CyFun 2025: Belgium’s CyberFundamentals framework updated
29 Oct 2025
The CCB has published CyFun 2025, with more emphasis on supply chain and operational technology security.
Insights for the EU, the EEA, and the rest of Europe.
The CCB has published CyFun 2025, with more emphasis on supply chain and operational technology security.
A ransomware attack on Collins Aerospace’s MUSE check-in system disrupts Heathrow, Brussels, Berlin, and other European airports.
The EU Data Act now applies, covering access to connected-product data and cloud switching obligations.
Obligations for providers of general-purpose AI models under the EU AI Act apply from today.
Ireland’s Data Protection Commission fines TikTok EUR 530 million over transfers of EEA users’ data to China and a lack of transparency.
Swiss critical infrastructure operators must now report cyber attacks to the National Cyber Security Centre within 24 hours.
Prohibited AI practices are now banned in the EU, and AI literacy obligations apply.
The Digital Operational Resilience Act applies from today to EU financial entities and their ICT third-party providers.
The CRA introduces mandatory cybersecurity requirements for products with digital elements sold in the EU.
Ireland’s Data Protection Commission fines LinkedIn EUR 310 million over how it processed members’ data for behavioural analysis and targeted advertising.
EU Member States were required to bring NIS2 into national law by today; Belgium’s NIS2 law applies from 18 October 2024.
Italy’s Legislative Decree 138/2024 transposes the NIS2 Directive, extending cyber security obligations across many sectors.