Commission Calls on 19 Member States to Fully Transpose the NIS2 Directive
19 EU Member States called to transpose NIS2 Directive for cybersecurity by October 2024. Commission issues opinion; non-compliance may lead to legal action.
EU
EU Clarifies AI Act’s Prohibited Practices With New Guidelines
EU issues guidelines clarifying prohibited AI practices under AI Act. Key prohibitions include manipulative techniques, social scoring, risk assessments for crime prediction, untargeted facial image scraping, emotion recognition in certain settings, biometric categorization of sensitive traits, and real-time biometric identification for law enforcement. Guidelines establish legal certainty, refine definitions, and highlight the interplay with existing EU laws. Safeguards for exemptions will require impact assessments on fundamental rights.
Status Check: Support Is Quickly Eroding for the EU-U.S. Data Privacy Framework
Support for the EU-U.S. Data Privacy Framework (DPF) is declining. Recent deregulation and European concerns threaten its stability. Businesses must retain their DPF certification but prepare alternative data transfer methods. Key issues include the U.S. Privacy & Civil Liberties Oversight Board’s weakened status and EU warnings about the DPF’s adequacy. European regulators recommend “exit strategies” due to anticipated legal challenges, and advocacy groups are pushing for reduced reliance on U.S. data services. Overall, the landscape for transatlantic data transfers is becoming precarious.
EU Sails Past Deadline to Tame AI Models Amid Vocal US Opposition
EU fails to meet deadline to regulate AI amid US lobbying, with concerns over new rules following surge in AI use post-ChatGPT. Efforts to establish a “code of practice” for AI models face criticism from US tech firms and concerns from European lawmakers about diluting regulations. The US government has echoed these criticisms, complicating the EU’s regulatory ambition. The outcome hinges on cooperation from major AI companies as August 2 compliance deadline approaches.
https://www.politico.eu/article/eu-deadline-artificial-intelligence-models-lobbying/
Corporate Compliance Under the EU Artificial Intelligence Act: Legal Framework and Strategic Implications
EU’s Artificial Intelligence Act establishes a comprehensive legal framework for AI, imposing obligations on companies within and outside the EU. It adopts a risk-based approach requiring compliance assessments, internal policies on generative AI, and ongoing monitoring after deployment. The Act categorizes AI systems by risk level, outlines compliance procedures, and mandates transparency and incident reporting. Non-compliance can result in significant penalties. The Act aims to unify the internal market, mitigate risks, and foster trustworthy AI development. Companies must proactively embrace compliance for strategic advantage.
https://www.leadersleague.com/en/news/corporate-compliance-eu-artificial-intelligence-act
Age Verification in the European Union: The Commission’s Age Verification App
EU’s Age Verification App aims to verify users’ ages via digital wallets but poses privacy and accessibility concerns. It relies on various methods (eIDs, biometric data), but many marginalized groups may be excluded, risking their access to online services. Privacy measures in the app are not mandatory, and the reliance on zero-knowledge proofs and verification regulations may not adequately protect user data. The initiative could hinder democratic access while attempting to safeguard children online. More robust regulations and equitable access solutions are needed.
https://www.eff.org/deeplinks/2025/04/age-verification-european-union-mini-id-wallet
Digital Identities and the Future of Age Verification in Europe
EU age verification trends push digital identities for user safety, but raise privacy concerns. Proposals may mandate age checks, risking free expression and contradicting children’s rights. Current laws suggest age evaluations without explicit requirement. Upcoming digital identity wallets planned for 2026 could be used for age verification, potentially expanding beyond intended limits, creating further privacy issues. EFF critiques this approach, urging to prioritize user rights.
https://www.eff.org/deeplinks/2025/04/digital-identities-and-future-age-verification-europe
What if the EU Was Really Serious About AI?
EU’s AI strategy lags behind the US and China. To become competitive, it should:
- Infrastructure: Increase investment in cloud computing and partnering with US tech.
- Data: Simplify data regulations, enhance open data access, and incentivize data sharing.
- AI Adoption: Set ambitious AI targets and focus on outcomes in public contracts.
- Skills and Talent: Fund AI academic positions and pivot education programs toward AI skills.
- (De)Regulation: Streamline regulations for ease of use while ensuring safety.
Addressing defense AI and promoting global leadership in open-source AI is vital. Europe has the resources; bold actions are required to catch up.
https://cepa.org/article/what-if-the-eu-was-really-serious-about-ai/
R&G Tech Studio: Navigating AI Literacy—Understanding the EU AI Act
R&G Tech Studio podcast discusses the EU AI Act, focusing on AI literacy requirements for organizations. Hosts Rohan Massey and Edward Machin explain the broad definition of AI systems under the Act and emphasize the importance of AI literacy for both providers and deployers, irrespective of risk categories. Organizations must tailor AI literacy training based on contextual needs, employee roles, and resources. They suggest that companies begin developing AI literacy strategies now, despite limited guidance, to ensure compliance and effectively manage AI-related risks.