European Union: Technology

The EU's Cyber Resilience Act establishes comprehensive cybersecurity obligations for manufacturers, importers, and distributors of products with digital elements. With reporting requirements now in effect and full compliance required by December 2027, economic operators must navigate conformity assessments, incident reporting protocols, and enforcement mechanisms that include substantial penalties for non-compliance.

The EU Cyber Resilience Act establishes cybersecurity as a prerequisite for EU market access, affecting not only hardware products with digital elements but also standalone software. Manufacturers must navigate new conformity assessments, CE marking requirements, and mandatory free security updates during defined support periods. These requirements may force companies to fundamentally rethink their go-to-market processes and pricing calculations.

The EU Cyber Resilience Act introduces strict cybersecurity reporting requirements for manufacturers of connected products, with deadlines as tight as 24 hours for early warnings of actively exploited vulnerabilities and severe incidents. Manufacturers must navigate parallel obligations across multiple regulatory frameworks while facing penalties of up to EUR 15 million or 2.5% of global turnover for non-compliance.

El 30 de septiembre de 2026, la Autoridad Europea de Valores y Mercados (European Securities and Markets Authority, «ESMA») publicó su respuesta a la consulta de la Comisión Europea (la «Comisión») sobre la revisión...

On 30 September 2026, the European Securities and Markets Authority ("ESMA") published its response to the European Commission's (the "Commission") consultation on the review of Regulation...

Die Europäische Bankenaufsichtsbehörde (EBA) und das Europäische System der Zentralbanken (ESCB) haben ihre Antworten zum MiCAR-Review vorgelegt – mit teils unterschiedlichen Positionen zu Stablecoin-Reserven, Signifikanzkriterien und globalen Multi-Issuer-Modellen. Der neue EU RegCORE Client Alert analysiert die divergierenden Standpunkte und zeigt auf, welche Vorbereitungen Banken, Stablecoin-Emittenten, CASPs, Asset Manager und Marktinfrastrukturen jetzt treffen sollten.

The market for legal advice in Denmark has for decades benefited from a natural barrier to entry: mastering Danish law. AI is beginning to lower that barrier.

A thorough search and watch process is vital to protect a brand, but manually filtering out the noise to identify true vulnerabilities is a massive operational bottleneck. Evaluating phonetic similarities, linguistic proximity, and absolute or relative grounds for refusal requires deep legal expertise, yet practitioners spend hours simply sorting through data before they can even begin their strategic analysis.

The Italian Data Protection Authority has issued a landmark decision against Character Technologies, Inc., examining how generative AI services must comply with GDPR requirements when processing personal data for model training and operation. The case establishes critical precedents for transparency obligations, age verification mechanisms, and the timing of data protection impact assessments for AI developers operating in the European Union.