Which indicators can be used to measure the gap between the IT trends most often cited and those that actually change organizations’ architectures, budgets or legal obligations?
Three themes stand out in today’s digital landscape: regulatory compliance for artificial intelligence, dependency management across the cybersecurity supply chain, and personal data tracking practices—even in the most widely used tools. Rather than listing technologies, this article compares their maturity and real-world impact.
AI compliance and technical standards: what the AI Act means for businesses
Most technology reviews put artificial intelligence at the top of the list. What sets the current period apart from previous years is not the power of the models, but the emergence of a binding regulatory framework in Europe. Under the AI Act, compliance with a harmonised standard can give rise to a presumption of conformity with the requirements it covers, in accordance with the texts published in the Official Journal of the European Union.
This means that businesses deploying high-risk AI systems must now document post-deployment monitoring, not just the design phase. To keep up with these developments over time, Geeknology’s IT news regularly covers the impact of these regulations on the sector.
The table below compares three major IT trends by their level of technical maturity, regulatory framework and the type of impact they have on organizations.
| Trend | Technical maturity | Regulatory framework | Primary impact |
|---|---|---|---|
| Generative artificial intelligence | Widely deployed, models readily available | AI Act, harmonised standards, post-deployment monitoring | Governance and compliance |
| Cybersecurity (supply chain) | Existing tools, uneven practices | NIS2, ENISA Threat Landscape | Management of dependencies and service providers |
| Personal data protection | Tracking pixels, cookies and trackers in common use | GDPR, CNIL recommendations on tracking pixels | Marketing practices and audience measurement |
Digital dependencies and cybersecurity: an expanded attack surface
Cybersecurity features on every list of technology trends. The issue that deserves attention is not the growing number of attacks, but the expansion of the attack surface through digital dependencies. In its Threat Landscape, ENISA notes that these cyber dependencies call for increased vigilance to prevent and mitigate incidents.
In practical terms, a business that outsources its cloud computing, uses third-party software components and entrusts maintenance to a service provider multiplies its potential entry points. Risk analysis can no longer be limited to internal systems.
What this means for organizations
- Map all digital service providers and their own subcontractors, not just direct suppliers
- Include open-source components and third-party libraries in the scope of security audits
- Check that partners meet NIS2 requirements when the organization falls within the directive’s scope
- Continuously monitor vulnerabilities across the software supply chain
This approach goes beyond simply installing a firewall or antivirus software. It turns cybersecurity into an exercise in mapping relationships, where every link matters.
Tracking pixels and personal data: an underestimated IT trend
Major digital debates focus on AI and the cloud. While these topics capture attention, the CNIL has issued final recommendations on tracking pixels in emails following a public consultation. This technical detail highlights the gap between the trends that receive the most media coverage and those that affect the day-to-day operations of every organization.
A tracking pixel is an invisible image embedded in an email to measure whether it has been opened, the recipient’s location or the type of device used. Most email marketing platforms include them by default. The CNIL’s recommendations remind organizations that these practices fall under the GDPR and require a clear legal basis.
Why this matters as much as AI for businesses
Organizations investing in marketing campaign automation make extensive use of these trackers. Ignoring the recommendations on tracking pixels can lead to penalties just like non-compliance involving an AI system. Personal data protection is not just at stake in major technology projects, but also in the most commonplace audience measurement tools.
The digital world is evolving on two fronts at once: visible breakthroughs (generative AI, edge computing, augmented reality) and less conspicuous regulatory changes that reshape the practices of every business. The latter often have a more immediate impact on budgets and internal processes.
Delays in digital deployment: a European regulatory risk
Digital transformation depends on more than just the technology available. Delays in deploying public digital systems can become a European regulatory issue, as shown by infringement proceedings launched by the European Commission against member states.
Effective implementation matters just as much as the choice of technology. An organization can adopt sovereign cloud, the Internet of Things or process automation: if deployment falls behind schedule, the expected benefits diminish and legal risk increases.
This also applies to the private sector. Businesses that accumulate pilot projects without scaling them up follow the same pattern. Moving from proof of concept to industrial-scale deployment remains the main sticking point in the adoption of emerging technologies.
IT trends worth following cannot be reduced to a list of promising technologies. The gap between what is announced and what produces a measurable effect can be assessed using three indicators: the applicable regulatory framework, the management of digital dependencies and the actual ability to deploy. These are the three dimensions that distinguish useful technology monitoring from a simple inventory.
