Basma Safir
Overview
Basma Safir is an associate in Crowell & Moring’s Brussels office. She advises clients on both contentious and noncontentious matters with a primary focus on issues relating to the digital market and technology. She also assists clients with questions involving privacy, data protection, and cyber security.
Prior to joining Crowell, Basma worked at several leading international law firms and at the European Commission’s Directorate-General for Competition, where she gained invaluable experience in online safety and regulatory issues, in particular those related to digital market regulation (the Digital Services Act).
Career & Education
- University Paris Nanterre, LLM, Law and Economics
- Catholic University of Lille, Master of Laws, International and European Business Law
- Catholic University of Lille, Bachelor of Laws, European Law
- Belgium
- French
- English
Basma's Insights
Client Alert | 6 min read | 09.11.26
It’s LIVE: The Cyber Resilience Act Reporting Is Mandatory as of Today - 11 September 2026
The wait is over. As of today, manufacturers of connected products (both hardware and software) must comply with the Cyber Resilience Act’s (“CRA”) vulnerability and incident reporting obligations. The CRA’s Single Reporting Platform (“SRP”), operated by the European Union Agency for Cybersecurity (“ENISA”), is now the EU-wide gateway through which those notifications must flow.
Representative Matters
- Providing product and compliance counsel to a prominent video management software company under the EU Cyber Resilience Act (CRA);
- Representing a leading global industrial automation and digital transformation company in complex CRA implementation projects;
Basma's Insights
Client Alert | 6 min read | 09.11.26
It’s LIVE: The Cyber Resilience Act Reporting Is Mandatory as of Today - 11 September 2026
The wait is over. As of today, manufacturers of connected products (both hardware and software) must comply with the Cyber Resilience Act’s (“CRA”) vulnerability and incident reporting obligations. The CRA’s Single Reporting Platform (“SRP”), operated by the European Union Agency for Cybersecurity (“ENISA”), is now the EU-wide gateway through which those notifications must flow.
Basma's Insights
Client Alert | 6 min read | 09.11.26
It’s LIVE: The Cyber Resilience Act Reporting Is Mandatory as of Today - 11 September 2026
The wait is over. As of today, manufacturers of connected products (both hardware and software) must comply with the Cyber Resilience Act’s (“CRA”) vulnerability and incident reporting obligations. The CRA’s Single Reporting Platform (“SRP”), operated by the European Union Agency for Cybersecurity (“ENISA”), is now the EU-wide gateway through which those notifications must flow.
