Skip to content Skip to sidebar Skip to footer
Menu
Menu
03
2 hours ago
Data Protection & Cybersecurity

Cybersecurity Liability After the Supermarket Freezer Attacks: Why the Second Wave Will Be Judged Against the Firs

Cybersecurity liability for the supermarket freezer attacks that hit France in October and northern Europe on 1 November 2026 will turn on what each operator did in the three weeks between the two waves, and the questions it raises, from NIS2 scope to food law and insurance, must be answered in the usual emergency, just as CRA reporting, national cyber laws and the new product liability regime land on the same companies.

0Comments12 minRead time
16
Oct 2026
Data Protection & Cybersecurity

Connected Products Under Attack: The CRA and NIS2 Duties Exposed by the French Refrigeration Case

A cyber attack that disabled refrigeration in roughly 700 French supermarkets has turned the European reporting duties on connected products from a paper exercise into a live test, and it exposes three separate layers of liability that sit with three different parties: the manufacturer of the device, the operator of the site, and the maintenance contractor in between.
0Comments12 minRead time
10
Aug 2026
Gaming

The Cyber Resilience Act for gambling operators and suppliers: what falls in scope and what has to be done

The Cyber Resilience Act reaches the gambling sector more widely than most operators assume. Downloadable casino and sportsbook clients, mobile applications, gaming cabinets, self-service betting terminals, kiosks and the software supplied with them all qualify as products with digital elements, and the guidance approved by the European Commission on 27 July 2026 removes much of the uncertainty as to where the perimeter runs.

0Comments19 minRead time
05
Aug 2026
Data Protection & Cybersecurity

Cyber Resilience Act guidance: which products, which obligations, from when

The European Commission approved on 27 July 2026 the content of its guidance on the Cyber Resilience Act, which is the most detailed interpretive document published to date on Regulation (EU) 2024/2847. It is formally non-binding, although it sets out the interpretation that market surveillance authorities, notifying authorities and notified bodies are expected to apply across the Union.
0Comments34 minRead time