In late 2022 the EU took a step that should raise the pulse of any executive who treats cybersecurity as “just IT.” The NIS2 Directive (Directive (EU) 2022/2555) is now the law of the land across much of Europe, and…
The GDPR enforcement regime is entering a new phase. On 16 June 2025, the European Parliament and the Council of the EU reached a provisional agreement on new procedural rules for cross-border data protection cases. The reform aims to fix…
This is not just a cybersecurity story — it’s a data management story. Because you can’t secure what you can’t see. NIS2 doesn’t just ask companies to protect systems — it demands that they understand their data. What it is…
China has just approved a major amendment to its Cybersecurity Law, effective January 1, 2026 — the first overhaul since 2016. The revision integrates AI governance directly into China’s cybersecurity framework, signaling a clear message: Oversight now extends beyond traditional network risks to include AI…
Vietnam is moving fast to shape its AI future. A new draft AI Law, set to take effect on Jan 1, 2026, outlines a comprehensive, EU-inspired framework for responsible AI governance. 🔹 Risk-based approach: AI systems will be classified as unacceptable, high, medium, or low…
Excerpt The European Court of Justice’s SRB decision deepens the meaning of “personal data” under GDPR — recognizing that data is relational, contextual, and civic in nature. As the boundary between private information and public infrastructure blurs, Europe is quietly…
Key Highlights Shein has faced more than €190 million in fines across Europe within just three months. • France: €150M for collecting cookies without user consent • France: €40M for misleading discounts • Italy: €1M for alleged greenwashing The company…
With the revised Federal Act on Data Protection (FADP) now in force and active FDPIC guidance on AI, Swiss regulators have made it clear: AI systems are fully subject to data protection and accountability obligations. For financial institutions, FINMA applies…
The EU’s Financial Data Access Regulation (FiDA) is central to building an open finance ecosystem. It expands financial data sharing while safeguarding customer privacy through strict security and confidentiality requirements. FiDA covers a wide range of financial data types, including…
DORA Comes Into Effect On January 17, 2025, the EU Digital Operational Resilience Act (DORA) entered into force. It establishes a unified framework for ICT risk management in the financial sector, ensuring institutions can withstand, respond to, and recover from…
