At last week’s IDC Security Summit, our Partner Sofia Edvardsen received the strongest reactions came around one theme:
👉 The EU Data Act and its demand for disclosure of system & performance data that could include trade secrets.
Three takeaways for leadership teams:
1️⃣ Judgment over checklists: rules require leadership judgment, not box-ticking.
2️⃣ Risk calibration, not elimination: manage disclosure without undermining IP & competitiveness.
3️⃣ Outcome foresight: procurement, valuations & customer trust will separate those who scale from those who stall.
This is less about compliance as a silo, and more about acting as a risk navigator across legal, tech & business.
📩 We’ve prepared a 2026 Regulatory Quick-Start for CIOs, CISOs, CEOs & GCs: DM if you’d like a copy.