regulation

Data Act (DA)

EU regulation for data sharing, promoting access, reuse, and innovation across sectors. Aims to enhance data governance, encourage collaboration, and protect privacy. Key elements include defining data holders, user rights, and interoperability standards.

Data Governance Act (DGA)

DGA establishes framework for data management, usage, protection, and sharing in EU. Aims to enhance data access, promote data economy, ensure data quality, and protect privacy rights. Focuses on transparency, accountability, and compliance across sectors.

Artificial Intelligence Act (AIA)

EU regulation for AI, ensures safety, transparency, accountability. Categorizes AI risks, mandates compliance for high-risk systems, establishes governance framework, promotes innovation while safeguarding rights.

Digital Markets Act (DMA)

DMA regulates big tech, promotes competition, prevents monopolistic behavior, mandates transparency, and enhances user choice in digital services across the EU.

The EU AI Act: a New Era for Artificial Intelligence Regulation in Europe Begins

EU AI Act introduces regulatory framework for AI in Europe, emphasizing safety and innovation. Approved in 2024, it categorizes AI into risk levels, banning unacceptable risk systems. Compliance is required for high-risk AI by August 2026, with severe penalties for violations. Organizations must assess AI use, train staff, and adhere to standards to align with new regulations.

https://www.thalesgroup.com/en/worldwide-digital-identity-and-security/enterprise-cybersecurity/magazine/eu-ai-act-new-era

EU Plans Major GDPR Overhaul to Ease Business Compliance Rules

EU plans to amend GDPR to simplify compliance for SMEs, maintaining data privacy principles. Changes include streamlined documentation and reduced complexity for businesses under 500 employees. Intended to boost European digital competitiveness amid AI concerns, reforms will clarify algorithmic processing rules and address cross-border data transfer issues. Balancing privacy with law enforcement needs also under discussion. Legislative proposals expected by June 2025, aiming to harmonize enforcement standards across EU member states.

https://idtechwire.com/eu-plans-major-gdpr-overhaul-to-ease-business-compliance-rules/

EU AI Office Publishes Third Draft of EU AI Act-Related General-Purpose AI Code of Practice: Key Copyright Issues

EU AI Office's third draft of the General-Purpose AI Code of Practice outlines commitments for GPAI model providers regarding copyright compliance under the AI Act, effective August 2025. Key obligations include adhering to training data copyright laws, respecting opt-out requests from content creators, and limiting web crawling practices. The streamlined draft emphasizes transparency and governance measures, with a focus on mitigating copyright infringement risks. Differences in US and EU copyright practices, such as the lack of a “fair use” doctrine, are noted, highlighting the complexities of navigating AI copyright law in Europe. Finalization expected May 2025.

https://www.morganlewis.com/pubs/2025/04/eu-ai-office-publishes-third-draft-of-eu-ai-act-related-general-purpose-ai-code-of-practice-key-copyright-issues

EU’s Community of Practice Publishes Updated AI Model Contractual Clauses

EU's Community of Practice on AI has released updated non-binding Model Contractual Clauses (MCC-AI) for public procurement of AI systems. Two templates address “high-risk” and “non-high-risk” AI systems, aligned with the EU AI Act. This guidance aims to assist public organizations but may also benefit private companies. Stakeholders are encouraged to report their use of MCC-AI, enhancing AI procurement practices in the public sector.

https://www.insideprivacy.com/artificial-intelligence/eus-community-of-practice-publishes-updated-ai-model-contractual-clauses/

Scroll to Top