EU

The Fine Print of AI Hype: The Legal Risks of AI Washing : Clyde & Co

AI washing poses legal risks as companies exaggerate AI capabilities amid vague definitions in the EU's AI Act. Legal clarity is essential but increases scrutiny, with potential penalties for false claims. Companies face liability for misleading assertions to investors and customers. Developing accurate communications and verifying AI claims are crucial to mitigate legal repercussions.

https://www.clydeco.com/en/insights/2025/05/the-fine-print-of-ai-hype-the-legal-risks-of-ai-wa

Developers Prepare for Uncertainty, Look to Prior Regulations With AI Act Coming Online

Developers are braced for uncertainty as the EU AI Act is enacted, acknowledging that evolving compliance strategies will be necessary due to ambiguities in the regulatory landscape. Experts emphasize adapting governance frameworks while recognizing the gradual implementation of regulations. Companies with prior regulatory experience, particularly in data compliance, are better positioned to navigate the Act's requirements, while the finalization of a general-purpose AI Code of Practice remains delayed. The European Commission is exploring simplifications to the Act to ease compliance for businesses.

https://iapp.org/news/a/developers-prepare-for-uncertainty-look-to-prior-regulations-with-ai-act-coming-online

ENISA Launches EU Vulnerability Database to Strengthen Cybersecurity Under NIS2 Directive, Boost Cyber Resilience

ENISA has launched the EU Vulnerability Database under the NIS2 Directive to enhance cybersecurity and resilience across the EU. The database provides centralized, reliable information on cybersecurity vulnerabilities, offering insights for risk management and mitigation. It integrates data from various sources to improve situational awareness and transparency, helping organizations better protect against cyber threats. ENISA aims to refine the database throughout 2025, incorporating user feedback and evolving cybersecurity needs while emphasizing the significance of coordinated vulnerability disclosure in strengthening the EU's cyber defenses.

https://industrialcyber.co/vulnerabilities/enisa-launches-eu-vulnerability-database-to-strengthen-cybersecurity-under-nis2-directive-boost-cyber-resilience/

Consult the European Vulnerability Database to Enhance Your Digital Security!

ENISA has launched the European Vulnerability Database (EUVD), aimed at enhancing cybersecurity across the EU by providing comprehensive information on vulnerabilities in ICT products and services as mandated by the NIS2 Directive. The database offers actionable insights on cybersecurity vulnerabilities, including mitigation measures, and is accessible to the public, industry stakeholders, and national authorities. It supports better analysis, situational awareness, and risk management while collaborating with various organizations to ensure effective vulnerability disclosure practices.

https://www.enisa.europa.eu/news/consult-the-european-vulnerability-database-to-enhance-your-digital-security

EAA 2025: European Accessibility Act Compliance Deadline Quickly Approaching

EAA 2025 compliance deadline is June 28; EU businesses must ensure digital accessibility for disabled individuals. UsableNet emphasizes urgent action to meet standards (EN 301 549, WCAG 2.1 AA) affecting various sectors. Non-compliance risks enforcement actions and customer alienation. UsableNet provides resources and managed services for compliance support.

https://www.newswire.com/news/eaa-2025-european-accessibility-act-compliance-deadline-quickly-22573171

European Commission Releases Analysis of Stakeholder Feedback on AI Definitions and Prohibited Practices Public Consultations

European Commission analyzes stakeholder feedback on AI definitions and prohibited practices from public consultations, aiding in the application of the AI Act. Report highlights majority industry responses, calls for clearer definitions, and concerns over prohibited practices like emotion recognition and social scoring. Guidelines issued to assist stakeholders with compliance and will evolve based on feedback and new use cases.

https://digital-strategy.ec.europa.eu/en/library/european-commission-releases-analysis-stakeholder-feedback-ai-definitions-and-prohibited-practices

AI Act Deadline Missed as EU GPAI Code Delayed Until August, Richard Barker

EU's General Purpose AI Code release missed May 2 deadline; now expected by August, delaying related AI Act provisions. Reasons for delay include allowing feedback and assessing support from AI providers. Political solutions may be necessary if not finalized by August, while tech developers face additional regulatory challenges.

https://thelens.slaughterandmay.com/post/102karg/ai-act-deadline-missed-as-eu-gpai-code-delayed-until-august

NIS2 Directive: New Rules on Cybersecurity of Network and Information Systems

NIS2 Directive enhances EU cybersecurity rules across 18 sectors, requiring member states to develop national strategies, manage risks, report incidents, and establish accountability. It expands coverage beyond energy and healthcare to include public services and digital platforms, fostering cooperation and information sharing among nations through CSIRTs and networks like EU-CyCLONe. This legislation, effective from January 2023, supersedes NIS1, aiming for heightened security amidst rising cyber threats. Member states must comply by October 2024.

https://digital-strategy.ec.europa.eu/en/policies/nis2-directive

Scroll to Top