News
EU Policy Update – November 2025
In a nutshell: The European Commission published the proposals on Digital Omnibus and the European Business Wallet and unveiled the strategy of the European Democracy Shield. The Commission also published its report on the necessity of a domain name information and alert system for the agricultural geographical indications, and launched a call for applications for a Multi-Stakeholder Forum on Internet Standards Deployment. In addition, the European Commission is seeking views from the public on the upcoming reform of EU public procurement, and on further Digital Fitness Check in line with its simplification agenda. The EU institutions reached an agreement on the Insolvency Directive proposal and the Payment Services Regulation. EU Member States signed a declaration for European Digital Sovereignty.
EU Policy Update – October 2025
In a nutshell: The European Commission presented its 2026 work programme, the report on simplification, the Apply AI Strategy, a report on submarine cable security, the Cloud Sovereignty Framework, and together with EDPB published joint guidelines on DMA and GDPR. In addition, the European Commission is consulting on the upcoming EU Quantum Act. The European Council shared conclusions on simplification and sovereign digital transition. EU digital ministers agreed on a declaration on online protection of minors. ENISA published the annual Threat Landscape report. ESMA and EBA published the 2026 work programme.
EU Policy Update – September 2025
In a nutshell: The Commission President von der Leyen presented her State of the Union speech. The European Commission published 2025 Strategic Foresight Report, guidelines under the CER Directive and opened a call for evidence on the Digital Omnibus. The European Parliament adopted a resolution on the IGF, and a report on the revision of the public procurement framework. The CJEU dismissed a case against the EU-US data transfer framework, and clarified the scope of personal data in data transfers. The EDPB published guidelines on the interplay between the DSA and the GDPR. The EDPS adopted an opinion on the UN Cybercrime treaty.
EU Policy Update - Summer 2025
In a nutshell: The European Commission presented a proposal for the EU budget, launched calls for evidence on the 28th regime, for revising Europol’s mandate, and the Digital Fairness Act. It also published a roadmap on FOSS. Eight Member States have yet to transpose the NIS 2 Directive into their national legal frameworks. The NIS Cooperation Group has launched a public consultation on post-quantum cryptography and published its annual report about NIS incidents in 2024. The ENISA Advisory Group published an opinion paper on the NIS 2 implementation. The Dutch government published a non-paper on the Cyber Security Act. The EDPB and the EDPS published a joint opinion on the proposal for GDPR simplification. The EDPS closed its investigation into the European Commission’s use of Microsoft 365.
EU Policy Update – June 2025
In a nutshell: The European Commission published the review of the progress towards the Digital Decade targets, published a roadmap on access to data and opened a data retention consultation and a call for evidence on the Standardisation Regulation. The Danish Presidency of the Council of the EU outlined its priorities. The Council of the EU included a domain-level enforcement measure in the Payment Services Regulation and reached a general approach on the Insolvency Directive. The JURI Committee of the European Parliament adopted its version of the Insolvency Directive. ENISA published two NIS 2-related guidance documents and launched a call for experts on the Managed Security Services. Europol published a new Internet Organised Crime Threat Assessment 2025.
EU Policy Update – May 2025
In a nutshell: The European Commission published an International Digital Strategy, a non-paper on WSIS+20 review process, and opened a call for evidence Consumer Agenda 2025-2030 and European Business Wallet. The European Parliament adopted a report on European tech sovereignty, and published its findings and recommendations on the European Democracy Shield. The Council of the EU published its latest version of the insolvency proposal. Polish Presidency at the Council of the EU published conclusions on strengthening EU democratic resilience. ENISA published a handbook for cyber stress tests.
EU Policy Update – April 2025
In a nutshell: European Commission started the review of the EU Cybersecurity Act, held a conference on the governance of Web 4.0 and Virtual Worlds, opened consultations on the International Digital Strategy, AI initiatives and EUID specifications. European Parliament’s committees presented draft reports on insolvency, product safety and regulatory compliance in e-commerce, and on public procurement. ENISA launched the EU Vulnerability Database. Polish presidency published a note on disinformation and threats in cyberspace to young people.
EU Policy Update – March 2025
In a nutshell: European Parliament discussed tech sovereignty. European Commission presented European Preparedness Union Strategy, ProtectEU Security Strategy, and opened consultations on geographical indications, European Democracy Shield, Cyber Resilience Act. European Council presented conclusions on competitiveness, defence and security. European institutions outlined the EU legislative priorities 2025-2029. ENISA published a cybersecurity maturity and criticality assessment, and presented its vision for the future. EU ministers adopted a Warsaw call on cybersecurity.
EU Policy Update – February 2025
In a nutshell: European Commission published its work programme for 2025, opened a call for evidence for European Internal Security Strategy and the Geoblocking Regulation, presented a new cybersecurity blueprint and an action plan on submarine cable security. ITRE published a draft own-initiative report on European tech sovereignty. ECON published a draft opinion on the insolvency directive. ENISA published a report on the threat landscape in the finance sector. The Court of Justice of the European Union ruled on data subjects’ requests.
EU Policy Update – Outlook to 2025
In a nutshell: Polish presidency has assumed presidency of the Council of the EU and unveiled its 18-month programme together with Denmark and Cyprus. European Commission presented Competitiveness Compass and established Commissioner’s Project Groups. Council of the EU presented conclusions on strengthening the role of ENISA and on the white paper on Mastering Europe’s digital infrastructure needs. European Parliament announced a new European Democracy Shield special committee. Europol and Eurojust published a report on common challenges in cybercrime.