The European Securities and Markets Authority has drawn a definitive line in the sand for crypto-asset service providers operating in the EU. With the July 1, 2026 deadline approaching...

In recent years, the number of African countries which have enacted privacy frameworks or are planning data protection laws has vastly increased.

On April 15, 2026, European Commission President Ursula von der Leyen and Executive Vice-President Henna Virkkunen issued a statement (the Statement)...

The Court of Justice of the European Union has ruled on whether national courts may use personal data as evidence when that data was obtained in violation of GDPR provisions. The judgment addresses the tension between data protection rights and the right to a fair trial, establishing conditions under which unlawfully obtained evidence containing personal data may be admitted in court proceedings. This decision has significant implications for how courts across the EU balance privacy protections with the adm

The EU Cyber Resilience Act introduces mandatory cybersecurity requirements for products with digital elements sold in the European market, establishing a comprehensive framework for hardware and software security. Starting September 11, 2026, manufacturers face new reporting obligations for actively exploited vulnerabilities and severe security incidents, with strict timelines ranging from 24 hours to one month depending on the type of report.

From 2 August 2026, the EU AI Act introduces mandatory transparency obligations requiring anyone using AI professionally in the EU market to disclose AI-generated or manipulated audio, video, images, and certain text content. These obligations apply to both AI providers and deployers, with non-compliance potentially resulting in fines of up to €15 million or 3% of global turnover.

The European Commission has launched a targeted consultation on safeguarding the EU's data sovereignty, seeking stakeholder input on data-related dependencies, barriers to accessing data in third countries, and risks linked to third-country access to sensitive data. This consultation connects directly to the European Tech Sovereignty Package and the broader European Data Union Strategy, with responses due by September 8, 2026.

China’s Personal Information Protection Law Proposal was submitted to the State Council in 2008, which was followed by the Ministry of Industry and Information Technology’s non-binding Internet Information Services Market Order Provisions of 2011.

The European Parliament has approved targeted amendments to the EU Artificial Intelligence Act through the AI Digital Omnibus Regulation, introducing significant changes to implementation timelines and compliance requirements.

The European Union's new Consumer Rights Directive amendment introduces a mandatory "withdrawal button" for online merchants, fundamentally changing how consumers exercise their 14-day right of withdrawal from distance contracts. This requirement, effective June 19, 2026, applies to any trader—including US-based companies—actively selling to EU consumers, creating new compliance obligations around button placement, design standards, data collection, and confirmation processes. Understanding whic

The EU Data Act's September 2026 deadline introduces a new access-by-design requirement for connected medical devices and related services, but the practical impact may be more limited than manufacturers expect. This analysis examines what life sciences companies must do to comply with both the upcoming milestone and the broader set of obligations that have been in force since September 2025.

On December 16, 2025, the European Commission (the "Commission") published a proposal for a European Biotech Act (the "Proposed Biotech Act" or "Proposal").

The European Commission has proposed substantial amendments to the Data Act as part of its Digital Omnibus legislative package, targeting commercially sensitive areas including data sharing between private parties and public authorities, cloud switching, and public sector data re-use. While the EU Council's consolidated compromise text addresses some key provisions, significant uncertainties remain unaddressed despite calls from businesses and stakeholders for clarification.

The idea of a wave of attackers, getting ready to commence their assault against heavily fortified defences, sounds like a Hollywood movie, or an on-line role playing game.

The Court of Justice of the European Union has delivered its landmark judgment on FIFA's Football Agent Regulations, examining whether rules governing agent licensing, fee caps, multiple representation, and transparency obligations comply with EU competition law, freedom to provide services, and data protection requirements. The decision establishes a comprehensive legal framework for assessing sports governance regulations while leaving critical questions of proportionality and necessity to be determined b

The European Union's Artificial Intelligence Act continues to evolve with significant regulatory updates that reshape compliance timelines and clarify key obligations. Recent developments include the Digital Omnibus on AI, which extends implementation deadlines for high-risk systems and introduces new prohibitions on harmful AI applications, alongside comprehensive guidance from the European Commission on classification criteria, transparency requirements, and general-purpose AI model obligations.

The EU AI Act's transparency obligations became enforceable on 2 August 2026, requiring providers and deployers of AI systems to clearly disclose AI-generated content, inform users of AI interactions, and label deepfakes. Organizations must now navigate new compliance requirements including disclosure obligations for emotion recognition systems and content on matters of public interest, while facing potential fines of up to €15 million or 3% of global turnover for non-compliance.