4/10/2026 12:50:56 PM Decoding the Cyber Resilience Act – Part 3: Managing CRA Risk in Practice By Satya Staes Polet Christoph Werkmeister Theresa Ehlen Elena Brandt Quentin Fontaine Annabelle Hamelin +3 more... Show less In the first and second posts of our CRA series, we examined the scope of the Cyber Resilience Act (Regulation (EU) 2024/2847, the CRA)...
4/10/2026 3:00:47 AM Agentic AI security risks: Hong Kong PCPD’s guidance and other emerging regulatory responses internationally By Richard Bird Fan Li Jade Bryant The Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong has recently issued a media statement outlining key personal...
3/31/2026 2:02:03 PM Quantum disentangled #4: Quantum and privacy – Why cross-border data transfers may become a quantum issue sooner than expected By Megan Kayo Christoph Werkmeister Richard Bird Cedric Lindenmann Fan Li Christian Sosna John-Markus Maddaloni +4 more... Show less When businesses send personal data across borders, they often rely on encryption to make that transfer legally defensible. But what...
3/23/2026 1:00:27 PM UK ICO issues updated guidance on international transfers: Part 2 – transfer mechanisms for restricted transfers By Rachael Annear Philipp Roos Tochukwu Egenti Adam Gillert +1 more... Show less The UK’s General Data Protection Regulation (GDPR) regime imposes restrictions on the transfer of personal data outside the UK. In...
3/19/2026 8:26:48 PM CJEU confirms that a single DSAR can be “excessive” if made with abusive intention By Christoph Werkmeister Satya Staes Polet Elena Brandt Quentin Fontaine Christian Sosna Adam Gillert +3 more... Show less Article 15 of the GDPR grants individuals the right to make a data subject access request (DSAR) to obtain confirmation from a controller...
3/16/2026 12:58:09 PM Autonomous AI Agents and the GDPR: First detailed Spanish regulatory guidance sets the bar By Christoph Werkmeister Oscar Bellsolell Julia Utzerath John-Markus Maddaloni +1 more... Show less Businesses across Europe are rapidly moving from experimental chatbots to autonomous AI agents that plan, reason, access internal data...
3/13/2026 4:46:24 PM Quantum Disentangled #3: Quantum Technologies and National Security: Industrial Policy Meets Investment Control By Frank Röhling Uwe Salaschek Aimen Mir Colin Costello Alastair Mordaunt Matthias Wahls +3 more... Show less How government support for “quantum champions” interacts with FDI screening, export controls and sovereignty-sensitive investments...
3/10/2026 9:16:16 PM Principles Guiding the Use of AI in Arbitral Proceedings (Part I) By Natalia Zibibbo Olivier André Boyan Arshinkov Theresa Fenner +1 more... Show less The year 2025 marked a watershed moment for artificial intelligence (AI), with the release of more powerful generative models and a rapid...
3/9/2026 4:38:04 PM UK ICO issues updated guidance on international transfers: Part 1 – identifying restricted transfers By Rachael Annear Giles Pratt Philipp Roos Tochukwu Egenti Adam Gillert +2 more... Show less The UK’s General Data Protection Regulation (GDPR) regime imposes restrictions on the transfer of personal data outside the UK. In...
3/6/2026 10:48:42 AM UK Cryptoasset Regime: The Full Package By Cyrus Pocha Claire Harrop Noah Schmidt This is the final post in our series covering recent UK cryptoasset developments. Consider it your one-stop reference point. Below, we...
3/5/2026 9:32:16 PM Old Rules, New Tricks: The FCA's Proposed Approach for Applying FCA Handbook Rules to Cryptoasset Firms By Cyrus Pocha Claire Harrop Noah Schmidt On 23 January 2026, the FCA published a consultation paper (CP26/4) outlining its further proposals for the application of existing FCA...
3/4/2026 12:28:19 PM Capital Idea: The FCA's Proposed Prudential Regime for Cryptoasset Firms By Cyrus Pocha Claire Harrop Noah Schmidt On 16 December 2025, the FCA published a consultation paper on its proposed prudential rules (CP25/42) – a key component of the UK’s...