EU Cyber Resilience Act enters into force
10 Dec 2024
The CRA introduces mandatory cybersecurity requirements for products with digital elements sold in the EU.
Europe
Insights for the EU, the EEA, and the rest of Europe.
NIS2 transposition deadline arrives
17 Oct 2024
EU Member States were required to bring NIS2 into national law by today; Belgium’s NIS2 law applies from 18 October 2024.
Italy’s NIS2 decree comes into force
16 Oct 2024
Italy’s Legislative Decree 138/2024 transposes the NIS2 Directive, extending cyber security obligations across many sectors.
Switzerland recognises the Swiss–US Data Privacy Framework
15 Sep 2024
Switzerland adds certified US organisations to its list of adequate countries, allowing transfers under the Swiss–US Data Privacy Framework.
Council of Europe AI Convention opens for signature
5 Sep 2024
The first legally binding international AI treaty opens for signature, with the UK, EU and US among the first signatories.
Dutch DPA fines Uber €290 million over data transfers
26 Aug 2024
The Dutch data protection authority fines Uber €290 million for transferring European drivers’ data to the US without adequate safeguards.
EU AI Act enters into force
1 Aug 2024
The world’s first comprehensive AI law enters into force, with obligations phasing in from February 2025.
Vehicle cyber security rules now apply to all new vehicles in the EU
7 Jul 2024
UN Regulations 155 and 156 become mandatory for all new vehicles registered in the EU, extending beyond new vehicle types.
Türkiye’s data transfer amendments take effect
1 Jun 2024
Amendments to Türkiye’s KVKK introduce standard contracts for cross-border transfers of personal data.
France’s SREN Law is promulgated
21 May 2024
France’s SREN law introduces cloud market rules and sovereign cloud requirements for sensitive public sector data.
eIDAS 2 enters into force: European Digital Identity Wallets
20 May 2024
The revised EU eIDAS Regulation introduces European Digital Identity Wallets and new trust services.
TISAX assessments move to VDA ISA 6.0
1 Apr 2024
TISAX assessments commissioned from 1 April 2024 must use version 6.0 of the VDA Information Security Assessment catalogue.