Latest Legal News

On 7 October 2024, the European Data Protection Board (EDPB) published Opinion 22/2024, shedding new light on the responsibilities of data controllers when working with processors and sub-processors under the General Data Protection Regulation (GDPR).

On 16 January 2025, the European Data Protection Board (EDPB) adopted the Draft Guidelines 01/2025 on Pseudonymisation, providing comprehensive insights into the application and benefits of pseudonymisation under the General Data Protection Regulation (GDPR).

The European Union's Artificial Intelligence Act (AI Act), which came into force on 1 August 2024, represents the world's first comprehensive legal framework governing artificial intelligence. While the majority of its provisions will become applicable from 2 August 2026, certain critical obligations took effect earlier, on 2 February 2025. These early requirements focus on prohibiting specific AI practices deemed to pose unacceptable risks and mandate organizations to enhance AI literacy among their personnel.

In today’s fast-digitising world, cyberattacks are not just a threat-they are a statistical certainty. A successful cyberattack costs a company on average €200,000, and even more alarming, 60% of SMEs go bankrupt within six months of a serious breach. Cybersecurity is no longer a luxury-it is a legal and operational imperative. The EU understood this well, with two major legislative pillars now active: the DORA Regulation, in force since 17 January 2025 for the financial sector, and the broader-reaching NIS2 Directive, which applies across critical and important sectors.