Data & AI
Lakehouse, data mesh, data fabric and the platforms governance runs on.
The AEPD and the Hellenic DPA say providers of secure processing environments must keep real, effective control even when third parties run the infrastructure; contracts and certifications alone are not enough.
The industry group wants the Cloud and AI Development Act's mandatory requirements to cover areas such as defence and justice, not the whole public sector, under one EU-wide framework.
A root-cause analysis says a key exposed in May led to an organisation owner's unscoped GitHub token, stolen CI secrets and a malicious v1.107.0 release on PyPI and container registries.
The CMA will examine bundling, customers' freedom to choose AI tools other than Copilot, and cloud licensing. Microsoft and AWS have already removed data transfer fees for customers switching cloud provider.
