EU Commission invites feedback to clarify rules on general-purpose AI (GPAI) in a consultation aimed at shaping comprehensive guidelines to enhance understanding of GPAI concepts and compliance processes ahead of August 2025. Stakeholders can provide input until May 22, 2025.
CISOs must prepare for the rise of agentic AI, marking a significant evolution from previous AI models. While security copilots enhanced workflows, agentic AI introduces autonomy, enabling complex tasks and real-time threat responses. It poses both opportunities—like improving SOC efficiency and automating help desk operations—and challenges, including governance and trust issues. Although promising, widespread adoption of agentic AI is cautious, with many security leaders highlighting that it currently struggles to outperform traditional solutions. The technology's potential remains significant as it develops.
The European Commission's guidelines for the AI Act mandate transparency in training data for general-purpose AI models, requiring public summaries detailing the data used. This has sparked debate over what constitutes “sufficiently detailed” information, balancing rights holders' needs for access against providers' interests in protecting strategic assets. A template to aid in compliance was released in January 2025, structured into sections covering model details, data sources, and processing aspects, with final guidelines expected by mid-2025. Legal disputes will ultimately shape the regulation's implementation and future AI standards globally.
EU's attempt to improve GDPR cooperation has backfired, creating a more complex and ineffective enforcement system for data protection. The proposed “GDPR Procedural Regulation” complicates processes, leading to slower resolutions and more legal challenges. Critics highlight a lack of proper impact assessment and procedural expertise, resulting in poor lawmaking that undermines citizens' rights and increases burdens on authorities and businesses alike. Overall, the legislative effort appears to further entrench inefficiencies rather than streamline GDPR enforcement.
https://noyb.eu/en/eu-pledged-improve-gdpr-cooperation-and-made-it-worse
EU Member States faced a compliance gap in implementing NIS2, with only 11 states having passed legislation by the October 2024 deadline. New laws surfaced in Finland and Malta, while Denmark plans to introduce legislation by April, effective July 2025. Early adopters like Belgium and Hungary are ahead in compliance, leaving multinational organizations to navigate varied progress across jurisdictions.
EU bans AI assistants in online meetings due to security concerns. The rule was made during a recent European Commission presentation, marking the first official ban on AI agents, which automate tasks during virtual conferences. Potential risks arise from AI agents' unpredictable behavior and user awareness issues, leading to heightened caution in their deployment among tech companies.
https://www.techrepublic.com/article/news-eu-bans-ai-assistants-virtual-meetings/
OpenAI urges the EU to simplify AI regulations to enhance innovation and competitiveness, warning complexity may drive investment to non-democratic regions. They propose a unified pro-growth strategy, tripling computing capacity, and training 100 million Europeans in AI by 2026. OpenAI advocates for synergy between regulations and growth initiatives to ensure EU leadership in AI, emphasizing the need for urgent action against competing autocratic investments while also promoting responsible AI development aligned with European values.
EU AI Act Technical Standards Delayed: The EU's AI Code of Practice drafting has been delayed due to alignment issues with copyright law and risk assessments. The final draft's delivery has been postponed to May, while technical standards may extend into 2026, impacting compliance timelines. National regulators must be established by August 2026.
https://www.pymnts.com/cpi-posts/eu-ai-act-technical-standards-delayed-until-next-year/
UK Cybersecurity Reform: Upcoming Cyber Security and Resilience Bill updates UK’s NIS Regulations 2018 to enhance cybersecurity in line with EU NIS2 Directive. Key changes include expanding NIS scope to include Managed Service Providers, establishing Designated Critical Suppliers, and incorporating data centres. Enhanced obligations will cover supply chain responsibilities, technical requirements, and stricter incident reporting timelines. The Government will gain greater enforcement powers, including directive authority over entities and regulators, alongside new fee structures for NIS registration. The Bill aims for improved cybersecurity readiness and alignment with international standards, with publication expected in 2025.
CISOs play a vital role in guiding ethical and compliant AI use through governance, transparency, and collaboration across departments. Key strategies include setting clear governance standards, embedding security and ethics in AI development, owning oversight, promoting innovation, enforcing policies, designing trust, and educating staff on responsible AI usage.
https://www.fastcompany.com/91315938/16-ways-cisos-can-lead-the-charge-on-ethical-compliant-ai-usage
