The European Union has adopted a delegated regulation updating its control list of dual-use items. This revision strengthens export controls on sensitive technologies — in particular quantum computing and semiconductors — and calls on companies to review and adjust their compliance procedures accordingly.

The special committee of the National Assembly has adopted the “Resilience” Bill, transposing NIS 2, a directive accompanying DORA, and CER. An amendment prohibits any form of backdoor. Next step: examination in a public session, within an already busy parliamentary schedule.

Between GDPR, NIS 2, DORA, eIDAS and the OIV regime, every cyber incident can trigger a cascade of notifications. The European Commission is finally proposing to simplify this regulatory maze: a unique opportunity to ease the burden on companies without undermining collective security?

Since the early 2020s, international regulation has taken a new turn: access to certain online services - pornography, social media, e-commerce - is subject to age verification. Zoom in on the case of pornographic websites.

At the heart of the ‘Resilience’ bill, which is meant in particular to transpose the NIS 2 directive, one question has entered the debate: should encryption be sacrificed in the name of public security, or safeguarded to protect cybersecurity for all?

AI agents could challenge several fundamental legal principles around delegated legal capacity, attribution of errors, and auditability of decisions... Foundation models are becoming a commodity, and attention is now focused on the application layer. From Silicon Valley to private laboratories, the goal is no longer just to generate text or images, but to create systems capable of taking action. For decision-makers, these issues are not theoretical; they are already shaping the integration of AI in business today. An Expert Opinion by Adrien Basdevant, lawyer specializing in data and AI issues and co-founder of Entropy, a digital law firm.