Cybersecurity 2026 Legal and Regulatory Outlook
EU cybersecurity law is shifting from principles to enforcement, requiring integrated compliance across NIS2, DORA, product security, AI, and data protection regim
EU cybersecurity law is shifting from principles to enforcement, requiring integrated compliance across NIS2, DORA, product security, AI, and data protection regim
The European Commission proposes DMA remedies requiring Google to share Search data with rivals under FRAND terms, with final measures expected by July 2026 after public consultation.
Estonia’s prime minister argues that protecting children online requires stronger EU regulation of platforms, not age-based social media bans that are easy to bypass.
The EU Inc proposal introduces a single digital company framework to help start-ups scale across the EU quickly, cheaply, and under harmonized corporate rules.
France plans to replace Windows with Linux in state administrations as part of a broader strategy to strengthen EU digital sovereignty and reduce reliance on non‑European technologies.
The EU will soon launch a privacy-preserving age verification app to enforce platform obligations and strengthen child protection under EU digital law.
The Commission decided not to designate Apple Maps and Apple Ads as DMA gatekeepers, finding that despite meeting thresholds, neither service is an important gateway for business users.
Austria plans a social media ban for users under 14, combining age limits, media literacy, and platform obligations as part of a broader effort to strengthen child protection online.
The European Parliament backs delayed AI Act obligations, fixed application dates, a ban on nudifier apps, and added flexibility for regulated products and growing EU tech companies.
DORA has entered its enforcement phase, exposing gaps in ICT risk management, third‑party oversight, and resilience testing across EU financial institutions.