Regulation & Policy
-
EU examines cyber risk in connected solar
European Commission experts have set out recommendations for reducing cyber risk in internet-connected photovoltaic installations as distributed generation becomes more significant to electricity-system resilience.
-
US request complicates UK AI testing
US authorities have reportedly asked OpenAI and Anthropic to delay providing new models to Britain’s AI Security Institute until American review, potentially constraining UK pre-deployment testing.
-
Poland orders inspection after Medyc breach
Poland’s data protection regulator will inspect Qbusoft following an attack on its Medyc healthcare software, while authorities work to establish the wider scale of patient-data exposure.
-
UK defence suppliers face December cyber deadline
UK defence suppliers are approaching a 31 December deadline for baseline Defence Cyber Certification, including Cyber Essentials for applicable business-critical systems.
-
ENISA sets new European cyber strategy
ENISA has set seven strategic objectives spanning EU policy implementation, incident preparedness, cyber capacity, shared intelligence, and trust in secure digital products.
-
EU cyber rules move into standards
ETSI and European Commission officials are tightening their work on cybersecurity and technology standards as Europe’s digital rules move from legislation into technical implementation.
-
UK plans national information defence centre
The UK government has ordered work on a National Centre for Information Defence while separately developing a US partnership applying AI and autonomy to critical-infrastructure defence.
-
EU supervisors flag external technology dependencies
Europe’s financial watchdogs have put non-EEA technology dependencies alongside cyber threats and emerging AI risks among the vulnerabilities requiring closer scrutiny across the EU financial system.
-
EDPB standardises approach to GDPR fines
European data protection authorities have been given a common five-step methodology for deciding whether GDPR infringements should attract fines alongside other corrective measures.
-
Spain adds cyber safeguards to AI plan
Spain’s new 12-month AI roadmap includes plans to strengthen its cyber defences and increase oversight of advanced frontier models as the government expands AI infrastructure and adoption.