European Union: Technology

The EU Cyber Resilience Act establishes cybersecurity as a prerequisite for EU market access, affecting not only hardware products with digital elements but also standalone software. Manufacturers must navigate new conformity assessments, CE marking requirements, and mandatory free security updates during defined support periods. These requirements may force companies to fundamentally rethink their go-to-market processes and pricing calculations.

The EU Cyber Resilience Act introduces strict cybersecurity reporting requirements for manufacturers of connected products, with deadlines as tight as 24 hours for early warnings of actively exploited vulnerabilities and severe incidents. Manufacturers must navigate parallel obligations across multiple regulatory frameworks while facing penalties of up to EUR 15 million or 2.5% of global turnover for non-compliance.

The Finnish Cybersecurity Act has fundamentally transformed business insurance requirements by extending cyber risk management obligations to thousands of companies across new sectors. With management now personally liable for cybersecurity compliance and facing potential fines up to EUR 10 million, organizations must reassess their cyber insurance coverage, directors' and officers' liability policies, and overall risk management frameworks.

The market for legal advice in Denmark has for decades benefited from a natural barrier to entry: mastering Danish law. AI is beginning to lower that barrier.

A thorough search and watch process is vital to protect a brand, but manually filtering out the noise to identify true vulnerabilities is a massive operational bottleneck. Evaluating phonetic similarities, linguistic proximity, and absolute or relative grounds for refusal requires deep legal expertise, yet practitioners spend hours simply sorting through data before they can even begin their strategic analysis.

The Italian Data Protection Authority has issued a landmark decision against Character Technologies, Inc., examining how generative AI services must comply with GDPR requirements when processing personal data for model training and operation. The case establishes critical precedents for transparency obligations, age verification mechanisms, and the timing of data protection impact assessments for AI developers operating in the European Union.

El 30 de septiembre de 2026, la Autoridad Europea de Valores y Mercados (European Securities and Markets Authority, «ESMA») publicó su respuesta a la consulta de la Comisión Europea (la «Comisión») sobre la revisión...

On 30 September 2026, the European Securities and Markets Authority ("ESMA") published its response to the European Commission's (the "Commission") consultation on the review of Regulation...

Die Europäische Bankenaufsichtsbehörde (EBA) und das Europäische System der Zentralbanken (ESCB) haben ihre Antworten zum MiCAR-Review vorgelegt – mit teils unterschiedlichen Positionen zu Stablecoin-Reserven, Signifikanzkriterien und globalen Multi-Issuer-Modellen. Der neue EU RegCORE Client Alert analysiert die divergierenden Standpunkte und zeigt auf, welche Vorbereitungen Banken, Stablecoin-Emittenten, CASPs, Asset Manager und Marktinfrastrukturen jetzt treffen sollten.