News

In a nutshell: The Commission President von der Leyen presented her State of the Union speech. The European Commission proposed new public procurement rules and the EU KIDS Act. The European Parliament published its draft report on the Cybersecurity Act 2.0. ENISA launched the Cyber Resilience Act reporting platform and published its 2026 Threat Landscape report. The European Cybersecurity Competence Centre published a call for proposals for strengthening European cybersecurity capabilities. CJEU Advocate General advised on excluding entities from public procurement for reasons of national security. Europol and Eurojust published SIRIUS Electronic Evidence Situation Report 2025.

In a nutshell: The European Commission published, guidance to support the Cyber Resilience Act implementation, an Action Plan on Cybersecurity and AI, guidelines on AI systems transparency and a study on the intellectual property domain name information and alert system. The European Commission also referred certain Member States to the Court of Justice for failing to transpose the NIS 2 Directive. European Parliament committees moved further on the Digital Omnibus, NIS 2 targeted amendments and the Cybersecurity Act 2 proposal. The European Parliament think tank published an analysis on online fraud and fake web shops. EDPB adopted guidelines on anonymisation, web scraping in the context of generative AI.

In a nutshell: The upcoming Council of the EU presidencies unveiled their programmes. The Council of the EU published progress reports on ongoing legislative files. Member States published declarations on the EU digital agenda. The European Commission presented a law enforcement package, Code of Practice on the transparency of AI-generated content, and reached a preliminary position on cloud service providers. European Parliament committees moved further on Digital Omnibus, and EU Inc. The SIRIUS project published guidelines on e-Evidence for competent authorities. European Supervisory Authorities published a report on major ICT-related incidents.

In a nutshell: The European Commission published the EU Tech Sovereignty Strategy, including the Open Source Strategy and the proposal for the Cloud and AI Development Act. The European Commission is also seeking views on the Copyright Directive and the application of the MiCA Regulation. The co-legislators finalised the work on the AI Omnibus. ENISA published its NIS360 report. The NIS Cooperation Group adopted common templates for incident reporting. European political groups published their position papers on EU Tech Sovereignty.

In a nutshell: The European Commission presented a plan for better enforcement of EU rules, awarded a tender for a sovereign cloud, published the final reports of the Virtual Worlds Observatory and the Interactive Data Explorer, and partnered with EUIPO on DSA enforcement. The Cypriot presidency published a non-paper on FiDA negotiations. The Council of the EU published a compromise position on the Payment Services Regulation. EU institutions agreed on a roadmap to strengthen the EU Single Market, and are finalising the AI Omnibus negotiations. BEREC published an early assessment of the Digital Networks Act. The European Economic and Social Committee published an opinion on the Cybersecurity Act 2.0. Europol published the IOCTA 2026 report. The EDPB published a Data Protection Impact Assessment template. The Council of Europe issued a recommendation on online safety and empowerment of users and content creators.

In a nutshell: The European Commission published the 28^th regime proposal and opened feedback for the Cyber Resilience Act guidance. The European Council adopted conclusions on competitiveness and the single market. The Council of the EU adopted conclusions on the EU’s capacity to counter hybrid threats. The EDPB and EDPS published a joint opinion on the Cybersecurity Act 2.0 and NIS 2 amendments. The European Economic and Social Committee published an opinion on the Digital Omnibus. CJEU Advocate General delivered an opinion on high-risk suppliers.

In a nutshell: The European Commission published a Submarine Cable Security Toolbox and Cable Projects of European Interest, 2026 Annual Single Market and Competitiveness Report, an IPRED study, and a counter terrorism strategy. The European Parliament held a hearing on CPC Regulation reform. The Council of the EU adopted a position on the 2030 Consumer Agenda. EDPB adopted a report on the right to be forgotten. EDPB, jointly with EDPS, adopted an opinion on the Digital Omnibus proposal. NIS Cooperation Group adopted an ICT supply chain toolbox. EU Member States published non-papers on competitiveness.

In a nutshell: Cyprus took over the presidency in the Council of the EU. The EU institutions agreed on the EU legislative priorities. The European Commission is seeking input on tackling online fraud, open-source strategy and is assessing further steps to curb online piracy of sports and other live events. The Commission also published its proposals for the Cybersecurity Act 2.0, NIS2 amendments, and the Digital Networks Act. The Council of the EU published a statement on European competitiveness. The European Parliament is finalising its views on the upcoming 28^th regime for innovative companies. Crafts and industrial GIs can be registered under the new protection scheme.

In a nutshell: The European Commission published the proposals on Digital Omnibus and the European Business Wallet and unveiled the strategy of the European Democracy Shield. The Commission also published its report on the necessity of a domain name information and alert system for the agricultural geographical indications, and launched a call for applications for a Multi-Stakeholder Forum on Internet Standards Deployment. In addition, the European Commission is seeking views from the public on the upcoming reform of EU public procurement, and on further Digital Fitness Check in line with its simplification agenda. The EU institutions reached an agreement on the Insolvency Directive proposal and the Payment Services Regulation. EU Member States signed a declaration for European Digital Sovereignty.

In a nutshell: The European Commission presented its 2026 work programme, the report on simplification, the Apply AI Strategy, a report on submarine cable security, the Cloud Sovereignty Framework, and together with EDPB published joint guidelines on DMA and GDPR. In addition, the European Commission is consulting on the upcoming EU Quantum Act. The European Council shared conclusions on simplification and sovereign digital transition. EU digital ministers agreed on a declaration on online protection of minors. ENISA published the annual Threat Landscape report. ESMA and EBA published the 2026 work programme.