regulation

Still Complaining About Compliance? Attackers Love Hearing That

Compliance frameworks in cybersecurity, like NIST, HIPAA, and PCI DSS, are often viewed as burdens, but in reality, they drastically reduce breach risk, costs, and damage. These frameworks establish concrete controls that address predictable weaknesses, enforce accountability, require robust incident response planning, and strengthen supply chains by holding vendors to higher standards. While compliance is not a guarantee against all attacks, it creates discipline, closes security gaps, and should be treated as a baseline for security, not an endpoint. Organizations that embrace compliance as a strategic asset, rather than a box-checking exercise, outperform less structured competitors and help protect broader society.

https://www.forbes.com/sites/emilsayegh/2025/12/01/still-complaining-about-compliance-attackers-love-hearing-that/

2026: the Year AI Grows Up

Taylor Wessing provides insights on upcoming AI regulations and developments for 2026, highlighting the maturity of AI technologies and compliance requirements due to the EU AI Act. Companies must prepare for risks associated with high-risk AI systems, including implementing risk management protocols and achieving dataset quality. The introduction of Codes of Practice will guide compliance, while potential changes in personal data use regulations could impact AI development. The firm also anticipates discussions on copyright, AI liability insurance, and the integration of AI agents into workflows, emphasizing the necessity for standardization and cybersecurity in an evolving landscape marked by both innovation and increased threat actor sophistication.

https://www.taylorwessing.com/en/interface/2025/predictions-2026/2026-the-year-ai-grows-up

Commission Launches Consultation on Protocols for Reserving Rights From Text and Data Mining Under the AI Act and the GPAI Code of Practice

EU launched a consultation for stakeholders on text and data mining rights under AI Act, focusing on opt-out protocols. It invites feedback from rights holders and parties involved in AI developments, aiming for compliance with copyright rules. An online session is planned on December 9, 2025, to discuss technical solutions and next steps.

https://digital-strategy.ec.europa.eu/en/consultations/commission-launches-consultation-protocols-reserving-rights-text-and-data-mining-under-ai-act-and

Improving Regulation of AI and Cybersecurity

Ilona Cohen discusses gaps in AI and cybersecurity regulations, urging policies that can adapt to technological advancements. Key recommendations include establishing baseline standards, engaging tech companies in regulatory processes, and promoting proactive security measures. Companies should enhance internal governance on these issues to balance innovation with consumer protection while lawmakers renew critical cybersecurity legislation. Cohen emphasizes a bipartisan approach to bolster national security and address vulnerabilities efficiently.

https://www.theregreview.org/2025/11/30/spotlight-improving-regulation-of-ai-and-cybersecurity/

How Big Tech’s Monopoly of AI Threatens Fair Competition

Big Tech’s AI monopoly limits competition and exacerbates inequality, concentrating power among a few firms (Google, Microsoft, Amazon, Meta) that control essential resources and infrastructure. This creates high entry barriers for startups and public institutions, leading to reduced innovation and a digital divide. The study explores market concentration, structural barriers, and the impact on emerging economies. It highlights the need for regulatory measures to promote fairness, autonomy, and inclusive innovation while addressing global disparities in AI development and access.

https://trendsresearch.org/insight/how-big-techs-monopoly-of-ai-threatens-fair-competition/

EU Reaches Provisional Deal to Update Payment Services Rules

EU finalizes provisional agreement to update payment service rules, focusing on fraud prevention, fee transparency, and consumer protections. Key changes include stronger anti-fraud measures, data exchange requirements for payment service providers (PSPs), mandatory fee disclosures for ATM and card services, and new cash withdrawal options at retailers. The reforms aim to foster consumer trust and adapt to emerging digital payment models.

https://thepaypers.com/regulations/news/eu-reaches-provisional-deal-to-update-payment-services-rules

Passwords, MFA and AD Accounts: Hardening Your Environment for NIS2

NIS2 mandates stricter cybersecurity for more sectors, emphasizing identity and access management (IAM). Key challenges include hardening Active Directory (AD) to secure authentication and authorization while ensuring compliance through robust password policies and multi-factor authentication (MFA). Organizations must adopt proactive measures, continuously monitor their systems, and maintain auditable identity processes. Failure to do so risks privilege escalation and network compromises. Recommendations for compliance include implementing fine-grained password policies, using passphrases, enforcing phishing-resistant MFA, and managing dormant accounts diligently. Ultimately, NIS2 provides a framework for organizations to enhance their cyber defenses and compliance efforts.

https://www.infosecurity-magazine.com/blogs/hardening-your-environment-for/

Top 10 Proposed Changes in the EU’s Digital Omnibus

EU's Digital Omnibus proposes reforms to modernize regulations such as the GDPR, NIS2, Data Act, and AI Act. Key changes include redefining personal data, expanding lawful processing bases for AI, refining data subject access rules, and altering cookie consent requirements. It aims to simplify reporting in cybersecurity and adjust deadlines for high-risk AI obligations. The legislative process may modify these proposals.

https://www.hoganlovells.com/en/publications/top-10-proposed-changes-in-the-eus-digital-omnibus

Scroll to Top