Tech & Sourcing @ Morgan Lewis

The European Parliament recently published a report (the Report) on the interplay between several key EU digital regulations to assess overlap and gaps and highlight the regulatory complexity that these different regimes have collectively imposed on businesses.

Morgan Lewis’s technology, outsourcing, and commercial contract team, along with Boston Consulting Group, recently hosted a roundtable dinner in London, during which senior stakeholders from technology suppliers and large businesses discussed how the rapid evolution of artificial intelligence (AI) is impacting offshoring and outsourcing.

The European Supervisory Authorities (ESAs) published on November 18, 2025 a list of 19 critical information and communications technology (ICT) third-party providers (CTPP) that will be subject to direct oversight under the EU Digital Operational Resilience Act (DORA). The list includes hyperscale cloud providers, data center providers, infrastructure and network providers, and providers of financial services-specific technology.

The European Banking Authority (EBA) recently published a consultation paper (Consultation) that proposes to expand third-party risk management requirements for certain EU-regulated financial entities. The Consultation would extend the EBA’s current guidelines around outsourcing arrangements (EBA Guidelines) to all third-party services arrangements, excluding those services that are within scope of the EU Digital Operational Resilience Act (DORA), and would add further requirements to the existing guidelines, aligning with those requirements introduced under DORA.

Today’s retail operations depend on far more than the products on store shelves or the design of an ecommerce site. Behind the scenes, a fulfilment provider may rely on regional couriers, a payment processor on a cloud host, and a call center on an outsourced customer service team. These multi-tiered networks enable retailers to meet rising expectations for speed, convenience, and availability, but they also introduce points of failure that can disrupt service, delay deliveries, or compromise sensitive customer data.

Commercial contracts are typically represented by two separate, yet equally important, components: the master agreement that contains primarily legal terms, and the ordering documentation that contains primarily commercial terms.

In a recent LawFlash, a team of Morgan Lewis lawyers discussed the US Court of International Trade and the US District Court for the District of Columbia’s ruling that invalidated President Donald Trump’s actions imposing tariffs pursuant to the International Emergency Economic Powers Act of 1977, and the temporary, administrative stay granted by the US Court of Appeals for the Federal Circuit while it considers whether to stay the orders during the pendency of the government’s appeal of the ruling. These recent events demonstrate the continued uncertainty businesses and consumers face in light of this economic policy.

Logistics issues in all phases of the supply chain have their own set of challenges at an international level.

In an earlier two-part series, we explored key factors for companies and influencers to consider when drafting and negotiating influencer agreements to advertise and market products and services on social media.

Global Capability Centers (GCCs) enable global enterprises to provide information technology and business process services from a central delivery location.