Quantum computing is poised to profoundly reshape the cybersecurity landscape, with significant legal and regulatory implications. By introducing fundamentally different computational methods, enabling the simultaneous processing of multiple possibilities, quantum computing has the potential to undermine and ultimately render many traditional encryption techniques ineffective. The result is a significant systemic

Continue Reading Quantum Computing and the Future of Cyber Security

The KRITIS Umbrella Act (Dachgesetz zur Stärkung der physischen Resilienz kritischer AnlagenKRITISDachG) has been in effect since March 17, 2026. For operators of critical infrastructure in Germany, this means: new obligations, tight deadlines, and hefty fines require swift action. For the first time, the law establishes

Continue Reading KRITIS Umbrella Act Now in Effect: What Critical Infrastructure Operators Need to Know and Do

NIS2, the EU’s second Network and Information Systems Directive, is not going anywhere. While the swathe of organisations newly in scope of the EU’s hallmark cybersecurity directive may have hoped that the EU’s recent announcements on regulatory simplification (including the Digital Omnibus) might have reduced their compliance burden, in

Continue Reading NIS2’s extended scope takes a deep dive: Unpacking the EU Commission’s proposed expansion to Submarine Data Transmission Infrastructure

Conceptually, you think of IoT devices, but the CRA has a far broader scope of application. In this article we examine one of the tricky nuances – distinguishing between a digital product and SaaS under the CRA.

The EU’s Cyber Resilience Act (CRA) looks to reshape product cybersecurity

Continue Reading Cyber Resilience Act: the fine line between SaaS and digital products

In a significant stride toward strengthening digital stability in Europe’s financial sector, the European Supervisory Authorities (EBA, EIOPA, and ESMA) have, today, published the list of critical ICT third‑party service providers under the Digital Operational Resilience Act (DORA). This move gives the ESAs direct oversight of some of the

Continue Reading DORA’s Critical ICT Provider List Published – A New Milestone for Digital Resilience

On 25 June 2025, the European Commission has proposed the draft of the EU Space Act.

This proposed new law is intended to provide a harmonised regulatory framework at European level from 2030 to ensure safety, resilience, and environmental responsibility across the EU, while helping space tech companies grow and scale across borders.

Continue Reading EU Space Act

The European Union has ushered in a new era of digital regulation that will significantly impact the data centre industry. With the introduction of the EU Artificial Intelligence Act, the new Network and Information Systems Directive (NIS2) and the Digital Operational Resilience Act (DORA) data centre operators, investors, and service

Continue Reading Navigating the EU’s new digital regulatory landscape: what data centre operators and investors need to know

On 14 March 2025, the Measures for the Labelling of Artificial Intelligence-Generated and Synthetic Content (Measures) was jointly released by four Chinese government agencies, namely the Cyberspace Administration of China, the Ministry of Industry and Information Technology, the Ministry of Public Security, and the National Radio and Television

Continue Reading China released new measures for labelling AI-generated and synthetic content

It’s DORA day! The EU financial services sector has been anticipating today since the Digital Operational Resilience Act was published in December 2022. DORA brings a significant shift to the sector in terms of how financial entities must manage risk linked to use of technologies, and it has created one

Continue Reading DORA: Navigating the New Era of Digital Operational Resilience in EU Financial Services