EU

Understanding Key EU Cybersecurity Legislative Acts NIS2, CER, and CRA

By / Blog / , ,

EU enacts NIS2, CER, and CRA to enhance cybersecurity. NIS2 updates previous directives, imposing cybersecurity mandates on essential entities, effective January 2023. CER targets physical resilience in 11 sectors, starting January 2023. CRA mandates cybersecurity standards for digital products; effective December 2024, main provisions in December 2027. Non-compliance can lead to hefty fines. Businesses advised to comply with these regulations.

https://www.twobirds.com/en/insights/2025/understanding-key-eu-cybersecurity-legislative-acts-nis2,-cer,-and-cra

The Current Status of the AI Act: Navigating the Future of AI Regulation in the EU

By / Blog / , ,

EU's AI Act aims to regulate AI, balancing innovation with ethical concerns. Key points include a ban on high-risk AI by February 2025 and a code of practice by May 2025. Implementation begins August 1, 2026. Issues arise over definitions of high-risk systems, transparency, accountability, and copyright gaps. Compliance challenges noted, especially in protecting minors and enforcing regulations. Organizations should prepare for compliance despite uncertainties. AI Act shows potential for significant impact amid ongoing debates and complexities in legislation.

https://www.stibbe.com/publications-and-insights/the-current-status-of-the-ai-act-navigating-the-future-of-ai-regulation

Is Your Website Ready for the European Accessibility Act?

By / Blog / , ,

TLDR: The European Accessibility Act mandates that businesses provide digital access for people with disabilities by June 28, 2025, or face penalties. Compliance includes ensuring websites are perceivable, operable, understandable, and robust. North American companies doing business in the EU must also adhere to these standards. Early action is crucial for compliance through effective planning, automation, and integration of accessibility tools to tap into the potential of the $13 trillion disability market while avoiding fines and market access loss.

https://www.cmswire.com/digital-experience/what-digital-experience-leaders-need-to-know-about-the-european-accessibility-act/

Human Rights Are Universal, Not Optional: Don’t Undermine the EU AI Act With a Faulty Code of Practice

By / Blog / , ,

The EU AI Act, effective August 2024, mandates a Code of Practice for AI developers. Still, current drafts weaken human rights protections by making risk assessments optional for many categories, including fundamental rights and discrimination. This change, influenced by corporate interests, jeopardizes rights amid widespread AI use. International standards emphasize risk assessments for human rights, highlighting a disconnect between the Code and global norms. The draft needs revisions to align with robust protections for human rights to maintain the EU's leadership in AI governance.

https://www.techpolicy.press/human-rights-are-universal-not-optional-dont-undermine-the-eu-ai-act-with-a-faulty-code-of-practice/

Data Sovereignty in Focus as Europe Scrutinizes US Cloud Influence

By / Blog / , ,

Europe increasingly scrutinizes US cloud influence amid data sovereignty concerns, particularly after Trump’s election. Stricter EU regulations like GDPR, NIS2, and DORA aim to protect data, yet US laws such as FISA 702 and the CLOUD Act pose risks. US cloud providers have launched EU-compliant operations, but doubts remain about their ability to protect EU data from US access. EU organizations are advised to use local storage options to ensure data sovereignty.

https://blocksandfiles.com/2025/03/27/eu-data-sovereignty-and-trumps-usa/

Responsible Data Use In An Age Of AI

By / Blog / , ,

EU AI Act sets regulations for AI systems, emphasizing ethical data use and transparency. Businesses must comply with evolving guidelines to safeguard privacy while avoiding stifled innovation. Key steps include clear data governance, regular risk assessments, human oversight, and employee training to balance compliance with ongoing AI development.

https://www.forbes.com/councils/forbestechcouncil/2025/03/27/responsible-data-use-in-an-age-of-ai/

AI Act and the Automotive Industry

By / Blog / , , ,

TLDR: The EU AI Act, effective August 2024, introduces sector-neutral regulations for AI in the automotive industry, aimed at addressing safety risks. It classifies AI systems into high-risk and low-risk categories, imposing compliance requirements especially on systems related to autonomous vehicles. These regulations aim to ensure safety and accountability while requiring automotive stakeholders to adapt to new standards, challenging both EU and non-EU companies entering the market.

https://www.taylorwessing.com/en/insights-and-events/insights/2025/03/ai-act-and-the-automotive-industry

The Data Act: Six Months to Go — But What To Do?

By / Blog / , , ,

The Data Act, effective September 12, 2025, mandates greater data access and sharing for IoT products in the EU, including medical devices. It requires manufacturers to design products for easy, secure data access, impacting how they handle both personal and non-personal data under GDPR. With six months until implementation, businesses should prepare technically and organizationally, updating contracts to comply with new data-sharing requirements.

https://www.ropesgray.com/en/insights/viewpoints/102k6pq/the-data-act-six-months-to-go-but-what-to-do

Scroll to Top