32 results found

Some deadlines have shifted. The high-risk classification architecture has narrowed. New alignment with the Cyber Resilience Act and sectoral legislation brings welcome clarity. But the compliance clock has not stopped.

The European Commission has issued guidelines on transparency obligations under Article 50 of the EU AI Act, clarifying how providers and deployers must inform individuals when they interact with AI systems or are exposed to AI-generated content. These non-binding guidelines address a wide range of AI applications, from chatbots to deepfake technologies, and establish four main transparency scenarios with specific disclosure requirements that businesses must now prepare to implement.

On April 15, 2026, European Commission President Ursula von der Leyen and Executive Vice-President Henna Virkkunen issued a statement (the Statement)...

The European Commission has proposed the EU KIDS Act, which would establish age-based restrictions for social media accounts while implementing comprehensive online safety requirements for platforms serving children. The legislation would create tiered access levels based on age groups, mandate parental controls, and require safety-by-design features across social networks, video-sharing platforms, online games, and AI chatbots.

The European Commission has responded to the citizens' 'Stop Destroying Videogames' initiative, which garnered significant public support calling for mandatory requirements to preserve access to video games after their commercial lifecycle ends.

The EU Cyber Resilience Act introduces mandatory cybersecurity requirements for products with digital elements sold in the European market, establishing a comprehensive framework for hardware and software security. Starting September 11, 2026, manufacturers face new reporting obligations for actively exploited vulnerabilities and severe security incidents, with strict timelines ranging from 24 hours to one month depending on the type of report.

The European Advertising Standards Alliance has released comprehensive guidance establishing a framework for determining when advertisers must disclose their use of AI-generated or AI-enhanced content in commercial communications. The guidance introduces three key principles—level of AI use, content plausibility, and consumer impact—that work together to assess disclosure requirements. This framework aims to balance transparency with practical implementation while ensuring consumers aren't misle

The Code is voluntary, but it will likely become an important reference point for demonstrating compliance with Article 50 of the AI Act.

The European Commission has launched a targeted consultation on safeguarding the EU's data sovereignty, seeking stakeholder input on data-related dependencies, barriers to accessing data in third countries, and risks linked to third-country access to sensitive data. This consultation connects directly to the European Tech Sovereignty Package and the broader European Data Union Strategy, with responses due by September 8, 2026.

The EU AI Act introduces new labelling requirements for AI-generated content in advertising, but determining what qualifies as "AI-generated" proves more complex than it appears. When does synthetic media cross the threshold requiring disclosure, and how should advertisers navigate the distinction between AI-assisted and AI-generated content in their campaigns?

The European Commission has imposed a €550 million fine on AliExpress for Digital Services Act violations, marking the largest penalty under the DSA to date. The decision reveals critical failures in risk assessment methodology, moderation resourcing, and enforcement of seller penalties that allowed illegal products to proliferate on the platform. This landmark case establishes new compliance expectations for marketplaces regarding systemic risk management and operational controls.

The EU's Cyber Resilience Act introduces mandatory vulnerability and incident reporting obligations for manufacturers of digital products starting 11 September 2026, well before the broader regulatory framework takes effect. Manufacturers must navigate tight reporting deadlines, determine when they become "aware" of security events, and establish governance structures to comply with 24-hour early warnings and subsequent detailed notifications through a platform that is not yet operational.

The European Commission has unveiled its European Technology Sovereignty Package, aiming to reduce the EU's heavy reliance on non-EU providers for over 80% of its digital products and infrastructure.

The EU's Product Liability Directive has been modernised to reflect today's complex supply chains, expanding liability beyond manufacturers to include online platforms, fulfilment providers, and other economic operators.

This page appears to be a security verification checkpoint that temporarily blocks access while validating the incoming request. The system implements protective measures to distinguish legitimate users from automated traffic or potential security threats.

The European Commission's proposed EU KIDS Act aims to harmonise online child safety rules across Europe, introducing age-based access restrictions for social media platforms and prescriptive safety-by-design requirements. Will these new regulations, which expand beyond existing Digital Services Act provisions to cover online games, AI companions, and app stores, effectively protect children while balancing innovation and parental rights?

The EU AI Act now requires production companies and rights holders to disclose when AI-generated content constitutes a "deep fake" - but what exactly qualifies as a deep fake in sports and entertainment production? From virtual presenters to synthetic set extensions and AI-assisted graphics, the rules reach into everyday content creation, with significant implications for anyone generating content that may be disseminated in the EU.