What the Data Act Actually Changes on 12 January 2027
On 12 January 2027 the EU Data Act ends switching charges. What that covers, what Article 34 still lets providers charge, and what UK buyers get instead.
Tag
Compliance
Keeping Raw Data You May Be Asked to Delete
91 minutes
Erasure in a BigQuery medallion lakehouse: keep emails out of bronze, delete in two stages, and compute when erased copies leave the …
Patient Data Across Boundaries
13 minutes
Which privacy rules govern a multi-country trial's data depends on where each participant enrolled, what they agreed to, and who holds each …
Chain of Custody for Trial Data
9 minutes
One revised LDL-C result shows where custody of clinical trial data breaks: at the handovers between laboratory, CRO, and sponsor. What 21 …
Legacy Modernisation That Meets the Audit Bar
11 minutes
A modernised government system can work perfectly and still leave its auditors short of evidence, because the history the old system kept …
GATE v1.5 Roadmap
10 minutes
A preview of the next GATE release: a per-control ISO/IEC 42001 mapping with the asymmetry written down, streaming-aware output validation, …
Protecting the IP in a Generative World
10 minutes
A studio can find its back catalogue inside a public model's training data and discover it cannot prove, from its own systems, when the work …
Your Managed Providers Are About to Be Regulated. Here Is What to Ask Them.
11 minutes
The UK Cyber Security and Resilience Bill and NIS2 both regulate managed service providers directly, wherever they are established. Seven …
Identity Is the Bank Now
10 minutes
Fraud, financial crime, KYC, and customer experience have collapsed into a single engineering question about who the customer is. This final …
The Sovereign Cloud Question Inside a Bank
13 minutes
Sovereign cloud commitments are usually scoped as a hosting decision, while a bank's real exposure sits in the data flows that cross the …
Regulatory Evidence at Machine Speed
9 minutes
Regulators have moved from asking banks for periodic reports to asking for specific evidence, on demand, about decisions made months ago. …
Evidence Versus Speed
10 minutes
Regulated organisations have long optimised for speed and assumed the evidence could be assembled later. This third post in The Engineering …
Compliance You Can Prove
11 minutes
Why the next era of GDPR, AI Act, and MiCA readiness is engineered, not documented. Praxis wires controls into live systems and produces …