October To December 2024 - Digital Regulation

Ireland's National Cyber Security Centre has issued comprehensive guidance on NIS2 compliance, placing cybersecurity firmly in the boardroom. With potential fines reaching €10 million or 2% of global turnover for essential entities, management boards must now actively oversee cyber risk strategies, incident response capabilities, and supply chain vulnerabilities. The guidance provides a structured framework for organisations to assess their readiness before the National Cyber Security Bill takes effec

Ireland's Gambling Regulatory Authority is now actively licensing operators and enforcing the comprehensive regulatory framework established by the Gambling Regulation Act 2024. With remote operators already transitioned and in-person operators facing a December 2026 deadline, the GRAI has implemented wide-ranging enforcement powers including administrative sanctions up to €20 million and criminal provisions for unlicensed activities. Recent CJEU case law highlights critical compliance considerations

The EU Cyber Resilience Act introduces mandatory vulnerability and incident reporting obligations for products with digital elements starting September 2026. Economic operators developing, importing, or distributing such products in the EU face strict compliance deadlines, substantial penalties for non-compliance, and must implement security-by-design principles throughout product lifecycles.

The European Commission has proposed the EU KIDS Act, establishing one of the most prescriptive child-safety frameworks yet at EU level. This comprehensive regulation would introduce graduated age-based access controls for social media, mandate safety-by-design requirements, and create a harmonized age-verification system across Member States. The proposal carries far-reaching implications for digital services accessible to minors, requiring providers to fundamentally redesign products, implement strict def

The European Commission (the “Commission”) has released its preliminary findings that TikTok is in breach of the Digital Services Act (“DSA”) as a result of the platform’s “addictive design”.

The European Commission has released draft guidelines clarifying how AI systems should be classified as high-risk under the EU AI Act, while simultaneously extending key compliance deadlines by up to two years. These guidelines provide detailed interpretative guidance on classification thresholds, the role of human oversight, and how complex or interconnected AI systems should be assessed for regulatory purposes.

UEFA, the governing body of football in Europe, has secured an order from the Irish High Court requiring several internet service providers (ISPs) to block the illegal live streaming of matches for...

Contacts and connections are a key asset for many businesses, particularly those in the B2B space.

The European Commission's Cloud and AI Development Act (CADA) proposes a radical restructuring of Europe's digital infrastructure landscape, introducing a four-tier sovereignty framework that could fundamentally...

Advocate General Szpunar (the "AG") of the Court of Justice ("CJEU") has stated in a noteworthy opinion that the E-Commerce Directive1 (the "Directive") does not preclude host providers from being ordered,