Mark Young (partner), Paul Maynard (special counsel), and Stacy Young and Anna Oberschelp de Meneses (associates), Covington & Burling LLP, review an EU Commission NIS2 draft Implementing Regulation published in June 2024 on technical and methodological requirements and significant incidents.

This Practice Note provides guidance on the key legal and compliance requirements that a website operator should consider in the EU, including: • the type and functionality of the website • information disclosure requirements • consumer protection • privacy and data protection • cookies • accessibility • cybersecurity • platform-to-business • online payments • advertising, promotions and direct marketing • AI • competition law • taxation • liability for third party content • intellectual property and respecting copyright • geographic and territorial considerations Consideration of electronic data interchange (EDI) arrangements, blockchain, smart contracts or sector-specific laws or regulations, including those applicable to financial services, intermediation services or online auctions, is beyond the scope of this Practice Note. This Practice Note only considers legislation that has been adopted. For more information on ongoing initiatives which may impact websites operating in the EU, see Practice Note: Key EU digital initiatives—summary. The type and functionality of the website The compliance requirements and applicable rules and regulations for a website will depend on the nature of

Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. Each week these highlights focus on developments in key topics such as data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

Blockchain has erupted into mainstream consciousness, driven in part by the meteoric rise of cryptocurrencies and the booming global fintech sector, with multiple consultations and discussions by regulators underway or completed around the world. Although blockchain and its related technologies are still relatively new, significant investment has been aimed at releasing the efficiencies and capturing the new business models which it is anticipated to offer. Much of the focus to date has been on the technical and commercial aspects. But for blockchain to realise its full potential it will need to navigate the new and existing legal and regulatory environments in which it will operate. The range of potential use cases and the stage of development at which this new technology finds itself, means that this Practice Note is, by necessity, a roadmap to understanding the key legal and regulatory issues which typically arise in relation to blockchain technology rather than a set of definitive answers. The detail of the legislation and regulation applicable to blockchain

This week's edition of Practice Compliance weekly highlights includes: the latest Practice Compliance forecast, OFSI’s updated sanctions guidance and FAQs, final amendments to AML guidance from JMLSG, a significant decision on CFA enforceability, and analysis on cybersecurity risks in supply chains.

This week’s edition of Information Law weekly highlights includes a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. Each week these highlights focus on developments in key topics such as data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

The EU Agency for Cybersecurity (ENISA) has published technical guidance to aid in the implementation of the cybersecurity measures stipulated by the Network and Information Security 2 (NIS2) Directive. This directive mandates cybersecurity risk management practices across 18 critical sectors, including energy, transport, health, and digital infrastructure. The guidance addresses the requirements set out in Commission Implementing Regulation 2024/2690, targeting the digital infrastructure and ICT service management sectors.

This week's edition of Financial Services weekly highlights includes: FCA publishes CP25/27 Motor Finance Consumer Redress Scheme; ESMA widens supervisory reach for 2026; G7 Cyber Expert Group publishes statement on AI cybersecurity risks for financial sector; plus dates for your diary over the coming week.

Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. These highlights focus on key topics including data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information and defamation.

This week’s edition of Information Law weekly highlights includes: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. These highlights focus on key topics including data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. Each week these highlights focus on developments in key topics such as data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

EU Law analysis: This News Analysis discusses the key legislative and policy developments in EU Law in 2024, focusing on those that impact the Banking and finance, Commercial, Data protection and cybersecurity, Employment, Financial services, Energy, Environment, IP, Life sciences, and TMT areas and looks ahead to what’s coming up in those areas in 2025. More details on future initiatives will be provided when the 2025 Work Programme of the European Commission is published.