About this talk
This talk, presented by Florian Hackel and Annika Niemann from JUN Legal GmbH, focuses on pragmatic approaches to open source software compliance amidst evolving EU regulations. Recorded at Open Community Experience 2026 in Brussels, the session addresses how organizations can balance legal risks, regulatory obligations, and operational efforts in managing open source compliance. It delves into the complexities of the current EU regulatory landscape, discussing key regulations such as the Cyber Resilience Act, NIS2, and the AI Act, and emphasizes the importance of a risk-based strategy for compliance that adapts to the specific nature of projects. The speakers also highlight the role of Software Bills of Materials in compliance workflows and the growing necessity of integrating compliance into CI/CD pipelines to enhance visibility and responsiveness to vulnerabilities. Finally, the session examines real-world enforcement trends and offers guidance on establishing auditable and scalable compliance processes that align with business efficiency and regulatory requirements.
