International Comparative Legal Guide To: Cybersecurity 2018 - 1st Edition

The EU Cyber Resilience Act introduces mandatory reporting obligations for manufacturers of digital products, requiring them to notify authorities within 24 hours of discovering actively exploited vulnerabilities or severe security incidents. This regulation establishes strict timelines for early warnings, detailed vulnerability notifications, and final reports, fundamentally changing how manufacturers must respond to cybersecurity threats.

The Court of Justice of the European Union has delivered landmark judgments that fundamentally reshape how online platforms can claim immunity from liability for user-generated content. These decisions establish that algorithmic content distribution and commercial partnerships with creators may strip platforms of their safe harbour protections, forcing a reassessment of how social media companies, video-sharing services, and digital marketplaces structure their operations and revenue models.

The EU launched a call for tenders to establish up to 7 AI Gigafactories across Europe, with more than €30 billion of expected public and private investment to boost computing capacity, support AI innovation and strengthen the EU's position as a global AI leader.

As the EU AI Act's Article 50 transparency obligations approach their 2 August 2026 enforcement date, organizations face critical requirements to disclose AI interactions, label deepfakes, and mark synthetic content. This session examines the practical implications of these transparency mandates, drawing on the European Commission's recently published Guidelines and Code of Practice to help stakeholders prepare for compliance.

The EU AI Act's transparency obligations take effect from 2 August 2026, requiring organisations across the EU to disclose when and how they use AI in customer-facing tools like chatbots and content generators. With Ireland's new AI Office now established and regulatory scrutiny intensifying, businesses face the challenge of mapping existing AI deployments and embedding appropriate disclosures into their products and services before enforcement begins.

The European Commission has published an Action Plan addressing the dual-edged nature of frontier artificial intelligence models in cybersecurity, outlining how the EU will harness AI's defensive capabilities while protecting against AI-powered cyber threats. Through nine key actions spanning 2026-2027, the plan establishes frameworks for safe AI evaluation, structured access to advanced AI capabilities, and the scaling of European sovereign AI cybersecurity solutions across critical infrastructure sectors.

The European Commission has published comprehensive guidelines on AI transparency obligations under Article 50 of the EU AI Act, with enforcement beginning August 2, 2026. These guidelines establish how organizations must disclose AI systems, mark synthetic content, label deepfakes, and demonstrate compliance, with significant penalties for non-compliance reaching up to €15 million or 3% of global turnover.

The European Commission's AI Digital Omnibus proposes targeted amendments to the EU's AI Act, aiming to simplify compliance requirements and address implementation challenges while maintaining core safeguards. The revision extends timelines for high-risk AI systems and provides additional regulatory privileges for small and mid-cap enterprises navigating the world's first comprehensive horizontal legal framework for artificial intelligence.

Irish organisations face mounting challenges in demonstrating measurable returns from their AI investments, with 69% of larger companies actively concerned about ROI and only 11% reporting positive results to date. As new EU regulations including the AI Act, DORA, NIS 2, and the Data Act introduce stringent requirements, many are forced to revisit first-generation AI contracts that inadequately addressed risk allocation and return metrics.

Cybersecurity has emerged as the most critical technology risk facing Irish businesses, yet a significant confidence gap exists in their ability to counter AI-driven threats.

The Central Bank of Ireland (the “Central Bank”) has published a thematic assessment report (the “Report”) following a review of the implementation of key aspects of the Fitness and Probity regime (the “F&P Regime”) in the MiFID investment firm sector.

A key operational change to CRS is the new requirement for a Cayman Islands Financial Institution (each an “FI”) to appoint a Principal Point of Contact (“PPoC”) that is resident in the Cayman Islands. Where the PPoC of an FI is not currently resident in the Cayman Islands, the FI is required to appoint a Cayman Islands-based PPoC and notify the Department for International Tax Cooperation (“DITC”) by 31 January 2027.

The Cayman Islands has updated its Common Reporting Standard (“CRS”) framework, and most new requirements came into effect from 1 January 2026. This client update provides an overview of the changes and how the Maples Group can assist.

The Cayman Islands and the British Virgin Islands (“BVI”) occupy a leading position in the global investment funds landscape.

Effective as of 1 January 2026, an update to the Common Reporting Standard, or CRS, requires that financial institutions based in the Cayman Islands have a Principal Point of Contact, or “PPOC”, that has a physical presence within the jurisdiction.

On 24 July 2026, China's Ministry of Finance and State Taxation Administration jointly issued the Announcement on Individual Income Tax Matters Relating to Offshore Trusts (《财政部 税务总局关于离岸信托个人所 得税有关事项的公告》) (Announcement No. 21 of 2026) (the "Notice"), together with a companion Announcement of the State Taxation Administration on Collection and Administration Matters Relating to Individual Income Tax on Offshore Trusts...

The legislative framework governing agency workers in Ireland, the Protection of Employees (Temporary Agency Work) Act 2012 (the “2012 Act”) has been in place for almost 15 years but continues to be an area that generates questions...

The Cayman Islands Government has announced 1 the Cayman Islands has submitted an application to the US National Association of Insurance Commissioners (“NAIC”) for Qualified Jurisdiction Status (“QJS”).

The UK Consumer Composite Investments (“CCI”) regime introduces a new disclosure framework for investment products made available to UK retail investors.

CIMA’s new AML and sanctions Rules introduce enhanced compliance requirements for Cayman Islands regulated entities, including private funds and mutual funds. This guide summarises the key obligations, compliance considerations and action items for CIMA registered funds ahead of the 18 September 2026 implementation date.