AI Act Technical Standards Delayed Until Next Year

EU AI Act Technical Standards Delayed: The EU's AI Code of Practice drafting has been delayed due to alignment issues with copyright law and risk assessments. The final draft's delivery has been postponed to May, while technical standards may extend into 2026, impacting compliance timelines. National regulators must be established by August 2026.

https://www.pymnts.com/cpi-posts/eu-ai-act-technical-standards-delayed-until-next-year/

UK Cybersecurity Reform Planned Changes in the Cyber Security and Resilience Bill

UK Cybersecurity Reform: Upcoming Cyber Security and Resilience Bill updates UK’s NIS Regulations 2018 to enhance cybersecurity in line with EU NIS2 Directive. Key changes include expanding NIS scope to include Managed Service Providers, establishing Designated Critical Suppliers, and incorporating data centres. Enhanced obligations will cover supply chain responsibilities, technical requirements, and stricter incident reporting timelines. The Government will gain greater enforcement powers, including directive authority over entities and regulators, alongside new fee structures for NIS registration. The Bill aims for improved cybersecurity readiness and alignment with international standards, with publication expected in 2025.

https://www.twobirds.com/en/insights/2025/uk/uk-cybersecurity-reform-planned-changes-in-the-cyber-security-and-resilience-bill

16 Ways CISOs Can Lead the Charge on Ethical, Compliant AI Usage

CISOs play a vital role in guiding ethical and compliant AI use through governance, transparency, and collaboration across departments. Key strategies include setting clear governance standards, embedding security and ethics in AI development, owning oversight, promoting innovation, enforcing policies, designing trust, and educating staff on responsible AI usage.

https://www.fastcompany.com/91315938/16-ways-cisos-can-lead-the-charge-on-ethical-compliant-ai-usage

C-suite Disconnect on Cybersecurity Threatens Business Value and Resilience, EY Study Finds

C-suite disconnects on cybersecurity endanger organizations' resilience and value, with cybersecurity leaders (CISOs) more aware of threats than other executives. A recent EY study reveals significant gaps in perception regarding threat sources and the effectiveness of security measures, underscoring the need for a unified cybersecurity strategy. While current cybersecurity investment levels are rising, there's a call for elevated CISO roles and strategic alignment of investments to foster a culture of cybersecurity awareness within organizations.

https://www.ey.com/en_us/newsroom/2025/04/c-suite-disconnect-on-cybersecurity-threatens-business-value-and-resilience-ey-study-finds

Cybersecurity World On Edge As CVE Program Prepares To Go Dark

CVE program's future is uncertain as MITRE's DHS funding expires April 16, 2025, risking global cybersecurity standards and coordination. Without renewal, new vulnerabilities won't be tracked, jeopardizing response efforts and disrupting security protocols, potentially leading to a national security risk. Urgent calls for stable funding and a governance model highlight the critical nature of the CVE system in managing cybersecurity threats.

https://www.forbes.com/sites/tonybradley/2025/04/15/cybersecurity-world-on-edge-as-cve-program-prepares-to-go-dark/

Scroll to Top