Blog

Crypto-agility is the ability of a security system to replace its cryptographic algorithms, keys and protocols quickly and automatically, without significantly altering the underlying infrastructure or disrupting business continuity. With the imminent arrival of post-quantum standards (FIPS 203, 204 and 205), crypto-agility is no longer a theoretical advantage and becomes an essential operational requirement for…

There is a date in the European regulatory calendar that is not yet on the radar of most Spanish organisations but will affect virtually every company with more than fifty employees providing services in regulated sectors. 24 December 2026 is the deadline established by Regulation (EU) 2024/1183 (eIDAS 2.0) for the European Digital Identity Wallet…

There is a way of interpreting the Digital Product Passport timeline that may seem reassuring: the first mandatory sector-specific DPPs, apart from the battery passport arriving in February 2027, will not become applicable until 2028-2029 for the most advanced sectors and until 2029-2031 for the others. A margin of two or three years. Enough time…

There is a conversation that many companies are not having with their cloud providers, but should have before signing their next software contract. The question is straightforward: if a US authority calls your cloud provider at three in the morning and requests access to your documents, what happens? If your provider is a US company:…

The transition to post-quantum cryptography (PQC) will not be a switch that is turned off and on overnight. There is a dangerous transition period in which legacy systems must coexist with the new security standards. The technical solution that guarantees simultaneous interoperability and security is hybrid certificates. These cryptographic artefacts allow organisations to begin deploying…

On 6 August 2026 (today), Commission Implementing Regulation (EU) 2026/1778 of 16 July 2026 enters into force, establishing the rules for implementing the Digital Product Passport (DPP) Registry created by Article 13 of Regulation (EU) 2024/1781 (ESPR). From this moment onwards, the technical rules determining how the identity of economic operators is verified, how passports…

In December 2025, at the EUDI Wallet Launchpad held in Brussels, one thing became clear: Spain is not late to the deployment of the European Digital Identity Wallet. It is among the first five countries. Together with France, Italy, Denmark and Greece, Spain presented the IDUE Wallet (the national name for the EUDI Wallet) as…

If you already know that the Digital Product Passport Registry is operational and that you need a qualified electronic seal to access it, the next question is natural: what now? This article covers the entire process, from accessing the platform to the moment when you can start registering digital passports. Everything is based on the…

On 20 July 2026, the European Commission opened access to the Digital Product Passport Registry. It is not a statement of intent or a working plan: it is a real platform, currently available at registry.product-passport.ec.europa.eu, managed by the Directorate-General for Internal Market, Industry, Entrepreneurship and SMEs (DG GROW). We have spent months talking about the…

The short answer is the one that makes those who expected the ESPR to be an issue for other sectors most uncomfortable: it applies to almost all physical goods placed on the European market. Not only household appliances. Not only energy-consuming products. Almost all of them. Article 2 of Regulation (EU) 2024/1781 defines it with…