Tagged
Deadlines
The EU KIDS Act would regulate general AI chatbots, not customer-support bots
The EU KIDS Act, proposed on 17 September 2026 and not yet law, would regulate AI chatbots that minors can reach and th…
30 Sep 2026
A connected device sold in the EU after 12 September 2026 must export its data to the user
For a connected device first sold in the EU after 12 September 2026, and the software it needs to work, the readings it…
19 Sep 2026
NIS2 gives you 24 hours to report a full cloud outage longer than 30 minutes
NIS2 gives you 24 hours from becoming aware of a significant incident to file a first report with your national cyber i…
13 Sep 2026
GDPR gives you one month to answer a deletion request, even if the data is already deleted
On 21 July 2026 the CNIL fined the IT consultancy EXTIA 300,000 euros over deletion requests, mostly because 166 people…
12 Sep 2026
Most SaaS AI features are not high-risk under the AI Act. Hiring and credit tools need a check.
Most SaaS features are not high-risk under the EU AI Act. Two things make a system high-risk: it is, or is built into,…
10 Sep 2026
Starting September 11 2026, you have just 24 hours to report on-device vulnerabilities.
The Cyber Resilience Act's reporting duties start on 11 September 2026. The CRA covers software that runs on the user's…
17 Aug 2026
Charging a customer to take their data out stops being legal on 12 January 2027
The EU Data Act's switching rules cover Software as a Service, not just connected machinery, and have applied since 12…
6 Aug 2026
NIS2 is nearly two years late in four countries. It reached your sales cycle on time.
NIS2 had to be in national law by 17 October 2024, and in July 2026 four member states were referred to the EU Court fo…
3 Aug 2026
Article 50 applies on 2 August 2026, and your model vendor cannot carry it for you
Article 50 of the EU AI Act applies from 2 August 2026. The delay you read about in June covered high-risk uses such as…
30 Jul 2026