Key takeaways: AML compliance in the UK The Money Laundering Regulations 2017, amended on 30 June 2026, require records to be retained for five years after the end of the business relationship. Retaining a record for five years establishes its...
Articles
All our articles on Regulations
As organisations operate within a rapidly evolving regulatory landscape, compliance with frameworks such as DORA, NIS 2, the AI Act and the GDPR is a prerequisite for maintaining trust, security and the long-term sustainability of digital activities.
We help you interpret these regulatory regimes: their underlying objectives, the obligations they impose, the key deadlines to anticipate, and, above all, the practices required to achieve effective compliance.
Through technical, legal and operational insights, Evidency supports organisations in turning regulatory constraints into a genuine driver of digital trust. Qualified timestamping, electronic seals and electronic archiving are among the mechanisms that enable the establishment of a structured foundation of digital evidence that is reliable, traceable and legally admissible.
Electronic transferable records: going digital without losing the legal value of the original
Key points about electronic transferable records An electronic transferable record has the same legal effect as its paper equivalent when a reliable method is used, in accordance with the 2017 UNCITRAL Model Law. The holder is the person who has...
Tracking work hours: what is its evidentiary value in the event of an HR dispute?
Key takeaways on the evidential value of time tracking The legal requirement to record working hours does not guarantee that the data produced will be admissible as evidence in court. The CJEU requires a system that is “objective, reliable, and...
Transaction Evidence in Fintech: the legal issues surrounding the “Invest in one click” process
Key points to remember about proof of transaction in Fintech Clicking "Invest" constitutes a financial order as defined by the ECSP regulations: its exact date may determine the order's validity. An uncertified internal log does not constitute...
DMCC Act: what obligations do businesses face under the UK consumer protection reform?
Key points on the DMCC Act Drip pricing prohibited: the total price must be displayed from the first price indication, including all mandatory charges. Fake reviews prohibited: it is forbidden to publish, commission or facilitate them. Platforms...
Copyright: how to evidence human authorship in AI-generated content
Copyright protection, in the spirit of the Berne Convention, is in principle not subject to formalities. In theory, registration is not required for the right to exist. The World Intellectual Property Organization summarises this principle by...
Digital clutter: understanding the risks and implementing effective document governance
Key points to remember about digital clutter Digital clutter refers to the unstructured accumulation of documents (multiple versions, absence of classification and retention rules, dispersed storage locations). It creates an evidential risk:...
European digital identity: A new foundation of trust for digital exchanges in Europe
Key takeaways on the European Digital Identity The European Digital Identity, through the EUDI Wallet, seeks to establish an interoperable means of identification recognised across the European Union. It enables users to prove certified attributes...
eIDAS compliance: understanding the issues and securing your digital processes
Key takeaways eIDAS compliance governs digital trust services in Europe and determines the legal effect of electronic signatures, seals and timestamps. Qualified services benefit from a presumption of reliability recognised throughout the European...
Reg tech: ensuring trust for clients and auditors
Key points on Reg Tech Reg tech encompasses technological solutions dedicated to managing and overseeing regulatory compliance. It addresses a dual challenge: operational efficiency and the ability to produce verifiable evidence. Compliance can no...
AI as a tool to combat social and tax fraud
Key takeaways AI is becoming a major tool to fight social and tax fraud, but it is still underused by public authorities. AI technologies (machine learning, deep learning, generative AI) can process large volumes of data and detect increasingly...
Illicit means of evidence, data collection and criminal liability
Key takeaways The unlawfulness of a means of proof no longer results automatically in its exclusion by the civil court, which must assess both its proportionality and its necessity. This judicial development does not, however, authorise employers...
Web scraping: in the face of a complex legal framework, which best practices should be implemented?
Key takeaways Scraping is not prohibited as such, but it is subject to a strict legal framework, and the fact that data are publicly accessible is not sufficient to authorise their exploitation. Database law restricts automated extractions,...
European digital identity: current position, benefits and challenges
By November 2026, all Member States of the European Union will be required to make European digital identity wallets available to their citizens. These will enable users of public and private services to identify or authenticate themselves...
Artificial intelligence – AI Act: the creation of a principle of chain liability
Key takeaways The AI Act establishes a chain of liability, under which each AI stakeholder is responsible for its specific role, from design through to deployment. The Regulation applies extraterritorially where an AI system has an effect on the EU...
Trust service provider (TSP): definition, role and legal implications of trust services
Key points on trust service providers A trust service provider (TSP) delivers trust services intended to guarantee the authenticity, integrity and legally reliable dating of electronic documents and data. The reference legal framework is the eIDAS...
MiCA, DGA, CRA, Data Act, AI Act: challenges, opportunities and perspectives
Key takeaways on these European regulations The European cybersecurity strategy seeks to establish a harmonised regulatory framework that supports digital development while strengthening security, user trust and user protection. The MiCA Regulation...
Transitioning from paper to digital without losing trust. The example of road construction and French Weighing quality standard
Key points to remember about the French Weighing quality standard: The Weighing quality standard (NF P 98-750) scheme addresses an evidential requirement: securing the traceability of asphalt deliveries and limiting fraud (theft, falsification,...
DORA Regulation: key considerations, obligations and compliance strategies
Key takeaways DORA regulation establishes a unified EU framework for managing digital risks, ensuring that all financial institutions and their technology providers can maintain operations even during severe IT disruptions. The regulation...
Understanding the NIS 2 Directive: definition, scope and entities concerned
Key takeaways on the NIS 2 Directive The NIS 2 Directive strengthens the European cybersecurity framework and applies to a broader range of public and private sector organisations. It distinguishes between two categories of entities, essential...
GDPR: how to secure consent collection using Qualified Timestamping and Electronic Seal
Key takeaways Digital consent does not always take the form of a signature. A click, a ticked box or the validation of a form must nevertheless be demonstrated in a reliable and legally enforceable manner. Qualified timestamping provides a legally...
AI Act: how high-risk AI operators can meet EU compliance requirements
Key takeaways on high-risk AI operators The AI Act establishes a risk-based approach, with enhanced obligations for so-called “high-risk” AI systems used in sensitive sectors. The organisations concerned are not limited to developers, but also...
The eIDAS V2 regulation introduces Electronic Archiving, a long-awaited trust service
Key takeaways Electronic archiving is a cornerstone of digital evidence, but until now it has suffered from the absence of a clear legal definition, creating legal uncertainty. eIDAS v2 introduces, for the first time, an electronic archiving trust...
eIDAS 2.0 explained: European Digital Identity Wallets and trust services
Key takeaways on eIDAS 2.0 Since 20 May 2024, the eIDAS 2.0 Regulation strengthens the European legal framework for electronic transactions by extending its scope and increasing the level of security applicable to trust services. Each Member State...
Timestamping: prove price compliance with Omnibus Directive
Key takeaways on Omnibus Directive and promotional prices The Omnibus Directive, which entered into force on 28 May 2022, significantly strengthens consumer protection against misleading commercial practices, particularly within the digital...
10 good reasons to use electronic timestamping
Key takeaways In matters of intellectual property, electronic timestamping makes it possible to establish evidence of prior creation and integrity of digital works. From a regulatory perspective, it facilitates the demonstration of compliance, in...