Opinionated, evidence-grounded takes on where governance, risk, and compliance are heading - and what an honest security posture really requires.
The lowest-risk IVDs in Europe are the last products to get a barcode duty on their label. They are also the only products where nobody independent looks at that label before an inspector does.
The regulator with the deepest reach into your most critical vendor will never knock on your door.
The certificate is not the hard part. Phase 2 of the CMMC rollout moves third-party certification from something you plan for into something that gates the award itself.
The EHDS Regulation is in force. Almost none of it applies yet. Article 105 is the reason, and it is not an application date.
Two days ago, the Delete Act stopped being a registration statute. Civil Code § 1798.99.86(c)(1) opens with a date that has now passed: "Beginning August 1, 2026, a data broker shall access the accessible deletion mechan…
On 12 January 2027 the bill for leaving your cloud provider goes to zero. Not reduced. Not capped at cost. Zero.
