Insights

Brussels – March 27, 2026: The Legal 500 Europe, Middle East & Africa (EMEA) 2026 edition has recognized 13 practice areas and nine lawyers in Crowell & Moring’s Brussels office.

Brussels – March 24, 2026: Chambers and Partners has ranked five Crowell & Moring practice groups and 11 individual lawyers in the Chambers Europe 2026 guide.

Chicago – February 3, 2026: World Trademark Review has once again recognized Crowell & Moring as a top trademark firm in its 2026 guide. Crowell received the highest ranking—gold—in Illinois for enforcement and litigation, and prosecution and strategy. The firm also achieved “Recommended” status in the International category and silver in the U.S. National and Belgium categories, and earned recognition as a top firm in California. Crowell is one of only three firms in Illinois to earn a gold ranking both for litigation and prosecution. 

The Court of Justice of the European Union (CJEU) recently delivered its judgment in the CeramTec case (C-17/24).

In a stunning revelation following last month’s jewel heist at the Louvre Museum in Paris, France, a 2014 audit resurfaced, spreading rumors that the password to the museum’s video surveillance system was still “Louvre.”

The EU Cyber Resilience Act (CRA) was formally adopted by the European Council on October 10, 2024. Its main goal is to enhance cybersecurity and cyber resilience across the EU by establishing common cybersecurity standards for digitally enabled products, such as required incident reports and automatic security updates. This includes, for example, connected home products (cameras, fridges, toys), password managers, firewalls, and VPNs.

In March 2024, after years of preparation, the Council of the European Union and the European Parliament reached a provisional agreement on a new regulation governing electronic health data. The regulation, known as the European Health Data Space, was first proposed in March 2022 and, when formally adopted, will apply to the primary use and secondary use of health data. This initiative is a key component of the broader EU data strategy and represents the first of nine sector– and domain–specific data spaces outlined in the European Commission’s 2020 communication on “A European strategy for data.”

On October 18, 2024, the requirements of Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS2 Directive) entered into force. The NIS2 Directive outlines the cybersecurity responsibilities of both “essential” and “important” entities, and sets out the duties of “management bodies,” emphasizing their potential liability for failure to comply with the new mandates, along with significant penalties for entities that fail to meet their obligations.

In collaboration with the IBJThe Belgian law of 18 May 2024 regulating private investigations marks a significant shift in the legal landscape for employers conducting internal investigations. This comprehensive reform replaces outdated legislation and introduces stricter compliance requirements, notably impacting data privacy and HR practices. Understanding these legal requirements is essential to avoid potential pitfalls and ensure that investigations are carried out in a lawful and efficient manner.