The EU signals possible restriction of VPNs
EU age verification laws are fueling a regulatory push against VPNs, raising serious concerns about online security, proportionality, and the technical feasibility of enforcement.
EU age verification laws are fueling a regulatory push against VPNs, raising serious concerns about online security, proportionality, and the technical feasibility of enforcement.
The EU is preparing new rules to limit public-sector use of non-EU cloud providers for sensitive data as part of a broader push for digital and cloud sovereignty.
OpenAI offered EU authorities access to a cyber-focused GPT‑5.5 model, easing concerns over AI-driven cybersecurity risks and highlighting tensions with rivals limiting EU access.
EU cybersecurity law is shifting from principles to enforcement, requiring integrated compliance across NIS2, DORA, product security, AI, and data protection regim
DORA has entered its enforcement phase, exposing gaps in ICT risk management, third‑party oversight, and resilience testing across EU financial institutions.
The EU is advancing a Single Entry Point to centralize security incident reporting across GDPR, NIS2, and other regimes, aiming to reduce complexity while keeping existing legal obligations largely unchanged.
EU policymakers stress that simplifying EU digital laws must preserve strong regulatory interplay between the GDPR, DSA, DMA, and AI rules to ensure consistent enforcement and protect fundamental rights.
The European Parliament has disabled built‑in AI tools on work devices, citing data security and cloud processing risks, underscoring growing institutional caution toward AI use.
The Commission seeks input on a 2026 EU open‑source strategy to reduce digital dependencies, boost competitiveness, and strengthen cybersecurity through coordinated policy and funding measures.
The Commission’s CRA FAQs clarify scope, risk assessments, and overlaps with EU digital laws, helping manufacturers prepare for early reporting in 2026 and full application in 2027.