The Cyber Resilience Act reporting rules put new duties on manufacturers. Not on the small companies that buy their products. But they do hand you, the buyer, a solid excuse to ask every vendor one thing: how will news of a flaw and its fix actually reach us? What follows is the customer’s side of […]
A CRM data retention policy gives every type of record a retention period, and that period depends on why you hold the record in the first place. GDPR doesn’t hand you a fixed number of years. You pick the periods yourself and write down why. Is your CRM full of old leads and former customers, […]
A customer asks you to delete their data. You open the CRM, type their surname, find one contact card, delete it. Done, right? Three weeks later an auditor wants to know what happened to that same person’s support history, the two quotes you sent last spring, and the newsletter list they were somehow still on. […]
Picture a growing business at a familiar crossroads. Stick with a local CRM vendor that speaks your language and knows your market, or commit to a global platform with a huge feature set and a name everyone recognizes. On paper both look fine. The real differences only show up after you’ve signed. And three things […]
Every contact card, every email log, every “called back, not interested” scribble sitting in your CRM counts as personal data under GDPR. That catches a lot of business owners off guard. They assume the rules only go after tech giants hoovering up millions of records. Nope. The regulation kicks in the moment you store information […]
Short answer to the NIS2 small business question? The directive probably doesn’t cover your company directly. But it will reach you anyway, through the larger clients it does cover. According to the Commission’s NIS2 overview, Member States had until 17 October 2024 to transpose the directive into national law, and many missed that deadline. And […]
Short answer: yes, leaving a cloud vendor is meant to get easier. EU Data Act cloud switching rules give customers a framework for moving between providers. The law is in force and has applied since 12 September 2025, so its switching rules now shape how you exit, alongside your contract. If you run a small […]
On 13 March 2024 the European Parliament approved the Artificial Intelligence Act. If you run a small firm that uses AI writing assistants and chatbots in sales and support, here is what it means in practice: transparency and good housekeeping. Not a ban. That is the short version of the EU AI Act for small […]