News and Insights

Ryanair has added Google Cloud on a five-year deal, sixteen days after renewing AWS for five years. Chief executive Eddie Wilson calls the dual-cloud strategy infrastructure resilience, and against outage risk it is. Jurisdictional exposure is a different question, and two US providers do not answer it. The two contracts also cover separate workloads rather than mirroring each other. Worth watching whether European boards start telling those two risks apart.

OpenAI says preliminary evaluations of Astra, an unreleased model, cannot rule out the Critical cybersecurity level under its own Preparedness Framework. It has paused internal work that fails the strengthened controls and added isolated testing, encrypted weights and universal monitoring. No regulator required this. For EU organisations the point is evidential: so far the only safety case that exists is the vendor’s own unverified reading, published before the model reaches any market.

US nonfarm business productivity rose at a 1.4% annual rate in the second quarter, and 2.2% on the year. Output rose 1.7%, hours worked 0.3% and unit labour costs 1.3%. The release credits nothing to AI, because the series cannot separate one input from another. Revised figures follow on 3 September. Any AI business case leaning on this data is adding a claim the statistics do not carry.

Moldova’s Law 195/2024 takes effect on 23 August, bringing GDPR-style duties and a regulator with fining powers. Ceilings are 1 million lei or 1% of turnover for documentation and processor failures, and 2 million lei or 2% for serious breaches. DLA Piper puts 2 million lei at roughly 104,000 euros. Fines phase in over three years. Controllers outside Moldova that serve or monitor people there have to appoint a local representative.

Article 50 applies from 2 August. Chatbots must say they are chatbots, deepfakes must be labelled and AI-generated content must carry machine-readable marks. But systems placed on the market before 2 August have until 2 December to meet the marking duty. The rules are live, the marks arrive four months later. Fines run to €15 million or 3% of worldwide turnover. The open question is which of your systems counts as already on the market.

The AI Act’s main application date lands on Sunday. Transparency duties under Article 50 arrive on time, while high-risk obligations for Annex III systems slid to December 2027 under the Omnibus, in force since Monday. The Commission’s own implementation timeline still shows the old dates and calls the Omnibus a proposal. Regulation (EU) 2026/1744 is the binding text. Anyone scoping weekend readiness off a summary page is reading last month’s law.