Latest Articles
EU AI Act Article 50: Transparency Rules Explained
Article 50 of the EU AI Act has been enforceable since 2 August 2026. It requires disclosure whenever a person…
GDPR Policy Template: What You Need, What to Avoid, and Free Templates
“GDPR policy” is not a single document. Organisations searching for a GDPR policy template are usually looking for one of…
CRA Enforcement Authorities Across the EU: Who Regulates What
The Cyber Resilience Act is a regulation, applying directly across all 27 member states without national transposition. CRA enforcement is…
NIS2 Directive Explained: What It Is, Who It Applies To, and What Compliance Requires
The NIS2 Directive in practice: scope, the ten mandatory security measures, incident reporting clocks, management liability, and what UK organisations…
CRA and the EU AI Act: How the Two Regulations Overlap
Where the Cyber Resilience Act and the AI Act apply to the same product, which obligations duplicate, which conflict, and…
CRA SRP: A Single Reporting Platform for Cyber Resilience Act Compliance
ENISA's Single Reporting Platform goes live on 11 September 2026. What it does, who registers, what the 24-hour clock actually…
Cyber Resilience Act & UK: Does the CRA Apply to UK Companies?
What the EU Cyber Resilience Act is, when it takes effect, and why Brexit does not put UK software and…
SBOM Requirements Under the EU Cyber Resilience Act
What Annex I actually requires, why the September 2026 reporting deadline makes SBOMs urgent before they are legally mandatory, and…
Does the EU AI Act Apply to Your Business? Three Routes to EU Jurisdiction
The most common assumption among UK, US, Canadian, and Swiss businesses encountering the EU AI Act for the first time…
Essential FRAND Guide for the EU Data Act
FRAND prohibits exploitative contracts, caps compensation costs for SMEs, and stops market incumbents from discriminating against competitors seeking data access.