Timelex
Leading law firm
Menu

Blog

xxx

EBA clarifies the interplay between PSD2 and MiCAR regarding e-money tokens

17/06/2025
Banking & fintech

On 10 June 2025, the European Banking Authority (EBA) published an opinion on the interplay between the payment services framework (PSD2) and the crypto-assets framework (MiCAR) regarding e-money tokens. The opinion takes the form of a No Action Letter that, on the one hand,...read more

AI

Cyber incidents: what are the contractual consequences for you as a customer?

30/04/2025
Cybersecurity

Cyber incidents have long since ceased to affect only the IT department. They can also have a major impact on the contractual relationship between you and your service provider. Consider, for example...read more.

AI

Cyber incidents: what are the contractual consequences for you as a service provider?

30/04/2025
Contracts

Cyber incidents not only affect IT systems; they can also have far-reaching contractual consequences. Here's how to deal with that impact as a service provider and which contractual clauses require particular attention. Read more...

GDPR

A commercial interest as a 'legitimate interest' under the GDPR? What the KNLTB case means for your organization

27/03/2025
Privacy & data protection

On October 4, 2024, the Court of Justice of the European Union (CJEU) issued a decision in the case Koninklijke Nederlandse Lawn Tennisbond v. Nederlandse Autoriteit Persoonsgegevens (the ‘KNLTB case’). Read more...

GDPR

The three-step test in practice: EDPB guidelines on legitimate interest

27/03/2025
Privacy & data protection

Following the ruling in the KNLTB case on October 4, 2024, the EDPB issued guidelines on October 8, 2024 regarding the processing of personal data based on article 6.1 f) GDPR, i.e., based on the legal ground 'legitimate interest'. Read more...

GDPR

“Specific” data protection laws adopted under Article 6.3 GDPR: Key points on their drafting

25/03/2025
Privacy & data protection

In addition to the GDPR and national framework laws on the protection of personal data, many specific national laws impose or regulate certain data processing operations by public and private entities. These laws constitute the "legal basis" for processing within the meaning of the GDPR. Despite their abundance and the important source of obligations, rights and information they represent, there is little discussion of how they should be drawn up. Yet these laws must meet strict requirements. Read more...

AI

Navigating DORA: Requirements, Preparation and Impact

12/03/2025
Cybersecurity

The financial sector is undergoing a significant transformation with the introduction of the Digital Operational Resilience Act (DORA). This new European regulation, applicable since 17 January 2025, will redefine the cybersecurity landscape for financial entities. But what exactly is DORA, how can organisations (both financial entities and their ICT service providers) prepare for it and what if they are faced with a serious cyber incident ? Read more...

AI-Timelex

Unlocking EHDS: The Home Stretch and Its Impact on Businesses

25/02/2025
Artificial Intelligence (AI)

The European Health Data Space (EHDS) regulation is in its final stretch, moving closer to adoption after extensive negotiations. As a transformative framework for health data sharing across the EU, it will bring significant changes for businesses operating in the healthcare and digital sectors. This article explores some of the key impacts of EHDS, highlighting both challenges and opportunities for companies navigating the new regulatory landscape.

AI

24 hours, 72 hours, 1 month: the reporting of cyber incidents under NIS2

23/01/2025
Cybersecurity

This blog post discusses the updated cyber incident reporting obligations introduced by the NIS2 framework on network and information security. NIS2 builds on the previous NIS1 framework and significantly expands these obligations.

Stay up to date

Timelex newsletter. On signup you agree to our privacy policy.