Agnes Bade

A single cyber incident can now trigger obligations under several regulations, including NIS2, DORA, the Cyber Resilience Act, GDPR and the AI Act. In this session, Agnes Bade, Vice President Group Head AI & Digital Law at The Adecco Group, explores the increasingly complex regulatory landscape surrounding cyber incidents and how multiple regulatory regimes can intersect when something goes wrong. As organisations deploy more connected technologies and AI-enabled systems, understanding where regulatory requirements overlap has become increasingly challenging. This session examines the compliance, reporting and governance considerations that arise when a single incident falls under several regulatory frameworks at once, and the practical implications for legal, risk, security and compliance teams.

• Navigating overlapping obligations across NIS2, DORA, GDPR, CRA and AI Act.
• Understanding regulatory accountability when incidents trigger multiple frameworks.
• Managing compliance, reporting and governance requirements from a single incident.