The European Parliament has backed more breathing room for companies facing the EU Deforestation Regulation (EUDR), voting to push key compliance dates into 2026 and 2027 while simplifying due diligence rules. The goal is to give organizations time to adapt, but the politics around deforestation-free supply chains are now more contentious than ever, and certainty remains elusive.
Poland’s competition authority has opened an antitrust case into Apple, raising fresh questions about whether the tech giant’s privacy controls have given it an unfair edge in the mobile advertising market.
The Danish Data Protection Authority has stepped into a debate over how far suppliers can go when asked to hand over employee information as proof that they’re complying with employment clauses in public and private contracts. A new guidance statement, issued in response to a request from Accura Advokatpartnerselskab, lays out the Authority’s view on the data protection rules that govern these disclosures, and confirms that many suppliers have been right to question the legal footing.
Third-party risk teams have spent the last few years preparing for a world where ESG reporting would continually grow in scope, depth, and regulatory expectation. Companies were told to map emissions throughout their supply chains, understand human-rights risks in their upstream tiers, and gather detailed data from suppliers that had never before been part of formal reporting channels. For better or worse, the direction felt clear.
If 2024 reminded us of anything, it’s that the threat landscape never stands still. In every breach headline, there’s a familiar pattern: an organization falls not because of its own failure, but because a trusted partner left a back door open.
As financial institutions continue to lean on an expanding universe of cloud, fintech, and AI providers, New York’s financial regulator is reminding them that outsourcing doesn’t mean offloading responsibility.
The European Commission is moving to fine-tune the EU Deforestation Regulation (EUDR), aiming to lighten the reporting load on smaller players and stabilize the IT backbone that underpins one of the world’s most ambitious supply-chain laws.