The Digital Operational Resilience Act (DORA) became effective on January 17, 2025, significantly impacting any supplier of technology to the financial sector in the European Union (EU), regardless of their location.

This EU regulation represents a major shift aimed at ensuring that financial institutions are resilient to operational disruptions, particularly those stemming from ICT (Information and Communication Technology) vulnerabilities. DORA ...

The Israeli Privacy Protection Authority (PPA) recently issued a new directive detailing the requirements for transferring ownership of databases of personal data. Directive No. 2/2024 emphasizes the transferor’s obligation to notify data subjects when ownership changes.

According to the directive, any change in ownership warrants notification to data subjects regarding the new owner’s identity and contact information, giving them the ...

The European Union’s Cyber Resilience Act entered into force in December. The Act aims to establish horizontal cybersecurity requirements for products with digital elements to ensure they are placed on the market with fewer vulnerabilities, and that manufacturers take security seriously throughout a product’s lifecycle. This regulation intends to improve transparency regarding product support periods, enabling users to consider cybersecurity ...