-
What the New Europrivacy Certification Means for Business
The European Data Protection Board (EDPB) recently gave the green light to the Europrivacy certification, making it an official “seal of approval” for sending data across borders. In the past, companies usually had to rely on complex legal agreements—specifically, Standard Contractual Clauses (SCCs) and Binding Corporate Rules (BCRs)—to legally move data to countries outside of…
-
What is the Privacy Technologist’s Role in the Context of an Organisation?
The discipline of privacy has undergone a fundamental transition from a purely jurisprudential and regulatory abstraction into a rigorous, deterministic engineering domain. Historically, privacy was relegated to compliance departments, managed via static policies, contractual terms, and retroactive auditing. However, the proliferation of hyper-scale cloud computing, sensor-based surveillance, and the pervasive integration of artificial intelligence (AI)…
-
Product Security and the Cyber Resilience Act: An Analysis of the Regulatory Landscape and Engineering Imperatives
The European Union has fundamentally recalibrated the jurisprudential and technical landscape governing digital products through the promulgation of the Cyber Resilience Act (CRA), formally adopted as Regulation (EU) 2024/2847. Entering into force on 10 December 2024, the CRA represents a seminal departure from voluntary, fragmented industry frameworks, establishing instead a unified, horizontally applied statutory regime…
-
Navigating the New Regulatory Roadmap: What the AI Omnibus ‘Decoupling’ Means for Dutch Industrial IoT and Smart Hardware
The recent political agreement on the AI Omnibus represents a watershed moment for the Dutch manufacturing, robotics, and industrial IoT (IIoT) sectors. For organisations building or deploying connected industrial systems, the formal decoupling of the Machinery Regulation from the direct, concurrent requirements of the EU AI Act fundamentally alters the compliance roadmap for the next…