Section · 5 articles
NIS2, DORA, the AI Act, GDPR: the rules that frame cybersecurity and AI in Europe.
On October 13, the European Data Protection Board published a statement on smart glasses: manufacturers cannot shift their GDPR obligations onto wearers.
Published in the Journal officiel on October 11, Decree No. 2026-944 gives ANSSI, France's national cybersecurity agency, the job of notifying and overseeing the bodies that will assess digital products' conformity with the CRA.
Norway's data protection authority, Datatilsynet, has fined Xandr, Microsoft's advertising subsidiary, NOK 92 million for processing sensitive Grindr user data without a legal basis.
The floor debate on the "Resilience" bill, which transposes NIS2, scheduled for October 7, was removed from the agenda. France, already taken to the EU Court of Justice, is nearly two years behind schedule.
The EU's NIS2 directive greatly expands the number of organizations subject to cybersecurity obligations. Here is an overview of the key points.
