regulation

Compliance Now Biggest Cyber Challenge for UK Financial Services

By / Blog / ,

Compliance is the top cyber challenge for UK financial services, as cited by 44% of surveyed firms. Key issues include data protection, remote work support, and cloud security. The EU's DORA regulation, effective January 2025, highlights the need for robust cyber resilience. Supply chain attacks take the longest to respond to (16 hours), with significant concerns about threats from nation-states. A third of firms are using AI in cybersecurity, viewing AI-powered phishing as a major threat (89%).

https://www.infosecurity-magazine.com/news/compliance-cyber-challenge-uk/

The Fine Print of AI Hype: The Legal Risks of AI Washing : Clyde & Co

By / Blog / , ,

AI washing poses legal risks as companies exaggerate AI capabilities amid vague definitions in the EU's AI Act. Legal clarity is essential but increases scrutiny, with potential penalties for false claims. Companies face liability for misleading assertions to investors and customers. Developing accurate communications and verifying AI claims are crucial to mitigate legal repercussions.

https://www.clydeco.com/en/insights/2025/05/the-fine-print-of-ai-hype-the-legal-risks-of-ai-wa

Developers Prepare for Uncertainty, Look to Prior Regulations With AI Act Coming Online

By / Blog / , ,

Developers are braced for uncertainty as the EU AI Act is enacted, acknowledging that evolving compliance strategies will be necessary due to ambiguities in the regulatory landscape. Experts emphasize adapting governance frameworks while recognizing the gradual implementation of regulations. Companies with prior regulatory experience, particularly in data compliance, are better positioned to navigate the Act's requirements, while the finalization of a general-purpose AI Code of Practice remains delayed. The European Commission is exploring simplifications to the Act to ease compliance for businesses.

https://iapp.org/news/a/developers-prepare-for-uncertainty-look-to-prior-regulations-with-ai-act-coming-online

EAA 2025: European Accessibility Act Compliance Deadline Quickly Approaching

By / Blog / , ,

EAA 2025 compliance deadline is June 28; EU businesses must ensure digital accessibility for disabled individuals. UsableNet emphasizes urgent action to meet standards (EN 301 549, WCAG 2.1 AA) affecting various sectors. Non-compliance risks enforcement actions and customer alienation. UsableNet provides resources and managed services for compliance support.

https://www.newswire.com/news/eaa-2025-european-accessibility-act-compliance-deadline-quickly-22573171

European Commission Releases Analysis of Stakeholder Feedback on AI Definitions and Prohibited Practices Public Consultations

By / Blog / , ,

European Commission analyzes stakeholder feedback on AI definitions and prohibited practices from public consultations, aiding in the application of the AI Act. Report highlights majority industry responses, calls for clearer definitions, and concerns over prohibited practices like emotion recognition and social scoring. Guidelines issued to assist stakeholders with compliance and will evolve based on feedback and new use cases.

https://digital-strategy.ec.europa.eu/en/library/european-commission-releases-analysis-stakeholder-feedback-ai-definitions-and-prohibited-practices

AI Act Deadline Missed as EU GPAI Code Delayed Until August, Richard Barker

By / Blog / , ,

EU's General Purpose AI Code release missed May 2 deadline; now expected by August, delaying related AI Act provisions. Reasons for delay include allowing feedback and assessing support from AI providers. Political solutions may be necessary if not finalized by August, while tech developers face additional regulatory challenges.

https://thelens.slaughterandmay.com/post/102karg/ai-act-deadline-missed-as-eu-gpai-code-delayed-until-august

NIS2 Directive: New Rules on Cybersecurity of Network and Information Systems

By / Blog / , ,

NIS2 Directive enhances EU cybersecurity rules across 18 sectors, requiring member states to develop national strategies, manage risks, report incidents, and establish accountability. It expands coverage beyond energy and healthcare to include public services and digital platforms, fostering cooperation and information sharing among nations through CSIRTs and networks like EU-CyCLONe. This legislation, effective from January 2023, supersedes NIS1, aiming for heightened security amidst rising cyber threats. Member states must comply by October 2024.

https://digital-strategy.ec.europa.eu/en/policies/nis2-directive

EU Clarifies AI Act’s Prohibited Practices With New Guidelines

By / Blog / , ,

EU issues guidelines clarifying prohibited AI practices under AI Act. Key prohibitions include manipulative techniques, social scoring, risk assessments for crime prediction, untargeted facial image scraping, emotion recognition in certain settings, biometric categorization of sensitive traits, and real-time biometric identification for law enforcement. Guidelines establish legal certainty, refine definitions, and highlight the interplay with existing EU laws. Safeguards for exemptions will require impact assessments on fundamental rights.

https://natlawreview.com/article/european-commissions-guidance-prohibited-ai-practices-unraveling-ai-act

States Are Passing AI Laws; What Do They Have in Common?

By / Blog / , ,

States are enacting AI laws influenced by the EU AI Act. Common features include disclosure of AI-generated content, use-case transparency, regulations for high-risk applications, and anti-discrimination measures. States like California, Colorado, and Utah lead in these regulations, emphasizing transparency and stakeholder compliance, with potential sanctions for non-compliance. Companies must align with these laws through governance programs, risk assessments, and ethical practices.

https://www.corporatecomplianceinsights.com/states-passing-ai-laws-what-do-they-have-common/

Scroll to Top