Category

Regulations & Compliance

Between 2025 and 2027 the European regulatory package affecting anyone who builds, sells or buys software comes into application: accessibility (European Accessibility Act), the security of digital products (Cyber Resilience Act), artificial intelligence (AI Act), organisational cybersecurity (NIS2), product liability (Directive 2024/2853) and the resilience of the financial sector (DORA). In this section we read these regulations from the perspective of those who develop and maintain software, not those who comment on the legal text: what changes in the code, the documentation, the release cycle and the contract. Law firms explain what the regulation says; here you find what to do in what you build, deliver or buy. The method is always the same: no date, threshold or penalty written from memory — every statement refers to the article of the published text, and when a point has not yet been verified we say so instead of quoting it second-hand. And no alarmism about fines as a sales lever: the right reason to care about compliance is that it is becoming the criterion by which clients choose their suppliers. These articles are a technical reading, not legal advice: applying them to your specific case requires a professional. But if you need to decide what to ask your supplier, or how to be ready for your clients' questions, this is where you find the right questions.