[{"source":"BEREC Office","url":"https://www.berec.europa.eu/en/public-consultations-calls-for-inputs/public-consultation-on-the-draft-berec-work-programme-2027","description":"Public consultation on the draft BEREC Work Programme 2027 yannick.stephan Thu, 01/10/2026 - 09:00 Breadcrumbs Public Consultations & Calls for Inputs Deadline to submit contributions:  31 October 2026 In January this year, BEREC adopted the Outline BEREC Work Programme 2027 , which reflected BEREC's objectives for the upcoming year. BEREC launched a first Call for inputs on the Work Programme 2027 from 27 February to 15 April. During the call for proposals, several additional actions were identified. Considering the early input received, during the 68th BEREC ordinary meetings (1-2 October 2026), the Board of Regulators adopted the draft BEREC Work Programme 2027 [BoR (26) 142] for public consultation. Background BEREC prepares its annual work programme in accordance with Article 21 of the BEREC Regulation and the BEREC Strategy 2026-2030 to guide how it organises and prioritises its work towards clearly defined objectives. The 2027 draft work programme was developed inclusively and transparently, with contributions from various stakeholders. This approach helps ensure that BEREC remains responsive to market needs, regulatory developments, and end-user expectations. Aim The BEREC Work Programme 2027 aims to align with the BEREC Strategy 2026-2030 and its five strategic pillars: Promoting full connectivity and the Digital Single Market; Supporting competition-driven and open digital ecosystems; Empowering end-users; Contributing to sustainable, secure, and resilient digital infrastructures; Strengthening BEREC’s capabilities and continuous improvement. The work programme will also take into consideration priorities set for BEREC’s institutional and international cooperation. Furthermore, the 2027 work programme has been developed against the backdrop of the ongoing review of the regulatory framework and the European Commission’s proposal for a Digital Networks Act, published in January 2026. This piece of legislation is meant to be the cornerstone shaping the future of the sector in the EU. As an advisory body to EU institutions for electronic communications, BEREC is committed to providing expert, independent advice to co-legislators and the European Commission throughout the legislative procedure. BEREC also aims to provide support and advice on other relevant policy developments. In addition to the mandatory work foreseen in the EU regulatory framework, the BEREC work programme follows a multiannual approach, meaning some projects started in 2026 will be completed in 2027 and are therefore included as carryovers. Additionally, recurring items are considered by default. Submit your contributions The incoming BEREC Chair 2027, Alejandra de Iturriaga Gandini (CNMC, Spain), encourages all interested stakeholders to provide their views and contributions to the draft BEREC Work Programme 2027 by submitting them to BEREC-WP2027@DISTRO.BEREC.EUROPA.EU by 31 October 2026 . After submitting the contribution, you will receive an automatic acknowledgement email. If you do not receive this acknowledgement, please contact the BEREC Office. Contributions should be sent preferably in English, and, to facilitate processing of the responses, the comments provided should clearly refer to specific paragraphs of the document. In accordance with the BEREC policy on public consultations , BEREC will publish all contributions and a summary thereof, respecting confidentiality requests. In that regard, please clearly mark the parts you define as confidential. We strongly encourage all stakeholders to submit their contributions as early as possible. Contributions received after the above-mentioned deadline will not be taken into account. Privacy statement type Privacy Statement for Public Consultation Category Name Ongoing Public Consultations and Calls for Inputs Notify subscribers","titre":"Public consultation on the draft BEREC Work Programme 2027","id":3193166,"pubDate":"Fri, 02 Oct 2026 08:34:17 +0200"},{"description":"The Federal Trade Commission is taking action against Illusory Systems Inc. for failing to implement adequate data security measures, leading to a major security breach in which hackers stole $186 million from consumers. Under a proposed order settling the FTC’s allegations, Utah-based Illusory, which does business as Nomad, will be required to implement an information security program to address numerous alleged security failures and to return recovered money to affected consumers. “The FTC Act requires companies to take reasonable security measures,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “It’s important that companies live up to their security promises to consumers.” In its complaint , the FTC alleged that Nomad prominently touted its security in its advertising, claiming that it offered “security-first” services. The FTC, however, alleged that the company failed to live up to these promises by failing to: use secure coding practices; implement processes for receiving and addressing vulnerability reports and responding to security incidents; and utilize widely known technologies that might have helped mitigate consumer losses. According to the complaint, in June 2022, Nomad introduced inadequately tested code that included a significant vulnerability. Just over a month later, hackers began exploiting the vulnerability. The FTC alleged that Nomad failed to respond to the attack in time because of its inadequate security and incident response measures, which led to the loss of $186 million. The company was able to recover some money, but consumers lost approximately $100 million. Nomad was warned about the dangers of inadequate testing as well as the need to ensure it had adequate staff and security in place. The company, however, failed to implement basic safety measures that would mitigate consumer losses, the FTC alleged. Under the proposed order , Nomad will be prohibited from making misrepresentations about its security practices. In addition, the company will also be required to: Implement a comprehensive information security program that is designed to protect consumers from theft or other unauthorized access and address the security issues outlined in the FTC’s complaint; Obtain biennial assessments of its information security program by an independent third party and cooperate with the third-party assessor; and Return to consumers money recovered following the security breach that was not already returned to customers. The Commission voted 2-0 to accept the proposed complaint and order for public comment. The FTC will publish a description of the consent agreement package in the Federal Register soon. The agreement will be subject to public comment for 30 days after publication in the Federal Register after which the Commission will decide whether to make the proposed consent order final. Instructions for filing comments will appear in the published notice. Once processed, comments will be posted on Regulations.gov. NOTE:  The Commission issues an administrative complaint when it has “reason to believe” that the law has been or is being violated, and it appears to the Commission that a proceeding is in the public interest. When the Commission issues a consent order on a final basis, it carries the force of law with respect to future actions. Each violation of such an order may result in a civil penalty of up to $51,744. The lead staff attorneys on this matter are M. Hasan Aijaz and Julia Horwitz with the FTC’s Bureau of Consumer","pubDate":"Wed, 17 Dec 2025 09:50:37 +0100","id":2577895,"titre":"FTC Will Require Illusory Systems to Return Money Stolen by Hackers and Implement an Information Security Program","url":"https://www.ftc.gov/news-events/news/press-releases/2025/12/ftc-will-require-illusory-systems-return-money-stolen-hackers-implement-information-security-program","source":"Federal Trade Commission - Protecting America's Consumers"}]