European Union: Cybersecurity

The Finnish Cybersecurity Act has fundamentally transformed business insurance requirements by extending cyber risk management obligations to thousands of companies across new sectors. With management now personally liable for cybersecurity compliance and facing potential fines up to EUR 10 million, organizations must reassess their cyber insurance coverage, directors' and officers' liability policies, and overall risk management frameworks.

The Cyber Resilience Act (Regulation (EU) 2024/2847)1 (“CRA”) establishes horizontal cybersecurity requirements for products with digital elements (“PDEs”) placed on the European Union (“EU”) market. Reporting obligations took effect on 11 September 2026, with full application of the CRA from 11 December 2027.

Conformity with ISO/IEC 27001 reflects the best practices for information security management established across Questel’s products and services, including its Equinox IP management software.

Ireland's Data Protection Commission received a record 16,160 new cases in 2025, marking a 45% increase from the previous year, while imposing over €530 million in administrative fines. The Commission finalized four major inquiries, with the TikTok decision accounting for €530 million of the total penalties, and concluded 208 cross-border complaints as Lead Supervisory Authority.

This content appears to be a YouTube video page that requires user authentication to verify human access. The page displays a security checkpoint asking users to sign in to confirm...

For founders and international businesses, losing access to Meta platforms has evolved from a technical inconvenience into a critical business continuity and reputational risk. This publication examines the legal and strategic considerations surrounding Meta account disputes, including platform governance, executive impersonation, GDPR implications, and the importance of coordinated escalation strategies in an increasingly platform-dependent digital economy.

The EU's Cyber Resilience Act introduces mandatory cybersecurity obligations for products with digital elements placed on the EU market. Understanding the five key manufacturer obligations—from secure-by-design requirements to incident reporting deadlines—is essential for compliance with this groundbreaking regulatory framework that elevates cybersecurity from best practice to legal requirement.

The European Central Bank has issued an urgent directive to major financial institutions requiring comprehensive action plans to counter rapidly evolving cybersecurity threats powered by frontier artificial intelligence models. With an October 2026 deadline looming, banks must demonstrate concrete measures across vulnerability management, monitoring capabilities, and third-party risk controls as AI-enabled attacks compress the timeline between threat discovery and exploitation. This supervisory escalation s

Cybersecurity has emerged as the most critical technology risk facing Irish businesses, yet a significant confidence gap exists in their ability to counter AI-driven threats.