Olivier Haas

The European Commission has published guidance on the Cyber Resilience Act, weeks before its mandatory 24-hour vulnerability and incident reporting obligations begin to apply....more As the revision of the EU Cybersecurity Act ("CSA 2") advances through the ordinary legislative procedure, its framework empowering the European Commission (the "Commission") to exclude high-risk suppliers from the EU market...more On June 3, 2026, the European Commission ("EC") published the proposed EU Cloud and AI Development Act ("CADA") as part of its broader Tech Sovereignty Package. At its core, CADA establishes a four-level assurance framework...more The EU Artificial Intelligence Act (the "AI Act") introduces new obligations for providers and deployers of "high-risk AI systems," including risk management, data governance, transparency, human oversight, and registration...more