European Union: Cybersecurity

Conformity with ISO/IEC 27001 reflects the best practices for information security management established across Questel’s products and services, including its Equinox IP management software.

In January 2026, the European Commission unveiled its plan to overhaul the EU's Cybersecurity Act, a proposal now known as CSA2. It's the natural next step in a story that began years earlier with the EU's 2020 "5G Security Toolbox" - a set of voluntary recommendations encouraging Member States to be cautious about certain telecom suppliers. That voluntary approach produced patchy results: by most accounts, fewer than half of EU countries had actually acted on those recommendations. It is worth asking whether the adoption levels were however a failure of design, or a reflection of Member States reaching different conclusions about their risk exposures.

The EU Cyber Resilience Act introduces a comprehensive three-tier classification system for connected products sold in the European market, with compliance obligations scaling from self-certification for everyday devices to mandatory third-party assessment for critical infrastructure components.

Des pirates ont réussi à s'introduire dans les systèmes d'information de la Direction générale des Finances publiques en usurpant l'identité d'agents, compromettant les données personnelles de 678 000 particuliers et professionnels. Face à cette violation massive incluant des informations fiscales sensibles, quelles mesures de sécurité ont été déployées et comment les citoyens peuvent-ils se protéger contre les risques d'hameçon

The European Union's Cyber Resilience Act introduces mandatory cybersecurity requirements for products with digital elements, with critical notification obligations taking effect in September 2026.

The EU launched a call for tenders to establish up to 7 AI Gigafactories across Europe, with more than €30 billion of expected public and private investment to boost computing capacity, support AI innovation and strengthen the EU's position as a global AI leader.

The European Union's evolving regulatory landscape for artificial intelligence, cybersecurity, and health data is creating new compliance challenges and opportunities for life sciences organizations. From the AI Act's refinements to the delayed NIS2 Directive transposition in Ireland, stakeholders must navigate multiple intersecting frameworks while preparing for the European Health Data Space Regulation's implementation.

Cyprus financial services firms face a new era of digital operational resilience supervision as CySEC shifts focus from policy preparation to practical implementation, evidence-based governance, and third-party ICT oversight under DORA. Recent circulars C751 and C784 make clear that regulated entities must now demonstrate operational compliance through documented frameworks, incident readiness, and board-level accountability rather than merely maintaining policies on paper.

Le Monde Informatique relaie les résultats d’une étude menée par une association de défense des consommateurs, selon laquelle la majorité des principaux modèles d’intelligence artificielle générative ne respecteraient pas les exigences du droit européen...