Product liability

The product liability directive (software included) and the Cyber Resilience Act.

Cyber regulatory watch: what changed in October 2026

The five regulatory developments of October 2026 that matter to those who take on cyber risk: the Italian decree implementing the AI Act, simpler NIS2 registration, the EU Council position on the Digital Omnibus, a data protection fine after a ransomware breach and the first reminder of Cyber Resilience Act reporting duties.

Regulation · Nov 03, 2026

Read

AI Act: obligations, deadlines and what changes for insurance

Fact sheet updated to 1 November 2026 on Regulation (EU) 2024/1689 (AI Act), the 2026 amendments and the related Italian rules (Law 132/2025 and Legislative Decree 160/2026): who is in scope, prohibited and high-risk systems, deadlines, fines, authorities and what it means for cyber, PI and liability policies, including life and health pricing.

Regulation · Nov 02, 2026

Read

Cyber Resilience Act: obligations, deadlines and what changes for cyber insurance

Fact sheet updated to 1 November 2026 on Regulation (EU) 2024/2847 (Cyber Resilience Act): which products are in scope, reporting of exploited vulnerabilities in force since 11 September 2026, security requirements from 11 December 2027, fines and what it means for cyber, tech E&O and product liability policies.

Regulation · Nov 02, 2026

Read

Cyber catastrophe risk and cat bonds

What cyber catastrophe risk is, how insurers and reinsurers protect themselves against accumulation and how cyber cat bonds work: triggers, the main issues from 2023 to 2026, pricing, limits and outlook.

Insights · Nov 01, 2026

Read

AI civil liability: who pays for the damage and which policy responds

With no dedicated EU directive, damage caused by an AI system is handled through national civil law, the new Product Liability Directive, the AI Act and, in Italy, Law 132/2025 and Legislative Decree 160/2026. A reading from the side of those who take on cyber risk: where liability falls, which policies are exposed, where the market is excluding and which questions to bring to renewals.

Regulation · Nov 01, 2026

Read

Software as a product from 9 December 2026: what changes for underwriting across PI, product liability and cyber

From 9 December 2026 software is a product under Directive (EU) 2024/2853. What falls into PI, product liability and cyber, where the three covers overlap or leave gaps, and what changes in underwriting questions.

Regulation · Oct 31, 2026

Read

April 2026: pre-login 5G flaws, audio that hijacks agents, post-quantum under attack

April 2026 brings the IEEE S&P proceedings. Valid but inconsistent 5G messages crash the modems of 542 smartphone models, and imperceptible audio hijacks voice assistants. Computer-use agents cause harm even from benign instructions. On the post-quantum side, HQC and Falcon give way to side channels. The insurance lead market and the AI Act close the month.

Research · Apr 30, 2026

Read