regulation

Council Adopts New EU Law to Speed-up Handling of Cross-border Data Protection Complaints

By / Blog / ,

The Council of the EU has introduced new rules to harmonise and speed up cross-border data protection complaint handling under GDPR. Admissibility conditions for complaints are standardised across the EU, complainants and companies have common procedural rights, and straightforward cases may use a simplified process. Investigations now have set deadlines: 15 months for standard cases (extendable for complex matters), and 12 months for simple procedures. The law takes effect 20 days after publication and is enforceable 15 months later.

https://www.consilium.europa.eu/en/press/press-releases/2025/11/17/council-adopts-new-eu-law-to-speed-up-handling-cross-border-data-protection-complaints/

Europe in the Age of AI: How Technology Leadership Can Boost Competitiveness and Security

By / Blog / , ,

Europe must urgently adapt to a new geopolitical order dominated by AI and technology, as its competitiveness and security are at risk against the US and China. Fragmented markets, high energy costs, and slow innovation are undermining Europe’s potential. Leaders must prioritize bold reforms to harness talent and resources, establish a unified digital market, and foster AI adoption. Collaboration across countries is essential to reclaim technological leadership, secure economic prosperity, and preserve democratic values. A concerted effort is necessary to address existential challenges and shape Europe's future in technology.

https://institute.global/insights/tech-and-digitalisation/europe-in-the-age-of-ai-how-technology-leadership-can-boost-competitiveness-and-security

Discovering the NIS2 Directive: Security and Resilience of Digital Systems in the European Union

By / Blog / , ,

NIS2 aims to improve resilience by categorizing entities as Essential or Important, enforcing security measures, and mandates timely incident reporting. Additionally, it fosters cooperation among nations for information sharing and enforcement, ensuring a structured response to cybersecurity threats while integrating with existing regulations like GDPR and the Cybersecurity Act. The directive also tasks ENISA with overseeing cybersecurity efforts in the EU.

https://www.redhotcyber.com/en/post/discovering-the-nis2-directive-security-and-resilience-of-digital-systems-in-the-european-union/

EU Parliament Votes to Weaken Corporate Sustainability Laws

By / Blog / ,

The EU Parliament has voted to scale back corporate sustainability laws by raising the thresholds for company compliance and delaying reporting deadlines until 2028. The new rules mean the CSRD only affects very large companies, and even larger thresholds apply for the CSDDD. Requirements like mandatory Paris Agreement transition plans were dropped, and accountability shifted from the EU to national governments. Environmentalists criticized the move as weakening climate action, and experts noted it now covers far fewer businesses. The changes await ratification and may still be subject to modification after negotiations with member states.

https://www.esgdive.com/news/eu-parliament-votes-to-weaken-corporate-sustainability-laws-csrd-csddd/805574/

Regulators Don’t Fear AI

By / Blog / ,

Regulators are embracing AI, shifting from fear to demand as seen in frameworks like the EU AI Act and CSRD. These regulations embed automation into compliance, necessitating transparency and reliability. Companies relying on manual compliance are at a disadvantage, while early adopters of AI enhance data integrity and transparency. The focus has shifted to utilizing AI for efficient compliance, marking a new era where it becomes a fundamental asset for regulatory success.

https://www.techmonitor.ai/comment-2/ai-regulators-new-approach?cf-view

EU Tech Chief Eyes AI Act Amendments to Create Legal Certainty

By / Blog / , ,

The EU Commission is planning targeted amendments to the AI Act, aiming to provide legal certainty for industries and reduce administrative burdens. These changes, part of a broader digital simplification package, are set for announcement in November and still need full Commission approval. While some industry leaders push for a pause to allow time for technical standards to be established, the Commission maintains its commitment to the AI Act’s core principles. However, a one-year grace period for enforcement is possible. Concerns persist that simplification efforts may compromise critical legal protections.

https://www.euronews.com/my-europe/2025/11/12/eu-tech-chief-eyes-ai-act-amendments-to-create-legal-certainty

Compliance for AI Agents: What Financial Services Organizations Need to Know

By / Blog / ,

AI compliance in financial services is crucial yet complex, as AI's rapid integration necessitates adherence to stringent regulations. Key legislation includes GDPR, SOX, GLBA, and the EU AI Act, mandating data protection, transparency, and auditability. Financial firms must ensure AI agents uphold privacy, avoid bias, and comply with evolving laws. Effective governance involves continuous monitoring and education, promoting responsible AI innovation while mitigating risks associated with excessive data access and opaque decision-making. Robust compliance enhances customer trust and innovation potential in the financial sector.

https://www.bankingexchange.com/news-feed/item/10465-compliance-for-ai-agents-what-financial-services-organizations-need-to-know?Itemid=256

ID Verification Laws Are Fueling the Next Wave of Breaches

By / Blog / , ,

ID verification laws require organizations to collect sensitive personal data, including government IDs, increasing breach risks, as seen in Discord's recent incident. Compliance for age verification can expose businesses to cyber threats, leading to fines and loss of trust. There's a call for managed service providers (MSPs) to adopt integrated security solutions to protect data effectively amidst growing regulatory demands.

https://www.bleepingcomputer.com/news/security/id-verification-laws-are-fueling-the-next-wave-of-breaches/

​​Securing Critical Infrastructure: Why Europe’s Risk-based Regulations Matter

By / Blog / ,

Cyberattacks increasingly threaten critical infrastructure like hospitals, power grids, and financial systems, prompting Europe to implement new cybersecurity regulations (NIS2, DORA). These rules broaden security requirements, making CISOs more strategic and demanding improved risk management, swift incident reporting, and higher board involvement. The goal is to shift from a compliance mindset to real, risk-based resilience, prioritizing effective controls such as multifactor authentication and robust asset management. Boards are now accountable for cyber risks, and organizations should use specific metrics, such as inventory, privileged access, and timely updates, to measure and manage security posture. The focus is on practical protections that clearly mitigate real threats to society, rather than applying all possible controls equally.

https://www.microsoft.com/en-us/security/blog/2025/11/05/securing-critical-infrastructure-why-europes-risk-based-regulations-matter/

Scroll to Top