EU

Support for AI Act Pause Grows but Parameters Still Unclear

Support for delaying parts of the EU's AI Act is increasing, following a meeting of member states and the European Commission's tech leaders. They propose a “stop the clock” approach due to impending deadlines and unresolved guidelines. Member states differ on how long to postpone implementations, with calls for up to two years for some components. The AI industry endorses this delay, citing the need for additional time for compliance. However, any amendments would require legislative review, and predictions on outcomes are uncertain, highlighting divisions within the Commission.

https://iapp.org/news/a/support-for-ai-act-pause-grows-but-parameters-still-unclear

Microsoft Launches New European Security Program

Microsoft announces a new European Security Program to enhance cybersecurity amid increasing threats from nation-state actors and cybercriminals. The program focuses on AI-driven threat intelligence sharing, investment in cybersecurity resilience, and expanding partnerships. It is free for all 27 EU member states and other European nations, showcasing Microsoft's commitment to securing Europe's digital future through collaboration and proactive defense strategies against evolving cyber threats.

https://blogs.microsoft.com/on-the-issues/2025/06/04/microsoft-launches-new-european-security-program/

AI Literacy – The Commission’s Pointers on Building Your Programme

EU AI Act mandates AI literacy for providers and users of AI systems since February 2025. Compliance expectations are vague, emphasizing staff training to understand AI risks and legal implications. All stakeholders, including contractors and clients, must be educated on AI. Tailored approaches are required, particularly for high-risk systems. No universal standards exist; training is context-specific. Non-compliance may lead to enforcement from August 2026, but exact penalties are unclear. Effective AI literacy is essential for sound AI governance, regardless of direct AI Act applicability.

https://www.dataprotectionreport.com/2025/05/ai-literacy-the-commissions-pointers-on-building-your-programme/

Prohibited AI

TLDR: EU AI Act, effective August 2024, prohibits harmful AI practices: subliminal manipulation, social scoring, and biometric tracking in public. Compliance requires assessing current AI uses, screening future applications, and maintaining an efficient governance framework. Focus on high-risk, prohibited cases and leverage existing compliance processes to ensure adherence.

https://www.tlt.com/insights-and-events/insight/prohibited-ai—taking-a-practical-approach-to-compliance/

The Fine Print of AI Hype: The Legal Risks of AI Washing : Clyde & Co

AI washing poses legal risks as companies exaggerate AI capabilities amid vague definitions in the EU's AI Act. Legal clarity is essential but increases scrutiny, with potential penalties for false claims. Companies face liability for misleading assertions to investors and customers. Developing accurate communications and verifying AI claims are crucial to mitigate legal repercussions.

https://www.clydeco.com/en/insights/2025/05/the-fine-print-of-ai-hype-the-legal-risks-of-ai-wa

Developers Prepare for Uncertainty, Look to Prior Regulations With AI Act Coming Online

Developers are braced for uncertainty as the EU AI Act is enacted, acknowledging that evolving compliance strategies will be necessary due to ambiguities in the regulatory landscape. Experts emphasize adapting governance frameworks while recognizing the gradual implementation of regulations. Companies with prior regulatory experience, particularly in data compliance, are better positioned to navigate the Act's requirements, while the finalization of a general-purpose AI Code of Practice remains delayed. The European Commission is exploring simplifications to the Act to ease compliance for businesses.

https://iapp.org/news/a/developers-prepare-for-uncertainty-look-to-prior-regulations-with-ai-act-coming-online

ENISA Launches EU Vulnerability Database to Strengthen Cybersecurity Under NIS2 Directive, Boost Cyber Resilience

ENISA has launched the EU Vulnerability Database under the NIS2 Directive to enhance cybersecurity and resilience across the EU. The database provides centralized, reliable information on cybersecurity vulnerabilities, offering insights for risk management and mitigation. It integrates data from various sources to improve situational awareness and transparency, helping organizations better protect against cyber threats. ENISA aims to refine the database throughout 2025, incorporating user feedback and evolving cybersecurity needs while emphasizing the significance of coordinated vulnerability disclosure in strengthening the EU's cyber defenses.

https://industrialcyber.co/vulnerabilities/enisa-launches-eu-vulnerability-database-to-strengthen-cybersecurity-under-nis2-directive-boost-cyber-resilience/

Scroll to Top