cybersecurity
The EU's cybersecurity landscape in 2025 features transformative regulations including NIS2, DORA, the Cyber Resilience Act, and AI Act enforcement. This guide outlines key compliance obligations and implementation strategies for organizations.
DORA
The Digital Operational Resilience Act (DORA) is a European Union regulation designed to strengthen the IT security of financial entities and ensure the financial sector remains resilient during severe operational disruptions. DORA applies to a wide range of financial entities and ICT third-party service providers. It aims to harmonize digital
NIS2
The NIS2 Directive [(EU) 2022/2555] is a legislative framework designed to enhance cybersecurity across the European Union by establishing a high common level of security for network and information systems. It builds upon the original NIS Directive, expanding its scope and strengthening requirements to address evolving cyber threats. Member
EU AI Act
The European Union's Artificial Intelligence Act (EU AI Act), enacted on February 2, 2025, represents a watershed moment in global AI governance. As the world’s first comprehensive regulatory framework for artificial intelligence, it establishes stringent prohibitions on high-risk applications while aiming to foster innovation and protect fundamental
GDPR fines
As the General Data Protection Regulation (GDPR) matures, enforcement actions continue to underscore the regulation’s wide-ranging impact. The five cases below—spanning AI-driven chatbots to streaming services and real estate—demonstrate how regulators are intensifying scrutiny on key requirements such as timely breach reporting, valid legal bases for data