Two-Minute Recap IT Law Matters Around The Globe

EU Cyber Reporting Duties Take Effect

On 11 September 2026, reporting obligations under the Cyber Resilience Act (“CRA”) became applicable. Manufacturers must report actively exploited vulnerabilities and severe incidents affecting product security through the Single Reporting Platform. An early warning is due within 24 hours of becoming aware, followed by a fuller notification within 72 hours. Final reports are due within 14 days after a corrective measure becomes available for vulnerabilities and within one month after the 72-hour notification for severe incidents. The CRA’s main product requirements apply from December 2027.

EPRS Examines the Role of AI in Crime and Law Enforcement

On 30 September 2026, the European Parliamentary Research Service (“EPRS”) published a briefing examining the use of artificial intelligence (“AI”) in criminal activities and law enforcement. The briefing explores how AI facilitates increasingly sophisticated fraud, phishing, deepfakes and