Operations | Monitoring | ITSM | DevOps | Cloud

EU AI Act: what changes in August 2025 and how to prepare

‍ On August 2, 2025, a key part of the EU AI Act comes into force. It has serious implications for how you manage incidents related to artificial intelligence. ‍ While the full regulation will not apply until 2026, new obligations for providers of general-purpose AI (GPAI) models begin this summer. If you are building or deploying AI-powered services in Europe, the clock is ticking.

The GENIUS Act: A Regulatory Milestone for Stablecoins and the Digital Dollar

The GENIUS Act (Guiding and Establishing National Innovation for US Stablecoins), passed by the US Senate on June 17, 2025, represents a pivotal moment in the regulatory landscape of crypto assets. Many industry leaders, like Paolo Ardoino, the CEO of Tether, have lauded this legislation. They see it as a pathway toward achieving a clear and structured legal framework for stablecoin issuers. Beyond setting forth technical prerequisites, this legislation might serve to recalibrate the dollar's role in the digital economy and fortify the standing of crypto allies.

Is your cloud data truly sovereign? The CLOUD Act & FISA 702 reality check

As UK public sector bodies, financial institutions, and enterprises accelerate cloud adoption, a pivotal question emerges: Who truly controls your data, and under which laws? With data breaches and regulatory scrutiny intensifying, storing data and workloads in a host country alone doesn't guarantee sovereignty. U.S.

The 6th DORA requirement no one told you about

In this day and age, rare is the organization (if there is one at all) that has never been hit by a cyberattack. Few have escaped the nightmare of systems going down, customers losing access to their accounts, or payments getting stuck mid-transfer. Just as common is all the stress on the path to recovery and the absence of a structured, streamlined, and repeatable process for effectively preparing for the worst.

How to Prepare for APRA CPS 230 Regulations

Understand what APRA CPS 230 means for your organization, and how to get compliance-ready by the July 2025 deadline. If you work for an Australian business in the financial services industry, you’ve likely already heard of the Australian Prudential Regulation Authority (APRA). You may also have heard that a new set of APRA regulations, CPS 230, will become mandatory for all APRA-regulated companies to comply with as of 1 July 2025.

HIPAA vs GDPR Differences You Need to Know

HIPAA and GDPR compliance laws are both essential laws from Europe and America to protect user data. While HIPAA focuses on protecting medical and patient information to prevent the rise in healthcare data breaches, GDPR is broader, focusing on regulations that handle personally identifiable information (PII) of EU and UK citizens.

When to Call a Lawyer for Unpaid Overtime

Rebel's Guide to Project Management, a digital resource for professionals, surveyed 3,000 employees across the U.S., finding that collectively Americans worked 46 billion hours of unpaid overtime in 2023. If you do overtime work, say, 40 hours, and go unpaid, it would be in your best interest to re-evaluate this setup. Your employers may have instructed you to clock out and continue working or to suffer retaliation for discussing wages with your co-workers.

The EU AI Act and what it means for managing incidents

If you've been in earshot of tech leadership lately, you've probably heard the words 'EU,' 'AI,' and 'compliance' in conversation. The EU AI Act is officially upon us, and with it comes a whole new set of incident response and reporting requirements that might feel like a yet another bureaucratic set of requirements to worry about. But there's a different way to look at this legislation.

From Mandate to Mindset

Regulations like the EU’s Cyber Resilience Act (CRA) are top of mind for many in the embedded software world right now, and understandably so. The pressure to comply is real, especially for teams already juggling tight schedules and complex development environments. But as disruptive as these mandates might feel, they also present an opportunity and perhaps a necessary nudge to adopt better habits that can strengthen the software we build, far beyond compliance.