Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 04 NOVEMBER 2025

The March To Greater Cyber Resilience: Recent Changes To EU Cybersecurity Laws

RDJ LLP
RDJ LLP
Contributor
RDJ LLP

RDJ LLP

RDJ is one of Ireland’s leading corporate law firms. With more than 300 employees and offices in...

View firm profile
Explore more from RDJ LLP

The EU has introduced several key cybersecurity laws in recent years that organisations should be aware of.

IrelandTechnology
Ricky Kelly
Ricky Kelly
Author LinkedIn connections

The EU has introduced several key cybersecurity laws in recent years that organisations should be aware of. These laws aim to enhance the EU's collective cyber resilience, improve incident response, and establish common standards across Member States. One such law, the focus of this note, is the NIS2 Directive (EU) 2022/2555, which forms part of a comprehensive suite of EU cybersecurity legislation that collectively aims to enhance the Union's cyber resilience. While NIS2 focuses on operational resilience and incident response capabilities for critical infrastructure and digital service providers, it operates alongside other key regulations such as the Cyber Resilience Act (which mandates security-by-design for digital products), the EU Cybersecurity Act (which establishes the certification framework for ICT products and services), and GDPR (which governs data protection and breach notification). NIS2 expands the scope of the original NIS Directive, which establishes

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

EU Commission Publishes Cybersecurity And AI Action Plan

The European Commission has published an Action Plan addressing the dual-edged nature of frontier artificial intelligence models in cybersecurity, outlining how the EU will harness AI's defensive capabilities while protecting against AI-powered cyber threats. Through nine key actions spanning 2026-2027, the plan establishes frameworks for safe AI evaluation, structured access to advanced AI capabilities, and the scaling of European sovereign AI cybersecurity solutions across critical infrastructure sectors.
European UnionTechnology
Matheson
Matheson
Article

Time Running Out As AI Transparency Guidelines Published

The European Commission has published comprehensive guidelines on AI transparency obligations under Article 50 of the EU AI Act, with enforcement beginning August 2, 2026. These guidelines establish how organizations must disclose AI systems, mark synthetic content, label deepfakes, and demonstrate compliance, with significant penalties for non-compliance reaching up to €15 million or 3% of global turnover.
IrelandTechnology
William Fry LLP
William Fry LLP
Article

Irish Government Publishes The Regulation Of Artificial Intelligence Bill 2026

The Irish Government has published the Regulation of Artificial Intelligence Bill 2026, establishing Ireland's framework for implementing the EU AI Act. This landmark legislation creates the AI Office of Ireland as an independent statutory entity and designates existing sectoral authorities to oversee AI regulation within their domains. The Bill introduces a comprehensive administrative sanctions regime and enforcement toolkit while reflecting Ireland's National Digital and AI Strategy.
IrelandTechnology
Matheson
Matheson
Article

CJEU Clarifies The Limits Of The Hosting Safe Harbour For Online Platforms

The Court of Justice of the European Union has delivered landmark judgments that fundamentally reshape how online platforms can claim immunity from liability for user-generated content. These decisions establish that algorithmic content distribution and commercial partnerships with creators may strip platforms of their safe harbour protections, forcing a reassessment of how social media companies, video-sharing services, and digital marketplaces structure their operations and revenue models.
IrelandTechnology
Matheson
Matheson
Article

Ireland's Domestic AI Legislation Comes Into Force

Ireland has established the AI Office as its central coordinating authority under the EU AI Act, introducing a comprehensive regulatory framework that includes sector-based supervision, enforcement powers, and administrative fines reaching up to €35 million. The new legislation empowers market surveillance authorities like the Central Bank and Data Protection Commission to oversee AI compliance while creating a regulatory sandbox to foster innovation within legal boundaries.
IrelandTechnology
Arthur Cox
Arthur Cox
Article

Cyber Resilience Act: New Vulnerability Reporting Requirements Now In Force

The EU Cyber Resilience Act introduces mandatory reporting obligations for manufacturers of digital products, requiring them to notify authorities within 24 hours of discovering actively exploited vulnerabilities or severe security incidents. This regulation establishes strict timelines for early warnings, detailed vulnerability notifications, and final reports, fundamentally changing how manufacturers must respond to cybersecurity threats.
IrelandTechnology
Browne Jacobson LLP
Browne Jacobson LLP
Article

The AI Digital Omnibus – Simplifying The Path To EU AI Compliance

The European Commission's AI Digital Omnibus proposes targeted amendments to the EU's AI Act, aiming to simplify compliance requirements and address implementation challenges while maintaining core safeguards. The revision extends timelines for high-risk AI systems and provides additional regulatory privileges for small and mid-cap enterprises navigating the world's first comprehensive horizontal legal framework for artificial intelligence.
IrelandTechnology
Matheson
Matheson
Article

EU Introduces Mandatory Withdrawal Button For Online Consumer Contracts

The EU's new withdrawal button requirement will fundamentally reshape how online traders interact with consumers across member states. From June 2026, businesses offering digital contracts must implement a two-step withdrawal function that allows consumers to exercise their 14-day cooling-off period with unprecedented ease. What technical, operational, and legal changes must traders implement to meet these obligations, and what are the consequences of non-compliance?
IrelandConsumer Protection
RDJ LLP
RDJ LLP
Article

Rental Law Update: Recent Enactments Under The Housing And Residential Tenancies (Miscellaneous Provisions) Act 2026

Ireland's residential tenancies regime has undergone further significant reform through the Housing and Residential Tenancies (Miscellaneous Provisions) Act 2026, introducing new enforcement mechanisms and procedural changes that landlords must navigate. The RTB now wields expanded powers including fixed payment notices for compliance breaches, while adjudication hearings have shifted to public forums with published outcomes.
IrelandReal Estate and Construction
RDJ LLP
RDJ LLP
Article

Greenwashing Enforcement Has Arrived: What The EU's New Fast Fashion Rules Signal For All Consumer-Facing Businesses

The EU's Ecodesign for Sustainable Products Regulation has banned the destruction of unsold apparel and footwear from July 2026, forcing retailers to pivot from recycling and disposal to donation, resale and reuse strategies. With mandatory public reporting on unsold stock disposal and stricter policing of environmental marketing claims now in force, consumer-facing businesses across Ireland and the EU face a fundamental shift in how they manage inventory, report waste, and communicate sustainability creden
IrelandEnvironment
RDJ LLP
RDJ LLP
Article

Neurodivergence And Reasonable Accommodation: What Employers Need To Know

Employers face growing challenges in supporting neurodivergent employees, with up to 20% of the global population potentially affected by conditions like ASD, ADHD, and dyslexia. Irish law mandates reasonable accommodations under the Employment Equality Acts, but what constitutes appropriate measures and when does the burden become disproportionate? Recent case law reveals the narrow interpretation of employer defenses and the significant financial consequences of failing to properly assess and implement wo
IrelandEmployment and HR
RDJ LLP
RDJ LLP