Regulation & Policy
-
Google fined €403m over location data
Ireland’s Data Protection Commission has fined Google €403 million after finding GDPR failures across three services that processed users’ location information.
-
EU cyber response still lacks shared visibility
EU auditors say incomplete incident reporting is weakening the bloc’s ability to coordinate major cyber responses despite years of investment in shared capabilities.
-
France prepares critical infrastructure hybrid-threat plan
President Emmanuel Macron has ordered a plan to strengthen protection of French critical infrastructure and sensitive sites against cyber and drone attacks.
-
NCSC sets adversary simulation assurance standard
The NCSC has published the first standards for its assured Cyber Adversary Simulation scheme, creating a procurement benchmark ahead of its planned November launch.
-
Spain makes ENS controls machine-readable
Spain has published National Security Framework controls as structured JSON using NIST’s OSCAL specification, enabling greater automation across compliance, monitoring, audit, and risk-management workflows.
-
Holaluz fined €675,000 over customer data breach
Spain’s data protection authority has fined Holaluz €675,000 after finding inadequate access controls following unauthorised access to customer information.
-
Spain records first AI-agent breach notification
Spain’s data regulator has received its first breach notification involving an AI agent, with the reported attack chaining authenticated access, vulnerability discovery, and access to personal information.
-
Cyber Essentials awards reach record level
More than 61,000 Cyber Essentials certificates were awarded in the year to June, extending adoption of the UK government-backed baseline security scheme.
-
Fime acquires Red Alert Labs
Fime has acquired French cybersecurity specialist Red Alert Labs, adding product-security evaluation, certification expertise, and compliance automation as European cyber rules move into active reporting.
-
UK cyber pledge reaches 149 signatories
PwC, DXC Technology and Toyota are among new signatories taking the UK’s voluntary Cyber Resilience Pledge to 149 organisations.