Eve-Christie Vermynck

Jan 15, 2025 | jdsupra.com | Eve-Christie Vermynck

Dec 23, 2024 | jdsupra.com | Eve-Christie Vermynck

[co-author: Aadam Sattar]The Digital Operational Resilience Act (DORA) establishes a harmonised and comprehensive framework for information and communication technology (ICT) risk management in the financial sector. It is a directly applicable EU regulation designed to ensure that financial institutions within the European Union can withstand, respond to, and recover from ICT-related disruptions and threats. DORA came into effect on 16 January 2023 and will apply as of 17 January 2025.

Nov 13, 2024 | jdsupra.com | Kim Roberts |Eve-Christie Vermynck

[co-author: Beatrice Edler]On October 23, the UK Government’s House of Lords had its first reading of a new proposed data protection bill, the Data (Use and Access) Bill (“DUA Bill”), as sponsored by the Department of Science, Innovation, and Technology (“DSIT”). If passed, the DUA Bill will replace the current UK Data Protection Act 2018 which incorporates the UK version of EU General Data Protection Regulation (2016/679) (the “UK GDPR”).

Dec 1, 2023 | jdsupra.com | David Simon |Jonathan Stephenson |Eve-Christie Vermynck

A recent draft of the EU Agency for Cybersecurity’s (ENISA’s) European Union Cybersecurity Certification Scheme on Cloud Services (EUCS) reveals what requirements are currently being considered (and what requirements have been lifted) for non-EU cloud service providers (CSPs), according to an unofficially released report.1 Most significantly, the draft appears to remove the requirement for data localisation, except for CSPs that fall within a new assurance level of “high+.” The data...

Sep 18, 2023 | lexology.com | Eve-Christie Vermynck |Jonathan Stephenson |Alistair Ho

Key PointsOrganizations developing or using generative AI tools should implement cross-functional governance frameworks to develop and continuously monitor their use of such tools. From the earliest stages of generative AI use, organizations should assess the data protection, cybersecurity and intellectual property risks, particularly in relation to any training data used by the generative AI tool. European regulators are actively considering the implications of generative AI.