9/23/2026 1:27:08 PM Lessons From Spain's First Reported Agentic AI Data Breach By Edward Machin Earlier this month, the Spanish data protection regulator (AEPD) disclosed that it had received the first notification of a personal data...
9/14/2026 9:47:12 AM The Vulnerability Was Real; The Exploit Was Impossible; The EU Cyber Resilience Act Reporting Obligation Was … Unclear? By Edward Machin Beginning last Friday (11 September 2026), manufacturers of products with digital elements that are made available on the European Union...
9/3/2026 10:54:37 AM Don’t Take The Bait: The New Phishing Threats To Asset Managers By Edward Machin In recent months, a number of prominent hedge funds and asset managers have become targets of coordinated intrusion campaigns that looked...
8/3/2026 11:42:13 AM You Talkin' To Me? Operationalising The EU AI Act's Transparency Obligations By Edward Machin Compliance conversations around the European Union’s AI Act have been dominated by its high-risk regime, which was set to take effect...
7/22/2026 10:33:09 AM Old Policies for New Technology: Is Your AI Insurable? By Edward Machin Businesses are deploying generative AI tools, large language models (“LLMs”) and, increasingly, “agentic” systems across customer...
7/15/2026 12:28:08 PM Lessons From The European Supervisory Authorities’ First DORA Major Incident Report By Edward Machin On 3 June 2026, the European Supervisory Authorities — the European Banking Authority, the European Insurance and Occupational Pensions...
7/10/2026 10:32:10 AM Regulatory Frontier: Cybersecurity In A World Of New AI Models By Rohan Massey Maya Song Briana Fasone What You Need to Know — and Do — Now Frontier AI capabilities can now weaponise IT weaknesses in “a matter of minutes or hours,” the...
7/9/2026 9:34:40 AM NIS2 and GDPR Reporting Templates: Harmonising Content, Not Process in EU Incident Reporting By Rohan Massey New NIS2 and GDPR reporting templates promise to standardise the information organisations must provide to regulators following cyber...
7/9/2026 8:53:09 AM Telling the FCA about operational outages: the new incident reporting regime By Eve Ellis Edward Machin Lauren Aurelius Background Earlier this year, the Financial Conduct Authority (“FCA”) published details of its new framework of rules and guidance...
4/24/2026 4:32:08 PM AI Omnibus: Trilogue Underway…What to Expect as Negotiations Progress By Suzie Wilson With both the Council of the European Union (the “Council”) and the European Parliament (the “Parliament”) having adopted their...
4/16/2026 3:37:00 PM Helping Hand Or Complete Control? AI In Recruitment In The EU And UK By Edward Machin Lauren Aurelius Key Takeaways Same question; different tests. The EU AI Act, the GDPR and the UK GDPR distinguish between AI tools that make recruitment...
4/1/2026 1:32:08 PM In Case You’ve Missed It: European Regulatory Updates from February & March 2026 By Eve Ellis Rohan Massey Edward Machin Azim Rahman Tegan Shyne Simran Gill Amanda Raad Sean Seelinger Nitish Upadhyaya +6 more... Show less Every month, our London regulatory team publish articles, alerts and blog posts on a wide range of European regulatory topics relevant to...
3/31/2026 5:51:07 PM Revisions to JMLSG Guidance By Eve Ellis Azim Rahman Edward Machin Following Board approval in January 2026, the Joint Money Laundering Steering Group (JMLSG) revised Part I of its guidance on anti-money...
3/23/2026 1:48:06 PM Access Denied: CJEU Closes The Door On Serial DSAR Litigants By Edward Machin Most organisations handling personal data will have received at least one subject access request that does not appear to have been made...
3/16/2026 12:28:36 PM Ctrl+C, Ctrl+Comply: The Rise of AI-Enabled DSARs By Edward Machin Suzie Wilson Individuals’ awareness of their data protection rights, fuelled in part by high‑profile litigation (which we have written about here and...
3/11/2026 11:01:36 AM Safeguarding the Portfolio: Incident Readiness and the Cyber Landscape in 2026 By Edward Machin Last week, Ropes & Gray’s Data, Privacy and Cybersecurity team partnered with FTI Consulting to host a roundtable breakfast in London for...