Lorcan Moylan Burke

Conceptually, you think of IoT devices, but the CRA has a far broader scope of application. In this article we examine one of the tricky nuances – distinguishing between a digital product and SaaS under the CRA. The EU’s...more The NIS2 Directive continues to evolve – and organisations must keep pace. On 20 January 2026, the Commission unveiled a set of targeted amendments to the NIS2 Directive (“the Proposal“), signalling the next phase of its push...more The requirement of NIS2 that in-scope entities adopt measures to ensure the security of its immediate supply chain is one of the lesser discussed aspects of the Directive. ...more The NIS2 Directive marks a significant evolution in the European Union’s approach to cybersecurity, expanding both the scope of regulated entities and the depth of compliance obligations. These rules are essential for...more