Europe: Technology

On 11 September 2026, reporting obligations under the Cyber Resilience Act (“CRA”) became applicable. Manufacturers must report actively exploited vulnerabilities and severe incidents affecting product security through the Single Reporting Platform. An early warning is due within 24 hours of becoming aware, followed by a fuller notification within 72 hours. Final reports are due within 14 days after a corrective measure becomes available for vulnerabilities and within one month after the 72-hour notification for severe incidents. The CRA’s main product requirements apply from December 2027.

Artificial intelligence is transforming legal practice, but can it replace the professional judgment, strategic insight, and accountability that solicitors provide? This analysis examines how AI tools are reshaping routine legal tasks while highlighting why human expertise remains essential for interpreting information, assessing risk, and delivering tailored advice that aligns with clients' unique objectives.

I can’t remember the last time a managing partner asked me which model scored higher on a benchmark. I can remember plenty of conversations about governance, adoption, security, and whether AI can actually work with the firm’s knowledge.