EU

Status Check: Support Is Quickly Eroding for the EU-U.S. Data Privacy Framework

Support for the EU-U.S. Data Privacy Framework (DPF) is declining. Recent deregulation and European concerns threaten its stability. Businesses must retain their DPF certification but prepare alternative data transfer methods. Key issues include the U.S. Privacy & Civil Liberties Oversight Board's weakened status and EU warnings about the DPF's adequacy. European regulators recommend “exit strategies” due to anticipated legal challenges, and advocacy groups are pushing for reduced reliance on U.S. data services. Overall, the landscape for transatlantic data transfers is becoming precarious.

https://www.thefirewall-blog.com/2025/05/status-check-support-is-quickly-eroding-for-the-eu-u-s-data-privacy-framework/

EU Sails Past Deadline to Tame AI Models Amid Vocal US Opposition

EU fails to meet deadline to regulate AI amid US lobbying, with concerns over new rules following surge in AI use post-ChatGPT. Efforts to establish a “code of practice” for AI models face criticism from US tech firms and concerns from European lawmakers about diluting regulations. The US government has echoed these criticisms, complicating the EU's regulatory ambition. The outcome hinges on cooperation from major AI companies as August 2 compliance deadline approaches.

https://www.politico.eu/article/eu-deadline-artificial-intelligence-models-lobbying/

Corporate Compliance Under the EU Artificial Intelligence Act: Legal Framework and Strategic Implications

EU's Artificial Intelligence Act establishes a comprehensive legal framework for AI, imposing obligations on companies within and outside the EU. It adopts a risk-based approach requiring compliance assessments, internal policies on generative AI, and ongoing monitoring after deployment. The Act categorizes AI systems by risk level, outlines compliance procedures, and mandates transparency and incident reporting. Non-compliance can result in significant penalties. The Act aims to unify the internal market, mitigate risks, and foster trustworthy AI development. Companies must proactively embrace compliance for strategic advantage.

https://www.leadersleague.com/en/news/corporate-compliance-eu-artificial-intelligence-act

Age Verification in the European Union: The Commission’s Age Verification App

EU's Age Verification App aims to verify users' ages via digital wallets but poses privacy and accessibility concerns. It relies on various methods (eIDs, biometric data), but many marginalized groups may be excluded, risking their access to online services. Privacy measures in the app are not mandatory, and the reliance on zero-knowledge proofs and verification regulations may not adequately protect user data. The initiative could hinder democratic access while attempting to safeguard children online. More robust regulations and equitable access solutions are needed.

https://www.eff.org/deeplinks/2025/04/age-verification-european-union-mini-id-wallet

Digital Identities and the Future of Age Verification in Europe

EU age verification trends push digital identities for user safety, but raise privacy concerns. Proposals may mandate age checks, risking free expression and contradicting children's rights. Current laws suggest age evaluations without explicit requirement. Upcoming digital identity wallets planned for 2026 could be used for age verification, potentially expanding beyond intended limits, creating further privacy issues. EFF critiques this approach, urging to prioritize user rights.

https://www.eff.org/deeplinks/2025/04/digital-identities-and-future-age-verification-europe

What if the EU Was Really Serious About AI?

EU's AI strategy lags behind the US and China. To become competitive, it should:

  1. Infrastructure: Increase investment in cloud computing and partnering with US tech.
  2. Data: Simplify data regulations, enhance open data access, and incentivize data sharing.
  3. AI Adoption: Set ambitious AI targets and focus on outcomes in public contracts.
  4. Skills and Talent: Fund AI academic positions and pivot education programs toward AI skills.
  5. (De)Regulation: Streamline regulations for ease of use while ensuring safety.

Addressing defense AI and promoting global leadership in open-source AI is vital. Europe has the resources; bold actions are required to catch up.

https://cepa.org/article/what-if-the-eu-was-really-serious-about-ai/

R&G Tech Studio: Navigating AI Literacy—Understanding the EU AI Act

R&G Tech Studio podcast discusses the EU AI Act, focusing on AI literacy requirements for organizations. Hosts Rohan Massey and Edward Machin explain the broad definition of AI systems under the Act and emphasize the importance of AI literacy for both providers and deployers, irrespective of risk categories. Organizations must tailor AI literacy training based on contextual needs, employee roles, and resources. They suggest that companies begin developing AI literacy strategies now, despite limited guidance, to ensure compliance and effectively manage AI-related risks.

https://www.ropesgray.com/en/insights/podcasts/2025/04/rg-tech-studio-navigating-ai-literacy-understanding-the-eu-ai-act#page=1

EU Moves to Clarify AI Act Scope for gen-AI

EU proposes thresholds for computational resources to clarify compliance for general-purpose AI (GPAI) models under the AI Act effective August 2025. The guidelines, subject to industry feedback via a survey, aim to establish when AI models become subject to regulatory requirements. Key points include defining GPAI models based on compute use (>= 10^22 FLOP), obligations for record-keeping, copyright policies, and potential compliance benefits for signatories to a forthcoming code of practice. Critics argue reliance on FLOP is flawed as it may inadequately reflect model capabilities and risks. Moreover, modifications over certain compute thresholds may elevate compliance burdens.

https://www.pinsentmasons.com/out-law/news/eu-clarify-ai-act-scope-gen-ai

Scroll to Top