News and Insights

Practical updates on AI governance, workforce strategy, and digital resilience for EU organisations
Denmark wants consent for deepfakes Why AI-Assisted Attacks Go Through The Side Door AMD plans its chip supply further ahead An AI Savings Target Is A Promise, Not A Result Spotting AI-Generated Scams Is The Wrong Defence Copyright and AI: Brussels asks again BNP’s Google deal has a data boundary EDPB: a fine unless the breach is minor The KIDS Act gates AI chatbots

Stay ahead of AI change. Get practical updates from Future Prep direct to your inbox.

By subscribing you agree to receive Future Prep news. Unsubscribe any time.

Latest Insights

From the Future Prep blog

AI generated image - a staff side door left ajar at a bank building, illustrating how AI-assisted attacks find less-guarded entry points

Why AI-Assisted Attacks Go Through The Side Door

The attackers who breached Korean banks in late September skipped internet banking and went through systems built for loan agents, staff and contractors. AI-assisted attacks make trying every door cheap. The defence is an inventory and an owner.
AI generated image - printed budget page with a bar chart stepping towards an AI savings target line on a boardroom table

An AI Savings Target Is A Promise, Not A Result

Deutsche Telekom expects AI and automation to cut indirect costs by about €2.5 billion by 2030. The Bank of Japan sees AI demand arriving before AI profits. Here is what an AI savings target needs before a board will trust it.
AI generated image - a desk phone and a transfer form awaiting a second signature, a control against AI-generated scams

Spotting AI-Generated Scams Is The Wrong Defence

A cloned voice helped move around €95 million out of an Italian bank. A new Eurobarometer shows fewer than half of EU employees think they could spot an AI-generated fake. Why the defence against AI-generated scams is procedure, not perception.
AI generated image - a data centre linked by a district heating pipe to nearby apartment blocks, illustrating the EU data centre rating

The Data Centre Rating Measures The Building, Not The Cloud

The EU data centre rating will score facilities above 500 kW on energy, water and grid contribution from 2027. It rates buildings, not cloud services. What that means for cloud and AI procurement, and three questions to put to your provider now.
AI generated image - a printed audit log on an operations desk in front of server racks, illustrating AI agent liability

Why AI Agent Liability Follows The Instruction

The chair of the US FTC says AI agents are tools and whoever instructs them answers for the harm. European law reaches a similar place through roles. What AI agent liability means for developers, deployers and the people who give agents their instructions.
AI generated image - an unopened supplier component beside a server rack, illustrating supplier security

Supplier Security Is Not A Brand Name

Miljödata never checked the version of a firewall component because it was an expensive product from a well-known supplier. Sweden's regulator fined it SEK 1.8 million. What the decision says about supplier security for any firm hosting other organisations' data.

Latest News

Short updates

Denmark wants consent for deepfakes

Denmark’s culture minister introduced a bill on 8 October to ban sharing realistic digital imitations of a person’s appearance or voice without consent. Performers’ work is covered too, and satire stays allowed. The minister hopes it takes effect at the turn of the year. For anyone generating synthetic voices or faces, the question moves from whether output is labelled to whose likeness it uses, and who agreed to that.

AMD plans its chip supply further ahead

AMD will substantially increase chip supply in 2027 and now plans three to five years ahead, chief executive Lisa Su told reporters in Taipei on 6 October. Demand still exceeds supply, AMD needs more advanced wafer capacity and Su called Taiwan critical to the chip supply chain. An AI roadmap set a year at a time quietly assumes that capacity will be there. How far ahead does yours look?

Copyright and AI: Brussels asks again

On 29 September the European Commission opened a consultation on how technology, AI included, affects copyright protection. The use of protected content in AI is one of four focus areas. Rights holders, generative AI providers and other AI value-chain actors are among those invited to respond until 3 November 2026. An organisation deploying generative AI arguably sits in that chain. Is its view on licensing better heard now, or after any new measures take shape?

BNP’s Google deal has a data boundary

BNP Paribas has signed a five-year Google Cloud partnership covering infrastructure, Gemini models and internal AI agents. It is not a wholesale move. The bank’s existing governance framework decides which data may run in public cloud, and certain categories will stay out. Each agent is to be limited to the resources its task needs. For an EU-operating organisation, the question is whether that boundary is drawn before the contract or after it.

EDPB: a fine unless the breach is minor

The EDPB has adopted guidelines setting a five-step test for when a data protection authority should fine rather than reprimand. Step four carries the weight. A minor infringement generally draws a reprimand, while a non-minor one brings a strong presumption that a fine follows. For an EU-operating organisation, the live question moves from whether a fine is likely to whether its own breach would count as minor. Consultation runs to 13 November.

The KIDS Act gates AI chatbots

The Commission’s KIDS Act proposal, adopted on 17 September, would stop AI companions and chatbots reaching the market until providers can demonstrate compliance and run a monitoring mechanism for emerging risks. Enforcement rides on the AI Act for chatbots and the DSA for platforms, with fines up to 6% of worldwide turnover. For anyone shipping a chatbot that minors can reach, that is a market gate rather than a conduct rule.

Scroll to Top