Licentium

From the journal

European AI Office announces event on product cybersecurity

The European AI Office has scheduled an event titled 'Product Cybersecurity: Making CRA a Reality' for 11 December 2026, focusing on the intersection of product cybersecurity and the Cyber Resilience Act, impacting AI systems.

1 min read

The European AI Office announced a new event titled 'Product Cybersecurity: Making CRA a Reality' scheduled for 11 December 2026. This event will address product cybersecurity in relation to the upcoming Cyber Resilience Act.

The European AI Office operates under the AI Act, which governs general-purpose AI models and ensures compliance with health, safety, and fundamental rights standards. The specific provisions of the AI Act empower the Office to enforce rules and evaluate AI models.

The event will apply to all regulated entities involved in developing or deploying AI systems, as they must be aware of the implications of the Cyber Resilience Act on their operations.

Entities should monitor developments related to this event and assess how emerging cybersecurity requirements may impact their AI systems and compliance frameworks.

The AI Office aims to provide insights into regulatory expectations and best practices for cybersecurity in AI applications during this event.

Source: AI Office / EC, official publication, retrieved 2026-10-26

AI Regulatory

More from the journal

See all

Software escrow for South African AI supplied to an Irish bank

A Cape Town AI supplier offers source-code escrow to an Irish bank that depends on its fraud-alert service. The bank needs a way to continue operating after supplier failure, but the software also depends on licensed model technology and cloud services. A workable arrangement requires a recoverable deployment, permission to operate it and an alternative when a necessary dependency cannot survive the supplier.

AI debt collection from India and the UK authorisation boundary

A Pune company supplies an AI debt collection system to a UK consumer-credit lender authorised by the Financial Conduct Authority (FCA). The system drafts reminders, schedules contacts and proposes repayment options, while the lender approves customer communications and decides forbearance. The supplier wants a later version to contact borrowers and negotiate within lender-set limits. The recommended first release keeps collection activity with the lender; the supplier-operated version needs a different permission and operating structure.

Crypto Travel Rule failures between a Brazilian provider and an Irish CASP

A Brazilian virtual-asset provider wants to transfer business customers' crypto-assets to an Irish crypto-asset service provider, or CASP. The assets reach the receiving address with incomplete originator information and a legal-entity name that does not match the recipient account. The sender demands immediate release because the blockchain transfer is final. The Irish receiver should hold customer availability while it resolves the identities and missing data, then make a documented release or return decision.

Ready to launch without the regulatory guesswork?

Book a 30-minute consultation with a senior advisor and talk through your route.

Get started

Where to go from here

Try Licentium AI

Licentium's AI workspace for regulatory questions. Web3 and AI teams shipping fast.

Browse the Fintech Licensing Hub

Jurisdiction-by-jurisdiction guides on licensing pathways, timelines, and costs.

Talk to us

Book a 30-minute consultation. We'll map your path and tell you what's required.