The EU’s New Data-Centre Labels Won’t Tell You the Whole Energy Story
The EU plans public energy and water grades for individual data centres from 2027. The labels should aid comparisons, but will not show each site’s exact annual electricity total.
European Union
Europe Just Started the 24-Hour Cyber Reporting Clock for Digital Products
ENISA's CRA Single Reporting Platform is now live, and the first 24-hour reporting clock is running. Manufacturers need more than a portal login to meet it.
Europe Nears Its First Quantum-Safe Deadline With “Limited Progress”
Europe’s first post-quantum milestone arrives at the end of 2026. The roadmap is not a blanket law, but the EU’s own assessment says implementation is still making only limited progress.
An EU Data Order Can Now Cross Borders Directly. The Provider May Have Eight Hours.
The EU e-Evidence Regulation makes cross-border data orders an eight-hour operational challenge for service providers, not merely a legal process.
The CRA Reporting Clock Starts on 11 September 2026
CRA Article 14 reporting is now operational. ENISA's portal has no API, and its 72-hour display can run early, so manufacturers must calculate legal deadlines independently from the awareness timestamp.
A Compromised Trivy Update Led to a European Commission Cloud Breach
The European Commission used a compromised version of a trusted security scanner. The resulting breach shows that build tools can become credential-harvesting infrastructure inside the systems they are meant to protect. CERT-EU published its investigation into a European Commission cloud…
The EU Data Act Is a Cloud-Exit Law as Much as an IoT Law
The EU Data Act, effective from 12 September 2025, grants users rights to access and share data from connected products, aiming to enhance data portability and interoperability. It imposes new requirements on cloud service providers to facilitate easier switching and data extraction, fundamentally altering infrastructure and user access dynamics.
The EU AI Act After 2 August 2026: What Applies and What Comes Next
The EU AI Act's phased application reached a significant milestone on 2 August 2026, with new transparency obligations enforced. While high-risk rules have extended deadlines, organisations must remain proactive in governance, ensuring AI literacy and accountability. Compliance should not hinder innovation, as effective inventory management aids both.
The European Health Data Space Is Not Just Another GDPR Article
The European Health Data Space creates infrastructure and governance for exchanging and reusing health data. It entered into force in March 2025, but most operational duties arrive through a long, staged implementation. Regulation (EU) 2025/327 entered into force on 26…
Healthcare Cybersecurity in Europe: From Guidance to Operational Readiness
The European Commission's action plan, launched in January 2025, aims to enhance cybersecurity in hospitals and healthcare providers, recognising its vital role in patient safety. The plan focuses on prevention, detection, response, recovery, and deterrence, providing guidance and resources tailored to the sector's unique needs, while integrating existing regulations like GDPR and NIS2.