Germany’s NIS2 Implementation Act comes into force
6 Dec 2025
Germany’s NIS2 Implementation Act takes effect, significantly expanding the number of organisations subject to cyber security duties.
Insights for the EU, the EEA, and the rest of Europe.
Germany’s NIS2 Implementation Act takes effect, significantly expanding the number of organisations subject to cyber security duties.
The CCB has published CyFun 2025, with more emphasis on supply chain and operational technology security.
A ransomware attack on Collins Aerospace’s MUSE check-in system disrupts Heathrow, Brussels, Berlin, and other European airports.
The EU Data Act now applies, covering access to connected-product data and cloud switching obligations.
Obligations for providers of general-purpose AI models under the EU AI Act apply from today.
Ireland’s Data Protection Commission fines TikTok EUR 530 million over transfers of EEA users’ data to China and a lack of transparency.
Swiss critical infrastructure operators must now report cyber attacks to the National Cyber Security Centre within 24 hours.
Prohibited AI practices are now banned in the EU, and AI literacy obligations apply.
The Digital Operational Resilience Act applies from today to EU financial entities and their ICT third-party providers.
The CRA introduces mandatory cybersecurity requirements for products with digital elements sold in the EU.
Ireland’s Data Protection Commission fines LinkedIn EUR 310 million over how it processed members’ data for behavioural analysis and targeted advertising.
EU Member States were required to bring NIS2 into national law by today; Belgium’s NIS2 law applies from 18 October 2024.