Latest News & Insights

The Ukraine Facility has expanded its list of eligible countries. But broader access creates a new procurement risk: country eligibility, product origin and reciprocal access must now be managed throughout contract performance — not treated as a one-time tender check.

The Cyber Resilience Act introduces strict vulnerability and incident reporting duties for manufacturers of connected products. This client alert explains the Article 14 reporting framework, key deadlines and the practical steps companies should take before the obligations become operational.

The Hugging Face incident exposed a new layer of AI governance risk: agents can communicate, coordinate and amplify each other’s behaviour outside the intended orchestration layer. The EU AI Act already requires providers to address interaction risk, traceability and value-chain responsibility — but the methodology for demonstrating compliance in multi-agent architectures is still developing.

Part I mapped the boundary between EU aviation certification and the Cyber Resilience Act. Part II moves beyond that boundary to examine the wider regulatory architecture governing autonomous UAS — from the AI Act and data rules to cybersecurity, product liability and dual-use controls — and how these regimes interact across a single drone system.