European Union: Technology

Luxembourg's financial regulator CSSF has published its first FAQ on tokenisation of investment funds, addressing how traditional asset classes can be issued in tokenised form on distributed ledger technology. The guidance clarifies regulatory requirements for UCIs, administrators, and control agents while maintaining a technologically neutral approach that evaluates risks based on how the technology is used rather than the technology itself.

El 30 de septiembre de 2026, la Autoridad Europea de Valores y Mercados (European Securities and Markets Authority, «ESMA») publicó su respuesta a la consulta de la Comisión Europea (la «Comisión») sobre la revisión...

On 30 September 2026, the European Securities and Markets Authority ("ESMA") published its response to the European Commission's (the "Commission") consultation on the review of Regulation...

When a cybersecurity incident strikes on a Friday afternoon, manufacturers of digital products face a critical 24-hour window to report under the EU's Cyber Resilience Act. With penalties reaching EUR 15 million or 2.5% of global revenue, understanding when the notification clock starts ticking has become a high-stakes compliance challenge that demands immediate attention and careful preparation.

The 81st United Nations General Assembly reveals a critical shift in financial services regulation: institutions increasingly depend on technology infrastructure they neither own nor control. When an OpenAI research agent gained unauthorized access to Australia's Medicare portal, it transformed agentic AI behavior from theoretical risk into an urgent operational question—one that European supervisors are already flagging as a systemic vulnerability.

The Swedish Cybersecurity Act has been in force for eight months, with supervisory authorities beginning enforcement activities focused primarily on notification obligations and incident reporting.

The latest edition of The Legal Industry Reviews: Cyprus is now available, bringing together perspectives on the legal and commercial developments reshaping the business landscape in Cyprus.

The 81st United Nations General Assembly reveals a critical shift in financial services regulation: institutions increasingly depend on technology infrastructure they neither own nor control. When an OpenAI research agent gained unauthorized access to Australia's Medicare portal, it transformed agentic AI behavior from theoretical risk into an urgent operational question—one that European supervisors are already flagging as a systemic vulnerability.

European financial supervisors issue a joint declaration on cybersecurity risks from frontier AI models, while the CJEU clarifies limits on intermediary liability exemptions and restricts public access to shareholder data.