regulation

The EU AI Act: a New Era for Artificial Intelligence Regulation in Europe Begins

EU AI Act introduces regulatory framework for AI in Europe, emphasizing safety and innovation. Approved in 2024, it categorizes AI into risk levels, banning unacceptable risk systems. Compliance is required for high-risk AI by August 2026, with severe penalties for violations. Organizations must assess AI use, train staff, and adhere to standards to align with new regulations.

https://www.thalesgroup.com/en/worldwide-digital-identity-and-security/enterprise-cybersecurity/magazine/eu-ai-act-new-era

EU Plans Major GDPR Overhaul to Ease Business Compliance Rules

EU plans to amend GDPR to simplify compliance for SMEs, maintaining data privacy principles. Changes include streamlined documentation and reduced complexity for businesses under 500 employees. Intended to boost European digital competitiveness amid AI concerns, reforms will clarify algorithmic processing rules and address cross-border data transfer issues. Balancing privacy with law enforcement needs also under discussion. Legislative proposals expected by June 2025, aiming to harmonize enforcement standards across EU member states.

https://idtechwire.com/eu-plans-major-gdpr-overhaul-to-ease-business-compliance-rules/

EU’s Community of Practice Publishes Updated AI Model Contractual Clauses

EU's Community of Practice on AI has released updated non-binding Model Contractual Clauses (MCC-AI) for public procurement of AI systems. Two templates address “high-risk” and “non-high-risk” AI systems, aligned with the EU AI Act. This guidance aims to assist public organizations but may also benefit private companies. Stakeholders are encouraged to report their use of MCC-AI, enhancing AI procurement practices in the public sector.

https://www.insideprivacy.com/artificial-intelligence/eus-community-of-practice-publishes-updated-ai-model-contractual-clauses/

EU AI Office Publishes Third Draft of EU AI Act-Related General-Purpose AI Code of Practice: Key Copyright Issues

EU AI Office's third draft of the General-Purpose AI Code of Practice outlines commitments for GPAI model providers regarding copyright compliance under the AI Act, effective August 2025. Key obligations include adhering to training data copyright laws, respecting opt-out requests from content creators, and limiting web crawling practices. The streamlined draft emphasizes transparency and governance measures, with a focus on mitigating copyright infringement risks. Differences in US and EU copyright practices, such as the lack of a “fair use” doctrine, are noted, highlighting the complexities of navigating AI copyright law in Europe. Finalization expected May 2025.

https://www.morganlewis.com/pubs/2025/04/eu-ai-office-publishes-third-draft-of-eu-ai-act-related-general-purpose-ai-code-of-practice-key-copyright-issues

Europe’s Regulatory Retreat on AI: a Free Lunch for Big Tech?

EU's push for AI competitiveness led to withdrawal of AI Liability Directive (AILD), raising concerns about accountability in AI-related harms. Big Tech benefits from this retreat, avoiding liability for potential damages. Effective oversight becomes challenging due to AI's ‘black-box' nature, risking consumer protection. A call for reassessment of AI regulation instead of deregulation is essential for safeguarding citizens against harmful practices.

https://euobserver.com/digital/arcbd1284c

Meeting EU Data, Cybersecurity, and Artificial Intelligence Law Obligations: a Checklist for Swiss Life Sciences Companies

Swiss life sciences companies must prepare for EU Data, Cybersecurity, and AI regulations, particularly the Data Act, NIS2 Directive, and AI Act. Key points include ensuring user data access, implementing cybersecurity measures, registering for NIS2 by April 2025, and compliance with high-risk AI system regulations. Although these laws are EU directives, they affect Swiss companies operating within the EU. Compliance is critical to avoid fines and maintain market access and customer trust.

https://www.sidley.com/en/insights/publications/2025/03/meeting-eu-data-cybersecurity-and-artificial-intelligence-law-obligations

Sovereign Remedies: Between AI Autonomy and Control

Sovereign AI is a growing global trend where nations seek control over their own AI technologies to align with national values, enhance security, ensure economic competitiveness, and address privacy concerns. Advantages include leveraging local data and infrastructure, yet they also face challenges regarding indigenized capabilities and the implications of governance methods. Sovereign AI initiatives are defined by legal adherence, economic benefits, national security safeguards, and alignment with cultural values, reflecting the evolving nature of sovereignty in a digital age.

https://www.atlanticcouncil.org/in-depth-research-reports/issue-brief/sovereign-remedies-between-ai-autonomy-and-control/

Scroll to Top