Digital Fairness Act to ban dark patterns as European Commission seeks new enforcement powers
01 March 26
Olha Hruba
The Commission indicated that it may increase sanctions against companies that breach EU consumer law under the future enforcement framework. It also confirmed that it will present the Digital Fairness Act as a regulation by the end of 2026.
EU Digital & Media Weekly Report
01 March 26
Miljana Todorovic
This report gathers policy and regulatory developments at EU level covered by Cullen International’s Digital Economy and Media services during the last week. It also lists events taking place this week.
Proposed EU mandatory measures to restrict high-risk suppliers would ensure a "level playing field"
24 February 26
Javier Huerta Bravo
A representative of the European Commission told the European Parliament that the draft Cybersecurity Act 2 (CSA2) would avoid that a security vulnerability in one EU country spreads to others. The draft CSA2 contains a framework to restrict high-risk ICT suppliers in EU critical sectors, including telecoms.
EU Digital & Media Weekly Report
22 February 26
Javier Huerta Bravo
This report gathers policy and regulatory developments at EU level covered by Cullen International’s Digital Economy and Media services during the last week. It also lists events taking place this week.
EU toolbox extends 5G security concerns associated with high-risk suppliers to the ICT supply chain
19 February 26
Visiola Pula
The information and communications technology (ICT) supply chain security toolbox (non-binding) recommends EU member states restrict the use of high-risk suppliers (HRS) in priority sectors. HRS restrictions are also extended to ICT components and hardware used in connected and automated vehicles through an EU coordinated risk assessment that analyses cybersecurity risks affecting these systems and their supply chain. While the recommended measures in the toolbox and risk assessment are voluntary, similar obligations are included in the proposal for a revised Cybersecurity Act (CSA2) which would be legally binding.
Digital Omnibus: European data protection authorities against new personal data definition
18 February 26
Elisar Bashir
In a joint opinion, the European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) highlighted concerns about the proposed amendments to the definition of personal data and the Commission’s power to clarify when pseudonymised data no longer constitutes personal data.