The Regulatory Radar: NIS2, CSRD and the AI Act every week, every claim sourced
A free weekly digest for consultants on what moved in NIS2, CSRD/ESG and the EU AI Act — by email, on the web and as a podcast. Written by Pith from 15 vetted sources, every claim pointing to its source. And an issue only goes out when something actually moved.
In short
The Regulatory Radar (Regulatorik-Radar) is a free weekly digest on NIS2 and cybersecurity, CSRD and ESG, and the EU AI Act, written in German. Pith reads 15 sources every day — including BSI, BaFin, ESMA, EBA, EDPB, the European Commission and DRSC — writes a sourced report each morning and summarises the week. Every claim points to its source. Each issue appears as a web page, an email and a podcast; a week with fewer than three cited sources is not sent.
Builds Pith
Anyone advising clients on NIS2, CSRD or the AI Act reads the same mix every week: supervisory press releases, European Commission consultations, guidelines, trade articles. Most of it is irrelevant to the advice you give. A small part moves a deadline, changes a reporting duty or shows how an authority actually enforces a rule. Finding that part takes time every week.
The Regulatory Radar (in German: Regulatorik-Radar) does that search for you. It is a free weekly digest on three topics — NIS2 and cybersecurity, CSRD and ESG, the EU AI Act — published as a web page, an email and a podcast. Every claim in it points to its source. The issues are written in German.
Go to the Regulatory Radar and sign up
How an issue is made
The Radar is not an editorial product; it is Pith at work. It runs in its own workspace with 15 sources we vetted in advance: supervisors and authorities (BSI, CERT.at, BaFin, ESMA, EBA, EDPB, the German data protection conference), the European Commission's press, financial-market and digital-policy channels, DRSC for financial reporting, and selected trade media on ESG and AI regulation.
Every morning Pith writes a morning report from the articles of the past 24 hours: it fetches each article's text, summarises it from the article itself, groups by topic and writes a short situation with sections. The same news from several outlets becomes one entry.
Once a week these reports become the issue: a summary of the week, the key points and the source list — as text and read aloud.
Every claim sourced, and checked
The citations are made in the morning: every sentence in the daily report carries the number of the article it rests on, and after writing it is checked — numbers that point to no article of the day are removed, and a section without a valid citation is dropped. The weekly issue builds on these checked reports and points to the articles they cite; exactly those articles make up the issue's source list. Why we work this way is explained in Every claim cites its source.
For advisory work that means you can trace every statement back to the original before passing it on to a client. The Radar does not replace reading the source; it tells you which one to read.
Only when something moved
A newsletter that arrives every week whether or not anything happened stops being opened. The Radar therefore has two hard rules:
- An issue needs at least four days with a report in the week.
- It needs at least three cited sources.
If either is missing, the week is neither published nor sent. Better a week off than an email full of filler.
What the first issue looked like
The first issue (week 41, 1–7 October 2026) is titled "Wenn Regeln im Betrieb ankommen" — when rules reach operations — and rests on 28 sources. It connects three developments: fines by the French data protection authority for inadequate access rights and authentication, new NIS2 reporting channels at Germany's BSI, and stricter transparency duties from the European Commission for AI content and chatbots. The common thread: rules that were settled on paper are now being checked in operations.
For context on the new reporting channels: a significant security incident is reported to the BSI in three stages.
Read and listen to the first issue
Email, web, podcast
- Web: every issue has its own page with summary, sections, linked sources and audio. The archive is at /radar.
- Email: once per issue, double opt-in. One click on "unsubscribe" deletes your address — we do not keep it. Unconfirmed sign-ups are deleted after 30 days.
- Podcast: an RSS feed you can subscribe to in any podcast app. Every issue is read aloud.
And for your own topics?
The Radar shows what Pith does for any topic, not just regulation. With your own feeds you get the same flow for your industry or a specific client: a sourced report every morning, deadlines Pith reads from the sources, and, if you want, an audio roundup every few days. What goes into your wiki is your call, article by article. Why we see briefings as the real output of a knowledge base is in Briefings, not newsletters.
For ESG-focused practices there is a dedicated overview: Pith for ESG advisory. What the AI work costs is on the pricing page.
FAQ
What does the Regulatory Radar cost?
Nothing. You sign up with your email address and confirm it once (double opt-in). Every email has an unsubscribe link that deletes your address immediately.
Is it in English?
The issues are written in German, because the sources and readers are mostly in the DACH region. The sources themselves are often English-language EU publications and are linked in every issue.
Where does the content come from?
From 15 sources we vetted in advance: supervisors and authorities such as BSI, CERT.at, BaFin, ESMA, EBA, EDPB and the German data protection conference, the European Commission, DRSC, and selected trade media on ESG and AI regulation. Pith reads the articles themselves, not just the teasers.
Is the Radar written by AI?
Yes, Pith writes it — from the week's daily reports, whose citations are checked after writing: numbers that point to no article are removed, and sections left without a valid citation are dropped. The issue points to the cited articles and lists them as sources. It is not legal advice.
Can I have a radar like this for my own topics or clients?
Yes, that is Pith itself: you pick feeds, Pith writes a sourced report every morning and, if you want, an audio roundup every few days — per workspace, including per client.