215 results found

The various proposals to simplify the GDPR took centre stage, including the European Commission's proposed Digital Omnibus Package.

On 2 March 2023, the Central Bank of Ireland (the "Central Bank") published its third annual Securities Markets Risk Outlook Report (the "Report").

The Cyber Resilience Act (Regulation (EU) 2024/2847)1 (“CRA”) establishes horizontal cybersecurity requirements for products with digital elements (“PDEs”) placed on the European Union (“EU”) market. Reporting obligations took effect on 11 September 2026, with full application of the CRA from 11 December 2027.

The Centre for Democracy & Technology Europe, alongside 88 civil society organisations, companies, and cybersecurity experts published a joint letter to the European Commission.

In the run up to Christmas 2023, the Court of Justice of the European Union ("CJEU") delivered three noteworthy judgments (in cases C-340/21, C-456/22 and C-667/21)...

1.1 Would any of the following activities constitute a criminal or administrative offence in your jurisdiction? If so, please provide details of the offence...

There has been rapid adoption of artificial intelligence ("AI") technologies in Ireland. According to the Irish Central Statistics Office, the number of Irish businesses using AI increased from 8% in 2023 to 15% in 2024.

On 21 May 2024, the EU Council approved the EU Artificial Intelligence Regulation (the "AI Act"). This marks the final step in the legislative process...

The European Commission has published an Action Plan addressing the dual-edged nature of frontier artificial intelligence models in cybersecurity, outlining how the EU will harness AI's defensive capabilities while protecting against AI-powered cyber threats. Through nine key actions spanning 2026-2027, the plan establishes frameworks for safe AI evaluation, structured access to advanced AI capabilities, and the scaling of European sovereign AI cybersecurity solutions across critical infrastructure sectors.

The EU has further expanded the scope of its cybersecurity rules. On 28 November 2022, the EU Council adopted the text of the NIS 2.0 Directive.

A new Commission Implementing Regulation was published in the Official Journal establishing the circumstances, formats and procedures for notifications of conformity assessment bodies...

On 30 June 2026, the Irish Data Protection Commission (“DPC”) published its annual case studies booklet (“Booklet”) alongside its 2025 annual report (“Report”).

For the third year in a row, the Central Bank of Ireland ("Central Bank") has published a Securities and Markets Risk Outlook Report ("Report").

This article is part of a series that Matheson is publishing in advance of transposition and implementation of the second Network and Information Security Directive (EU) 2022/2555...

On 14 July 2025, the European Commission (Commission) released its first guidelines under Article 28(4) of the Digital Services Act (DSA) (Guidelines), which will apply to all online platforms accessible...

The EU Cyber Resilience Act introduces mandatory vulnerability and incident reporting obligations for products with digital elements starting September 2026. Economic operators developing, importing, or distributing such products in the EU face strict compliance deadlines, substantial penalties for non-compliance, and must implement security-by-design principles throughout product lifecycles.

Following extensive negotiations, the EU Parliament adopted the final text of the AI Act by way of final vote at its plenary sitting on 13 March 2024.

The EU has introduced several key cybersecurity laws in recent years that organisations should be aware of.