International Comparative Legal Guide To: Cybersecurity 2018 - 1st Edition

The European Commission has published an Action Plan addressing the dual-edged nature of frontier artificial intelligence models in cybersecurity, outlining how the EU will harness AI's defensive capabilities while protecting against AI-powered cyber threats. Through nine key actions spanning 2026-2027, the plan establishes frameworks for safe AI evaluation, structured access to advanced AI capabilities, and the scaling of European sovereign AI cybersecurity solutions across critical infrastructure sectors.

The European Commission has published comprehensive guidelines on AI transparency obligations under Article 50 of the EU AI Act, with enforcement beginning August 2, 2026. These guidelines establish how organizations must disclose AI systems, mark synthetic content, label deepfakes, and demonstrate compliance, with significant penalties for non-compliance reaching up to €15 million or 3% of global turnover.

The Irish Government has published the Regulation of Artificial Intelligence Bill 2026, establishing Ireland's framework for implementing the EU AI Act. This landmark legislation creates the AI Office of Ireland as an independent statutory entity and designates existing sectoral authorities to oversee AI regulation within their domains. The Bill introduces a comprehensive administrative sanctions regime and enforcement toolkit while reflecting Ireland's National Digital and AI Strategy.

The Cyber Resilience Act (Regulation (EU) 2024/2847)1 (“CRA”) establishes horizontal cybersecurity requirements for products with digital elements (“PDEs”) placed on the European Union (“EU”) market. Reporting obligations took effect on 11 September 2026, with full application of the CRA from 11 December 2027.

The European Union has reached a political agreement to amend the AI Act, introducing targeted changes aimed at simplifying compliance requirements for businesses while maintaining protective standards.

Ireland has established the AI Office as its central coordinating authority under the EU AI Act, introducing a comprehensive regulatory framework that includes sector-based supervision, enforcement powers, and administrative fines reaching up to €35 million. The new legislation empowers market surveillance authorities like the Central Bank and Data Protection Commission to oversee AI compliance while creating a regulatory sandbox to foster innovation within legal boundaries.

The Court of Justice of the European Union has delivered landmark judgments that fundamentally reshape how online platforms can claim immunity from liability for user-generated content. These decisions establish that algorithmic content distribution and commercial partnerships with creators may strip platforms of their safe harbour protections, forcing a reassessment of how social media companies, video-sharing services, and digital marketplaces structure their operations and revenue models.

On 19 November 2025, the European Commission published its proposed Digital Omnibus Package, a reform aimed at overhauling significant parts of the European Union's digital regulatory framework.

The EU Cyber Resilience Act introduces mandatory reporting obligations for manufacturers of digital products, requiring them to notify authorities within 24 hours of discovering actively exploited vulnerabilities or severe security incidents. This regulation establishes strict timelines for early warnings, detailed vulnerability notifications, and final reports, fundamentally changing how manufacturers must respond to cybersecurity threats.

The European Commission's AI Digital Omnibus proposes targeted amendments to the EU's AI Act, aiming to simplify compliance requirements and address implementation challenges while maintaining core safeguards. The revision extends timelines for high-risk AI systems and provides additional regulatory privileges for small and mid-cap enterprises navigating the world's first comprehensive horizontal legal framework for artificial intelligence.

CIMA’s new AML / CFT / CPF Compliance Rule and Sanctions Rule, effective 18 September 2026, introduce binding compliance, governance, risk management and sanctions screening requirements for all regulated financial service providers in the Cayman Islands.

On 24 July 2026, China's Ministry of Finance and State Taxation Administration jointly issued the Announcement on Individual Income Tax Matters Relating to Offshore Trusts (《财政部 税务总局关于离岸信托个人所 得税有关事项的公告》) (Announcement No. 21 of 2026) (the "Notice"), together with a companion Announcement of the State Taxation Administration on Collection and Administration Matters Relating to Individual Income Tax on Offshore Trusts...

Most often, businesses gravitate towards the LTD model due to its familiarity and simplicity. However, DACs and Irish Collective Asset Management Vehicles...

An overview of the Cayman Islands fund finance market, highlighting H1 2026 trends, data and outlook, including transaction activity, subscription line and NAV facility developments, financing terms, pricing trends and market expectations for the second half of 2026.

The Cyber Resilience Act (Regulation (EU) 2024/2847)1 (“CRA”) establishes horizontal cybersecurity requirements for products with digital elements (“PDEs”) placed on the European Union (“EU”) market. Reporting obligations took effect on 11 September 2026, with full application of the CRA from 11 December 2027.

Our corporate team were happy to advise AMCS on their latest acquisition as the business continues to grow their international footprint and scale.

The Irish Budget for 2026 was announced by Minister Pascal Donohoe on 7 October 2025.

An overview of the European fund finance market, highlighting H1 2026 trends, data and outlook, including transaction volumes, jurisdictional preferences and emerging financing trends. This forms part of the August 2026 Edition of FUNDed

The BVI’s April 2026 update to its CRS Guidance Notes advances the implementation of CRS 2.0, expanding the scope of reportable accounts and introducing new compliance and reporting obligations ahead of the first reporting deadline on 31 May 2027.