Legislation & Acts

France did not authorise a general facial-recognition system for the Paris Olympics. It created a bounded experiment in real-time event detection—and then extended that legal laboratory after the Games. Article 10 of Law 2023-380, published on 20 May 2023, authorised…

Luxembourg’s whistleblower law combines internal reporting duties with 23 competent external authorities and a central Office for Whistleblowers. The practical challenge is routing a report without losing confidentiality or momentum. The Law of 16 May 2023 transposed the EU Whistleblower…

Romania’s Law 58/2023 created a national framework for cybersecurity and cyber defence that connects institutions, incident information and the providers whose technical services can reveal a wider threat. Law No. 58 of 14 March 2023 was published on 15 March…

Spain’s whistleblower law turns an ethics hotline into a governed information system: confidential, accessible, traceable and capable of handling anonymous reports without losing follow-up. Law 2/2023, published on 21 February 2023, implemented the EU Whistleblower Directive and went beyond a…

Belgium’s private-sector whistleblower law is not satisfied by publishing an ethics address. Covered employers need an accessible reporting route, independent follow-up and confidentiality that survives the entire case. Belgium’s Law of 28 November 2022 on protection of persons who report…

Germany’s Supply Chain Due Diligence Act requires a complaints process that reaches beyond employees and headquarters. It is meant to reveal human-rights and environmental risks across the operating chain. The Lieferkettensorgfaltspflichtengesetz, or LkSG, first applied on 1 January 2023 to…

The United Kingdom’s strengthened telecom-security regime does not tell providers merely to manage risk. It pushes legal duties into network design, privileged access, monitoring, supply chains and recovery. The Telecommunications (Security) Act 2021 amended the Communications Act 2003 and created…

Portugal’s whistleblower regime turns reporting into a protected conversation. Covered organisations need written and oral routes, confidentiality, acknowledgement, follow-up and evidence that retaliation is not tolerated. Law No. 93/2021 of 20 December established Portugal’s general regime for protection of reporting…

Spain’s 2022 National Security Framework does not stop at the government network. It follows public information and services into the systems of contractors, cloud providers and their supply chains. Royal Decree 311/2022 replaced Spain’s earlier Esquema Nacional de Seguridad, or…