What the EU just changed, and what you have to do about it

This delegated act establishes a presumption of conformity with the essential requirements of the Cyber Resilience Act through the EUCC framework.

Developers and manufacturers of digital products with hardware or software components subject to the Cyber Resilience Act.

Nothing yet — watch for the final adoption of the delegated act to understand how to use EUCC certification to meet compliance requirements.

The European Commission has opened a feedback period for a proposed regulation regarding a European social security pass to facilitate fair labor mobility.

Startups, scale-ups, SMEs, and self-employed individuals engaged in temporary cross-border work.

Submit your feedback on the proposal through the 'Have Your Say' portal to influence how social security data is handled for mobile workers.

The Commission is defining a standardized reporting template for Member States to monitor progress under the Net-Zero Industry Act (NZIA). This template aims to ensure consistent data quality across the single market regarding net-zero industry developments.

Founders and companies operating within the net-zero technology sector whose data will be aggregated by Member States.

Submit feedback on the proposed reporting template via the 'Have Your Say' portal to ensure the data collection requirements are practical for industry players.

The Scientific Panel on AI and the AI Office have launched an investigation into recent loss-of-control incidents involving frontier models. They have developed a specific set of questions for the developers of the models involved in these incidents.

Companies that have developed frontier AI models involved in recent safety incidents.

Nothing yet — watch for formal requests for information from the AI Office if your model is linked to a loss-of-control event.

The Commission is establishing guidelines for the advertising repositories required under Article 39 of the Digital Services Act. These rules aim to increase transparency and safety in the online space regarding how ads are displayed and tracked.

Very large online platforms (VLOPs) and very large online search engines (VLOSEs).

Nothing yet — watch for the publication of the final communication to ensure compliance with the specific technical and transparency requirements for ad repositories.

The EU KIDS Act proposal harmonizes the age for autonomous account creation at 15 years across the Union. It aims to protect minors from risky digital services and AI systems by removing diverging national rules.

Founders and developers of online social networking services and video-sharing platforms operating in the EU.

Nothing yet — watch for the final adoption of the proposal to update age-verification workflows and account creation logic for users under 15.

The European Commission has opened a feedback period for a proposed regulation to revise EU public procurement rules. This initiative aims to update the single market framework for how public bodies purchase goods and services.

SMEs, startups, social enterprises, and industry representatives involved in public sector contracts.

Submit your response to the open consultation to influence how procurement rules are simplified for smaller companies.

The European Commission has opened a feedback period for the revision of EU public procurement rules. This initiative aims to update the regulatory framework for the single market.

Startups, SMEs, and industry representatives interested in bidding for public contracts.

Submit your feedback on the proposed regulation via the 'Have Your Say' portal before the deadline.

The European Commission has opened a feedback period for a proposed regulation to revise EU rules on public procurement within the single market. This initiative aims to update how public bodies purchase goods and services from the private sector.

Founders, SMEs, and startups that sell or intend to sell products and services to public bodies in the EU.

Submit a response to the open consultation to influence how procurement rules are structured for small and innovative companies.

The European Commission has opened a feedback window to revise EU rules on public procurement to improve the single market. This initiative aims to update how public contracts are awarded across the Union.

SMEs, start-ups, social enterprises, and industry representatives involved in public bidding.

Submit your feedback on the proposed regulation through the 'Have Your Say' portal to influence how procurement rules are structured for small businesses.

EASA has released the agenda for a forum focused on the practical implementation of U-space, VTOL certification, and BVLOS operations. The event serves as a direct feedback loop for industry to share implementation challenges and lessons learned with regulators.

Drone operators, eVTOL manufacturers, and U-space service providers.

Register for the forum to share direct experience with EASA regarding what is working or where challenges remain in the current regulatory framework for UAS and cross-border operations.

The European Commission has initiated a proposal to evaluate and revise the Chips Act to address remaining challenges in the semiconductor sector. The focus is on strengthening the EU's role in advanced manufacturing and Artificial Intelligence chips.

Founders and developers working in semiconductor design, AI hardware, and advanced manufacturing.

Nothing yet — watch for the upcoming legislative proposal (PROP_REG) following the evaluation of the feedback received during the consultation period.

The Commission is proposing a new regulation to boost secure high-speed broadband and connectivity for cloud-based infrastructure and AI. This initiative aims to support the digital transition by improving the underlying network infrastructure.

Founders and developers building cloud-based services or AI applications that require high-speed broadband connectivity.

Nothing yet — monitor the legislative progress of the proposal (Ares(2025)4305261) as it moves through the regulatory process now that the initial feedback period has closed.

The European Commission is hosting a summit to mark the one-year adoption of the Apply AI Strategy, featuring sessions on the AI Act, robotics, and cybersecurity.

AI startups, industrial representatives, and developers working in strategic sectors like healthcare, mobility, and energy.

Register by November 13 to attend the summit in person or online to participate in sectoral deep dives and watch the top 10 finalists of the Apply AI Startup Award.

The Commission designated ChatGPT as a Very Large Online Search Engine (VLOSE), and Reddit and Roblox as Very Large Online Platforms (VLOPs). These services must now comply with the strictest rules under the Digital Services Act due to reaching over 45 million average monthly users in the EU.

Operators of ChatGPT, Reddit, and Roblox, and developers or businesses building on these platforms.

Nothing yet — these platforms have four months to comply with specific DSA obligations, including assessing and mitigating systemic risks and providing access to data for researchers.

The European Commission is seeking organizations to conduct an empirical study on how users interact with DSA-mandated features like notice and action mechanisms and trader information on Very Large Online Marketplaces.

Organizations with expertise in user experience, behavioral research, and data analysis.

Consult the tender documentation and submit a proposal for the 8-month contract via the dedicated platform.

The European Commission has launched the Drone Tech for Countering Threats (D-TECT) Forum as an industrial coordination mechanism. It focuses on cooperation across the value chain, including AI-enabled navigation, sensing, and secure connectivity.

Companies, research organisations, universities, and industry associations active in the drone and counter-drone domains.

Submit an application to participate in the inaugural event and register your interest in joining future thematic Working Groups.

New rules require chatbots to disclose they are AI and deepfakes to be labeled. AI-generated or altered content must now carry machine-readable marks for easier detection.

Developers and providers of interactive AI systems, chatbots, and tools that generate or alter media content.

Ensure chatbots inform users they are interacting with AI and implement machine-readable marking for all AI-generated content. Review the Code of Practice on transparency to operationalize these rules.

The European Commission is seeking feedback to define a strategic vision for the use of artificial intelligence in cultural and creative industries. The strategy aims to address AI's role in creation, cultural diversity, and linguistic inclusion.

Developers and startups building AI tools for media, culture, and creative industries.

Submit a response to the open call for evidence to influence the strategic vision for AI in these sectors before the deadline.

The European Commission has launched the Digital Product Passport (DPP) Registry along with a dedicated testing environment. This system is designed to make product passports a practical reality for goods on the EU market.

Businesses and developers placing products on the EU market that require a Digital Product Passport.

Access the newly launched testing environment to begin integrating with the DPP Registry system.

The European Commission released guidelines to help organizations comply with AI Act transparency rules, ensuring users know when they interact with AI or AI-generated content. These rules aim to prevent deception and manipulation by requiring clear identification of AI systems.

Providers and deployers of AI systems that interact with people or generate/alter content.

Review the guidelines to ensure your AI systems clearly disclose AI interaction or content generation to users before the August deadline.

The European Commission issued a major fine against AliExpress for failing to assess and mitigate risks related to illegal, unsafe, or counterfeit products. The platform has been ordered to take corrective action to comply with its due diligence obligations.

Very large online platforms and e-commerce providers operating in the EU.

Ensure your platform has active systems to identify and remove illegal or unsafe products and perform regular risk assessments as required by the DSA.

The European Commission launched a central portal for the Digital Product Passport (DPP), which mandates digital access to product composition, circularity, and compliance data. Implementation begins with batteries before expanding to textiles, iron, steel, and construction products.

Economic operators, including manufacturers and developers, involved in the value chains of batteries, textiles, and construction products.

Visit the new DPP web page to access technical resources and guidance for your specific product sector. Prepare to integrate digital systems that provide product lifecycle information, such as environmental impact and end-of-life guidance.

The European Commission approved X's action plan to comply with Digital Services Act transparency obligations. This plan specifically addresses how the platform will grant access to its data for monitoring systemic risks.

Researchers, civil society organizations, and developers monitoring platform impact and systemic risks.

Nothing yet — watch for the rollout of X's new data access tools and transparency interfaces to begin monitoring the platform's systemic risks and user impact.

The Commission proposed an optional 28th regime allowing companies to incorporate under a single set of harmonized EU rules instead of national laws. This includes digital-only registration, share transfers without notaries, and standardized instruments for convertible loans and stock options.

Founders and innovative companies looking to scale across multiple Member States without re-incorporating or maintaining separate national entities.

Nothing yet — watch for the upcoming legislative proposal and its subsequent adoption by the European Parliament and the Council.

The European Commission is reviewing the implementation and relevance of the 2022 Drone Strategy to account for technological developments in eVTOL and changing market conditions.

Drone manufacturers, operators, service providers, and financing institutions.

Complete the stakeholder survey to provide technical and market perspectives that will inform future policy development for the European drone sector.

The European Commission has opened a feedback period for the proposed regulation on European partnerships implemented as joint undertakings. This initiative defines the framework for research and innovation partnerships for the 2028-2034 period.

Intermediaries for start-ups, scale-ups, and SMEs, as well as industry associations and research representatives.

Submit feedback on the proposed regulation via the 'Have Your Say' portal to influence how future innovation partnerships are structured.

EASA and EUROCONTROL have developed the first version of the European Aviation Action Plan to address growing risks from GNSS jamming and spoofing. The plan defines specific mitigation actions, required technologies, and implementation timelines for the aviation sector.

Drone operators and manufacturers of unmanned aircraft systems relying on satellite navigation.

Nothing yet — watch for the rollout of the Action Plan's specific requirements regarding avionics upgrades, new positioning, navigation and timing (PNT) solutions, and standardized operational procedures.

The EU is proposing a new regulation to triple data processing capacity and address infrastructure gaps in cloud and AI. The initiative focuses on sustainable data centres and increasing localized AI capacity within the EU.

Cloud infrastructure providers, AI developers, and data centre operators.

Submit a response to the open consultation to influence the development of the Act before the feedback window closes.

The EU has proposed a new regulation to triple data processing capacity and address infrastructure gaps in cloud and AI services. The initiative focuses on sustainable capacity and ensuring infrastructure is located within the EU.

Cloud service providers, AI developers, and data center operators.

Submit feedback on the proposed regulation via the 'Have Your Say' portal to influence the development of EU cloud and AI infrastructure rules.

The EU is proposing a new regulation to address the infrastructure gap in cloud and AI capacity, aiming to triple data processing capacity within 5 to 7 years. The initiative focuses on sustainable data centres and ensuring infrastructure is located within the EU.

Cloud infrastructure providers, AI developers, and data centre operators located or operating in the EU.

Submit feedback on the proposal via the 'Have Your Say' portal during the open consultation window. Monitor the development of requirements regarding infrastructure location and sustainability standards.

The European Commission has opened a feedback period for a proposed regulation aimed at boosting secure high-speed broadband and cloud-based infrastructure for AI. This initiative focuses on the transition toward digital connectivity systems that support advanced computing.

Developers and companies building cloud-based infrastructure or Artificial Intelligence systems requiring high-speed connectivity.

Submit feedback on the proposal via the 'Have Your Say' portal to influence the regulatory framework for digital networks. Ensure your infrastructure requirements for AI and cloud services are represented before the consultation closes.

The European Commission has opened a feedback window for the evaluation and revision of the Chips Act. This initiative focuses on the digital economy, specifically targeting sectors like telecommunications, healthcare, energy, and defense.

Startups and SMEs active in the semiconductor industry, including emerging and scaling companies.

Submit feedback on the proposed regulation via the 'Have Your Say' portal to influence the revision of semiconductor rules.

EASA has updated the Easy Access Rules to incorporate the SORA 2.5 package for risk assessments in the 'specific' category. The rules are now available in a machine-readable XML format and an improved online version with permalinks for each article.

Drone operators and manufacturers working within the 'open' and 'specific' categories.

Use the new eRules platform to access the latest SORA 2.5 guidelines and provide feedback via the Easy Access Rules contact form if needed.

The European Commission is developing a strategic vision for the use of artificial intelligence specifically within the cultural and creative industries. This initiative focuses on AI's role in creation, cultural diversity, and linguistic inclusion.

Developers and startups building AI tools for media, culture, and creative content creation.

Nothing yet — watch for the publication of the strategy to align product development with the EU's vision for linguistic diversity and creative inclusion.

The European Commission is developing a 28th regime to provide a single harmonized set of rules for innovative companies across the EU. This initiative creates a new EU corporate legal framework to simplify operations for businesses in the single market.

Founders and innovative companies seeking a unified legal structure to operate across EU member states.

Nothing yet — watch for the formal proposal of the regulation following the closure of the public consultation period.

The EU is updating its product legislation blueprint to integrate digital solutions and circular economy goals. This revision introduces the Digital Product Passport as a requirement for product compliance and alignment across the single market.

Manufacturers and developers of physical products subject to EU product legislation and conformity assessment bodies.

Nothing yet — watch for the formal proposal to understand specific technical requirements for the Digital Product Passport and how it integrates with existing conformity assessments.