GDPR News & Updates

Under the proposed Digital Omnibus, a single incident report could satisfy reporting duties under NIS2, GDPR, DORA, eIDAS and the CER Directive at once, instead of five separate filings.

In November 2025, the European Commission proposed its biggest GDPR overhaul yet - part of a wider Digital Omnibus package simplifying GDPR, the AI Act, the Data Act, and EU cybersecurity rules together.

Since January 2025, EU banks, insurers, and payment firms must comply with DORA alongside GDPR - a separate regime covering ICT risk, incident reporting, and resilience testing.

Cyprus's NIS2 cybersecurity law now covers roughly ten times more organisations than its predecessor, extending far beyond critical infrastructure into public bodies, postal services, and digital infrastructure.