Insights

Brussels – April 21, 2026: Lauren Cuyvers has joined Crowell & Moring as a partner in its highly regarded Privacy and Cybersecurity Group, expanding the firm’s ability to provide critical legal counsel to clients managing a complex and rapidly changing privacy and cybersecurity landscape globally. She is the third addition to the firm’s Brussels office in the last six months and the fourth partner to join the firm’s Privacy and Cybersecurity Group in the last year.

The EU Cyber Resilience Act (CRA) is an EU product cybersecurity law for connected products (formally, “products with digital elements” under the CRA) commercialized in the EU; it entered into force on 10 December 2024, with direct application across the EU. Full application begins 11 December 2027, but one of its most operationally demanding provisions takes effect in just under 100 days, on 11 September 2026: the mandatory vulnerability and incident reporting under Article 14 CRA.

The EU AI Act defines ‘AI literacy’ as the skills, knowledge and understanding to enable the informed use and operation of AI systems and increase awareness of the opportunities, risks and possible harm that AI systems may present — with the ultimate purpose being to ensure that staff (and other relevant individuals) are able to take informed decisions in relation to AI, such as how to interpret AI output and decision-making processes and their impact on natural persons.