Technology Law and Digital Law

ESMA has published its latest compliance table on MiCA Guidelines for knowledge and competence assessment, revealing how EU national competent authorities, including Cyprus regulators, are implementing supervisory standards for crypto-asset service providers. The update signals a shift in regulatory focus from initial authorisation to ongoing operational compliance and staff competence frameworks.

The transitional period under MiCAR for virtual asset service providers has ended, creating significant regulatory obligations for crypto-asset service providers and their customers. Luxembourg's CSSF has issued guidance on the implications for VASPs operating without proper authorization, third-country providers targeting EU clients, and the strict interpretation of reverse solicitation exemptions.

This monthly legal update from William Fry explores critical developments across technology regulation, AI transparency obligations, and commercial litigation frameworks. The edition examines emerging challenges in data centre connectivity, merger control threshold changes, and the evolving landscape of warranty insurance in M&A transactions, while addressing novel legal arguments in nervous shock claims and regulatory consultations on crypto-asset markets.

Irish organisations face mounting challenges in demonstrating measurable returns from their AI investments, with 69% of larger companies actively concerned about ROI and only 11% reporting positive results to date. As new EU regulations including the AI Act, DORA, NIS 2, and the Data Act introduce stringent requirements, many are forced to revisit first-generation AI contracts that inadequately addressed risk allocation and return metrics.

Google prévoit de lancer en France durant l'été 2026 ses nouvelles fonctionnalités d'intelligence artificielle intégrées à son moteur de recherche, permettant d'afficher des réponses générées par IA directement dans les résultats. Cette évolution majeure intervient après une phase d'adaptation aux exigences réglementaires européennes et soulève des questions juridiques importantes concernant la protection des données,

Cybersecurity has emerged as the most critical technology risk facing Irish businesses, yet a significant confidence gap exists in their ability to counter AI-driven threats.

Cybersecurity has emerged as the most critical technology risk facing Irish businesses, yet a significant confidence gap exists in their ability to counter AI-driven threats.

The European Union's evolving regulatory landscape for artificial intelligence, cybersecurity, and health data is creating new compliance challenges and opportunities for life sciences organizations. From the AI Act's refinements to the delayed NIS2 Directive transposition in Ireland, stakeholders must navigate multiple intersecting frameworks while preparing for the European Health Data Space Regulation's implementation.

Cyprus financial services firms face a new era of digital operational resilience supervision as CySEC shifts focus from policy preparation to practical implementation, evidence-based governance, and third-party ICT oversight under DORA. Recent circulars C751 and C784 make clear that regulated entities must now demonstrate operational compliance through documented frameworks, incident readiness, and board-level accountability rather than merely maintaining policies on paper.