EU AI Act after the Digital Omnibus: what still applies in 2026 and what moved to 2027
The Digital Omnibus pushed the EU AI Act's high-risk rules to December 2027 and August 2028. Transparency duties did not move, and some already apply.
EU regulation
DORA, NIS2 and the Cyber Resilience Act: what applies, to whom, and what supervisors now test.
EU regulation
EU Cyber Resilience Act reporting has started: what software vendors must do now
Since 11 September 2026, anyone placing software or connected products on the EU market must report exploited vulnerabilities and severe incidents within 24 hours. Here is the runbook.
EU regulation
DORA register of information: what financial entities must keep
DORA requires financial entities to maintain a register of all contractual arrangements with ICT third-party service providers, in a standard format supervisors can collect.