On 24 June 2025, Ireland’s National Cyber Security Centre (NCSC) published a set of proposed Risk Management Measures (RMMs) and launched Cyber Fundamentals, a framework designed to assist organisations to comply with the EU’s Directive (EU) 2022/2555 (the NIS2 Directive).
Tech Law Blog
Blog Authors
Latest from Tech Law Blog
Establishment of the Criminal Justice International Cooperation Office
By Raaj Zutshi & John Cahir
On 11 June 2025, the Minister for Justice, Jim O’Callaghan announced:
…
EU’s Code of Conduct on Disinformation Integrated into DSA
On February 13, the European Commission (EC) and the European Board for Digital Services (EBDS) endorsed the integration of the Code of Practice on Disinformation (the Disinformation Code) into the framework of the Digital Services Act (DSA).
Article 45 of…
One man’s pseudonymisation is another man’s anonymisation: The AG Opinion in SRB v EDPS and the scope of “personal data”
On 6 February, the EU’s Advocate General Spielmann provided his opinion (the Opinion) in the case of EDPS v SRB (Case C‑413/23 P), advising that the previous judgment of the General Court be set aside and referred for judgment back…
EU’s Code of Conduct Countering Online Hate Speech Becomes Part of the DSA
On January 20, in a long-awaited move, the European Commission (EC) announced the integration of the revised Code of Conduct on Countering Illegal Hate Speech Online (the Hate Speech Code) into the regulatory framework of the Digital Services Act (DSA). …
Navigating the DORA ICT Incident Reporting Obligations
By Aideen Burke & Tayla Price
Today marks the effective date of the Digital Operational Resilience Act (DORA) and with it, additional incident reporting obligations for in-scope financial entities.
With the aim of standardising the incident reporting process for financial entities throughout the EU, from today,…
Commission launches first specification proceedings under the DMA
The European Commission has launched its first set of “specification proceedings” under the Digital Markets Act (“DMA”).
“Specification proceedings” are actions taken by the Commission under the DMA which formalises the Commission’s regulatory discussions with a gatekeeper, allowing it to…
AI-Generated Music: How Will the Existing Copyright Framework Cope?
Recent technological advances in generative AI have transformed the way in which we listen to and create music. Many artists and industry players have readily adopted generative AI, viewing it as a creative force to be harnessed, while others remain…
Decoding the Data Protection Commission’s 2023 Annual Report – Part 1: Data Breaches
The Irish Data Protection Commission (DPC) released its 148-page annual report on 29 May 2024 (the Annual Report), highlighting the scope of work and enforcement activities undertaken by the DPC throughout 2023. A full copy of the report is available…
Political Advertising Regulation
On 13 March 2024, the European Parliament and the Council adopted Regulation (EU) 2024/900 on the transparency and targeting of political advertising (the Regulation). The Regulation is now in force, however, the majority of its provisions will not take effect…