regulation

5 Innovations Desperately Needed for EUDR Compliance

By / Blog / , , , ,

EUDR compliance poses challenges, especially for small businesses, as the EU Deforestation Regulation aims to eliminate deforestation in global supply chains. Key innovations needed include public policy improvements, collaborative corporate practices, innovative financial services, action from civil society, and harmonized technological solutions. While major firms are preparing for the regulation, smaller players require support to meet compliance requirements. Ultimately, harmonized tech and collective efforts will be crucial for transitioning to sustainable, deforestation-free supply chains.

https://www.foodnavigator.com/Article/2026/03/03/innovations-for-eudr-compliance/

Spain’s Data Watchdog Maps the Hidden GDPR Risks of Agentic AI

By / Blog / , , , ,

Spain's AEPD published a 71-page guide addressing GDPR compliance for agentic AI, highlighting privacy risks like prompt injection and memory issues. It distinguishes AI agents from chatbots and outlines vulnerabilities in multi-agent systems. The guide includes recommendations for memory compartmentalization, data minimization, and governance frameworks aimed at responsible AI deployment.

https://ppc.land/spains-data-watchdog-maps-the-hidden-gdpr-risks-of-agentic-ai/

Security Obligations Under GDPR Still Apply, Even if Data Is Anonymous in the Hands of an Attacker

By / Blog / , , , ,

UK Court of Appeal ruled in DSG Retail v. Information Commissioner that GDPR security obligations remain for controllers even if data is anonymous to attackers. The decision emphasizes the broad nature of “personal data” and the need for controllers to protect against unauthorized access, regardless of how data may appear to a third party. This ruling challenges prior interpretations that could diminish data protection responsibilities. It suggests that GDPR accountability may extend beyond the direct data handling by the controller.

https://iapp.org/news/a/security-obligations-under-gdpr-still-apply-even-if-data-is-anonymous-in-the-hands-of-an-attacker

When AI Agents Pay: Who Owns the Compliance Liability?

By / Blog / , , , , , ,

AI agents in commerce raise complex compliance issues regarding transactional liability. With their adoption accelerating, traditional regulatory frameworks (such as PCI DSS, AML, and DORA) may struggle to keep pace, as compliance is hard to assign when AIs initiate payments. Financial institutions must proactively assess their compliance strategies for AI interactions to avoid future liability risks, particularly around transaction monitoring, script security, and operational resilience. Immediate steps include mapping integrations and recalibrating AML systems. Delayed action may lead to regulatory crises as compliance standards evolve.

https://www.finextra.com/blogposting/30917/when-ai-agents-pay-who-owns-the-compliance-liability

From Innovation to Regulation: How Internal Audit Must Respond to the EU AI Act

By / Blog / , , , , ,

The EU AI Act, a global standard for AI regulation, requires organizations worldwide to address AI risks through governance, controls, and accountability. Internal auditors must adapt to this shift, auditing AI governance, risk classification, data quality, human oversight, and third-party AI risk to ensure compliance.

https://www.wolterskluwer.com/en/expert-insights/innovation-regulation-how-internal-audit-must-respond-eu-ai-act

Breaking Down NIS2: the Five Main Requirements of the Updated NIS Directive

By / Blog / , , ,

NIS2, an update of the EU's cyber security framework, aims to enhance resilience against evolving threats across more sectors, covering essential and important entities. It introduces five key compliance requirements: risk management, incident reporting, cyber security practices, third-party risk management, and workforce security training. NIS2 is an ongoing process, not a one-time compliance task. The directive sets a baseline for accountability and resilience in cyber security across the EU.

https://www.financierworldwide.com/breaking-down-nis2-the-five-main-requirements-of-the-updated-nis-directive

Protecting the ICT Supply Chain: a Step-By-Step Guide to the New EU Security Framework

By / Blog / , ,

The European Commission proposed a new cybersecurity package, including a revised Cybersecurity Act (CSA2) and amendments to NIS2, to strengthen the EU’s cybersecurity resilience. The CSA2 introduces a five-step mechanism to address non-technical risks in the ICT supply chain, potentially prohibiting NIS2 organizations from using ICT equipment from high-risk suppliers, particularly those from countries posing cybersecurity concerns. This framework aims to protect the EU’s ICT supply chain, with potential implications for connectivity and space operators.

https://accesspartnership.com/opinion/protecting-the-ict-supply-chain-a-step-by-step-guide-to-the-new-eu-security-framework/

The Data Visibility Crisis IT Teams Aren’t Talking About

By / Blog / , ,

IT teams face a data visibility crisis, struggling to track data across multi-cloud environments. A Veeam survey shows nearly 60% report reduced visibility due to expanding SaaS and cloud usage. This gap can lead to compliance issues, as seen with TikTok's €530 million fine. Data escapes view through various channels, complicating management. Existing tools in platforms like Microsoft 365 and Google Workspace can aid in data discovery, but more advanced tools may be needed for regulated industries. Building visibility processes into onboarding and offboarding is essential for maintaining oversight, ultimately improving incident response and compliance readiness.

https://www.spiceworks.com/security/the-data-visibility-crisis-it-teams-arent-talking-about/

NIS2: Supply Chains as a Risk Factor

By / Blog / , , ,

NIS2 increases supply chain security requirements, emphasizing external IT risks. Companies must integrate these risks into their security strategies, transforming dependencies into management responsibilities. Effective control of supply chains involves identifying critical partners, setting security standards, and continuous risk monitoring. CISOs' roles expand to include risk communication and holistic management. Compliance under NIS2 goes beyond paperwork, demanding real security measures and transparent assessments, ultimately enhancing operational stability and turning supply chains into strategic assets.

https://www.csoonline.com/article/4128381/nis2-supply-chains-as-a-risk-factor.html

The Expanding Role of Security, Governance and Risk

By / Blog / , ,

2026 mandates stronger security, governance, and risk (SGR) measures as regulators enforce compliance, particularly in AI and data privacy across global frameworks. Organizations must transition from mere compliance to building robust, audit-ready systems that demonstrate resilience. Key priorities include unifying SGR initiatives, integrating incident reporting, preparing for AI governance, and maintaining cross-border data integrity. Effective SGR strategies will enhance market access and organizational credibility, establishing SGR as a crucial driver of business success.

https://www.ibm.com/think/insights/expanding-role-security-governance-risk

Scroll to Top