The Vulnerability Was Real; The Exploit Was Impossible; The EU Cyber Resilience Act Reporting Obligation Was … Unclear?
Beginning last Friday (11 September 2026), manufacturers of products with digital elements that are made available on the European Union market must report actively exploited vulnerabilities and severe security incidents concerning those products under the EU Cyber Resilience Act (CRA).
Ropes & Gray LLP
An actively managed Small Cap Fund and Climate Risk Considerations
Asset managers are watching a case making headlines with references to fiduciary duties, investment processes and fees.
Ropes & Gray LLP
California Air Resources Board Approves Proposed Corporate Climate Disclosure Regulation
Approval of the draft regulation under SB 253 and SB 261
Ropes & Gray LLP
Corporate Sustainability Reporting Directive Transposition
CSRD transposition and Omnibus activity across the 27 EU member states and three EEA EFTA countries
Ropes & Gray LLP
26 Predictions for ’26 for Sustainability Legal and Compliance Professionals
In particular for companies operating in the United States and US-based multinationals active abroad
Ropes & Gray LLP
Political Agreement on the CSRD/CSDDD Omnibus Reached
15 Key Details to Know - A summary by Ropes & Gray
Ropes & Gray LLP