Law & Compliance lessons & courses

Strict liability is worthless if the claimant cannot prove a defect they never saw. Articles 9 and 10 answer that with a disclosure order, three presumptions of defectiveness, a presumption of causation, and a rule turning complexity into the claimant's ally. This lesson works through the cascade, the three-year and ten-year clocks, and what a defendant should be able to produce.

The Directive builds a chain of liable operators so an injured person in the EU always has someone to sue. This lesson covers the manufacturer and component manufacturer, the importer and fulfilment service provider route, the distributor's one-month rule, online platforms, how a modification makes you a manufacturer, the heads of damage including data loss, and the exemptions.

A product is defective when it lacks the safety a person is entitled to expect. Article 7 turns that into circumstances a court weighs, several written for software: the ability to learn after release, interconnection, cybersecurity requirements, and recalls. This lesson works through the list, the rule that a later improvement is not an admission, and why compliance is not a defence.

Directive (EU) 2024/2853 replaces the 1985 regime and settles a forty-year argument by naming software a product. This lesson covers the new definition and why delivery method is irrelevant, why information is not a product, how components and related services extend the net, where open source sits, and why liability cannot be disclaimed by contract.

Meeting the essential requirements is not the same as being able to show it. This lesson covers the Annex VIII modules and which one each tier allows, the harmonised-standards lever that keeps class I self-assessable, the public-documentation route open to open-source manufacturers, what Annex VII must contain, when a modification restarts the assessment, and the three penalty tiers.

Article 14 is the first Cyber Resilience Act duty to bite, and it reaches products already on the market. This lesson covers the two narrow triggers, who receives a report and through which platform, what each of the three stages must contain, the separate duty to tell users, where the clock starts and why that is the hard part, and how the cascade compares with NIS2, GDPR and DORA.

Annex I is two lists doing different jobs: thirteen properties the product must have, and eight things the manufacturer must keep doing. This lesson works through both, including the secure-by-default and automatic-update rules, what the software bill of materials clause actually demands, the five-year support period floor and the ten-year shelf life on each update, and what must reach the user.

Regulation (EU) 2024/2847 puts software and connected hardware under product safety law, with a CE mark for cybersecurity. This lesson sets the scope: what counts as a product with digital elements, why a cloud backend can be part of one, what sector law carves out, where open source and stewards sit, the four risk tiers from Annex III and IV, and how a reseller becomes a manufacturer.

For lawyers, AI is not just a productivity question but an ethics question. Learn how professional duties, competence, confidentiality, candor to the court, and reasonable fees, apply to AI use, why bar authorities now issue formal guidance on it, how to vet a tool and supervise its output, and how to build a simple responsible-AI policy that keeps you on the right side of your obligations.

A practical guide to the legal workflows where AI saves the most time. Learn how to run AI-assisted legal research and verify it, draft contracts and letters from strong prompts and firm precedents, review contracts to flag risks at scale, and triage large document sets, with the human-in-the-loop discipline that keeps every output reliable.

AI is reshaping how lawyers research, draft, and review, but it carries a career-ending risk unique to law: confidently invented case law. Learn the main categories of legal AI tools and what each actually does, the difference between general and law-specific systems, and why hallucination and confidentiality make verification non-negotiable for every lawyer.

The EU Digital Operational Resilience Act governs how financial entities withstand ICT disruptions, while Article 47 of the Swiss Banking Act is a criminal confidentiality duty over client data. This advanced lesson dissects both mechanisms, their exceptions, and why an institution can fall under both at once.

Map how the EU AI Act sorts systems into four risk tiers with matching duties, and how NIS2 sets a horizontal cybersecurity baseline with strict reporting clocks. Learn who each rule binds and how compliance is structured.

Learn how the EU GDPR and the revised Swiss Federal Act on Data Protection actually work: who they bind, when they apply across borders, the lawful bases and rights they create, and how enforcement and sanctions differ between the two regimes.