News

CENTR has published a Board statement on the Digital Package (Digital Omnibus).

In a nutshell: The Commission President von der Leyen presented her State of the Union speech. The European Commission published 2025 Strategic Foresight Report, guidelines under the CER Directive and opened a call for evidence on the Digital Omnibus. The European Parliament adopted a resolution on the IGF, and a report on the revision of the public procurement framework. The CJEU dismissed a case against the EU-US data transfer framework, and clarified the scope of personal data in data transfers. The EDPB published guidelines on the interplay between the DSA and the GDPR. The EDPS adopted an opinion on the UN Cybercrime treaty.

The 123rd IETF meeting was held in Madrid, Spain, from 19 to 25 July 2025, featuring over 190 working group sessions, a two-day hackathon, and numerous side events. Pawel Kowalik and Christian Simmen from DENIC attended and have prepared a summary highlighting the key points relevant to CENTR members.

CENTR has released its latest report on the global domain market, highlighting a rebound in growth. The 300 largest TLDs recorded a median annual growth rate of 3.6% (12-month basis), the strongest result since 2022.

CENTR is inviting proposals from providers to operate a domain crawler that will enable analysis of domain properties and usage across participating ccTLDs.

The selected provider will be responsible for:
🔹 Running the crawling process
🔹 Processing and classifying the collected data
🔹 Delivering structured outputs for CENTR and its members

CENTR has published a Board statement on data retention for law enforcement purposes.

In a nutshell: The European Commission presented a proposal for the EU budget, launched calls for evidence on the 28^th regime, for revising Europol’s mandate, and the Digital Fairness Act. It also published a roadmap on FOSS. Eight Member States have yet to transpose the NIS 2 Directive into their national legal frameworks. The NIS Cooperation Group has launched a public consultation on post-quantum cryptography and published its annual report about NIS incidents in 2024. The ENISA Advisory Group published an opinion paper on the NIS 2 implementation. The Dutch government published a non-paper on the Cyber Security Act. The EDPB and the EDPS published a joint opinion on the proposal for GDPR simplification. The EDPS closed its investigation into the European Commission’s use of Microsoft 365.

 CENTR is launching a Call for Tender for the provision and operation of a domain crawler for CENTR.

In recent years, the Domain Name System (DNS) attracted the attention of EU regulators, spanning from cybersecurity to agricultural policy. There has been a growing trend of including domain names in legislation outside the typical digital sphere. One such area that has emerged as increasingly relevant for registries and registrars is financial regulation. Based on recent EU financial regulations such as MiCA, FiDA and PSR, it is possible to identify the clear direction in which financial oversight is moving. While domain names are critical for almost all digital services available online, this criticality has also translated into a powerful enforcement tool, as EU financial policymakers have recently discovered.

In a nutshell: The European Commission published the review of the progress towards the Digital Decade targets, published a roadmap on access to data and opened a data retention consultation and a call for evidence on the Standardisation Regulation. The Danish Presidency of the Council of the EU outlined its priorities. The Council of the EU included a domain-level enforcement measure in the Payment Services Regulation and reached a general approach on the Insolvency Directive. The JURI Committee of the European Parliament adopted its version of the Insolvency Directive. ENISA published two NIS 2-related guidance documents and launched a call for experts on the Managed Security Services. Europol published a new Internet Organised Crime Threat Assessment 2025.