Regulation & Policy
-
Italy fines IQVIA €7m over patient data
Italy’s privacy regulator has fined IQVIA Solutions Italy €7 million after finding that a health database covering around one million patients was not genuinely anonymous.
-
German experts challenge cyber defence bill
German experts have backed stronger national cyber capabilities while warning parliament that proposed active defence powers need clearer oversight, responsibilities and safeguards against collateral damage.
-
UK scientists call for AI accident investigator
Nineteen UK computer scientists have called for an independent authority to investigate serious AI incidents and near misses using a model comparable to accident investigation in aviation.
-
ENISA details how CRA cyber reporting now works
ENISA has expanded its guidance for the Cyber Resilience Act’s Single Reporting Platform, detailing how manufacturers and open source stewards submit vulnerability and incident reports across the EU.
-
ICO joins UK cyber resilience network
The Information Commissioner’s Office has joined the National Cyber Resilience Centre Group’s ambassador programme, linking the regulator more closely with police-led SME cyber support.
-
France strengthens ANSSI powers under REACTIV
France has strengthened ANSSI’s authority to direct urgent cyber measures across government departments as investigations continue into data breaches affecting state services.
-
EU states loosen telecom supplier phase-out timetable
EU governments have removed a proposed fixed three-year deadline for telecom operators to phase out high-risk suppliers, adding flexibility to one of the bloc’s most consequential supply chain security measures.
-
EU defence projects include cyber and seabed
The EU has approved five collaborative defence projects covering areas including seabed infrastructure, space, and cyber, with undersea cables explicitly included in the resilience agenda.
-
ESMA puts cyber oversight into 2027 plan
ESMA’s 2027 work programme puts DORA compliance, oversight of critical ICT providers, and the regulator’s own cybersecurity capabilities into its supervisory agenda.
-
Luxembourg turns NIS2 into incident playbooks
Luxembourg cyber and sector regulators have published operational incident-handling rulebooks designed to translate the country’s NIS2 obligations into practical response steps.