Afghanistan: Media, Telecoms, IT, Entertainment

The EU Cyber Resilience Act introduces mandatory cybersecurity requirements for software and digital products entering the European market, including CE marking and free security updates. With compliance deadlines approaching in December 2027, companies must begin preparing their conformity assessment processes now to meet these far-reaching obligations that may fundamentally reshape go-to-market strategies.

The European Commission has imposed a €550 million fine on AliExpress for Digital Services Act violations, marking the largest penalty under the DSA to date. The decision reveals critical failures in risk assessment methodology, moderation resourcing, and enforcement of seller penalties that allowed illegal products to proliferate on the platform. This landmark case establishes new compliance expectations for marketplaces regarding systemic risk management and operational controls.

European financial regulators have issued new guidance on managing ICT risks from frontier AI models under DORA, setting expectations that will reshape how financial entities assess their technology providers. The statement from the European Supervisory Authorities outlines three core risk mitigation strategies—prevention, detection, and management—that will drive increasingly detailed scrutiny of AI service providers' cybersecurity, governance, and operational resilience. ICT service providers,