Diritto al Digitale

What should a company do when it discovers a vulnerability in a product covered by the EU Cyber Resilience Act? And what happens when that vulnerability becomes a cybersecurity incident? In this episode, Giulio Coraggio, a technology and data lawyer, discusses with the journalist Antonio Ravenna how companies should deal with vulnerabilities and cybersecurity incidents under the Cyber Resilience Act (CRA), including the new reporting obligations, the role of ENISA and the CRA Single Reportin...

What incidents and vulnerabilities must be reported under the Cyber Resilience Act (CRA)? Since 11 September 2026, the CRA reporting obligations are in force, with companies required to assess and report certain cybersecurity incidents and actively exploited vulnerabilities through the ENISA reporting platform. In this video, I explain: * What events and vulnerabilities need to be reported * How companies should assess whether a report is required * What internal processes should be put in...

The September 11 deadline under the Cyber Resilience Act has passed, and the reporting platform is already operational. Companies within the CRA’s scope need to understand what the new reporting obligations mean and what action is required. Watch my latest video for a practical overview of the CRA reporting requirements and the key implications for companies. Send us Fan Mail

Prediction markets are expanding rapidly, allowing users to trade contracts linked to the outcome of future events, from elections and sports competitions to economic and other real-world events. But how should these platforms be qualified under European gambling laws? In this episode of Diritto al Digitale, Giulio Coraggio, a technology, data and gambling lawyer, looks together with the journalist Antonio Ravenna at the regulatory question that is becoming increasingly relevant for predict...

The EDPB has issued its new Guidelines on Anonymisation, and they could have major implications for AI systems, AI training data and GDPR compliance. In this episode of the Legal Break, Giulio Coraggio discusses the new EDPB Guidelines with journalist Antonio Ravenna and explains what they mean in practice for organisations developing or deploying AI. Among the key issues discussed: • When can data really be considered anonymous under the GDPR? • Why anonymisation is relative and context-depe...