digital economy regulation

This edition features a piece of news about the rapporteur’s presentation of the draft report on the proposed Cybersecurity Act 2 to the members of the European Parliament (MEPs) lead Industry, Research and Energy (ITRE) committee. It also lists events taking place this week.

While the draft report on the proposed Cybersecurity Act 2, presented by Markéta Gregorová (Greens, Czechia), received broad support from shadow rapporteurs of other political groups, they remain divided on key aspects such as whether European cybersecurity certification schemes should become mandatory. Despina Spanou (European Commission) said that measures restricting high-risk suppliers should not destabilise the markets and should be accompanied by support measures. "We are not going to leave our markets hanging without suppliers", she added.

Argentina has no comprehensive AI legislation applicable to the private sector, although more than 45 AI-related bills have been proposed in Congress. Regulation is instead developing through guidelines for public-sector AI use and risk management, transparency, data protection, education and security initiatives.

This edition features, among others, a European Commission proposal excluding high risk suppliers from critical communication systems; updates on the state of implementation of the AI Act across Europe; the Commission's plans to deliver its proposal reviewing the Audiovisual Media Services Directive in 2027; and a public consultation on targeted copyright measures to address AI and piracy of live events. It also lists events taking place this week.

Entities in critical sectors, including digital infrastructure, would have to certify themselves under an EU cyber posture scheme (i.e. an organisational certification evaluating the overall state of cybersecurity) within one year after the scheme becomes available. The types of digital infrastructure covered would include telecoms, cloud computing and data centre service providers.

This edition features stories about the European Parliament rapporteur’s proposed changes to the framework for high-risk suppliers under the Cybersecurity Act 2 (CSA2) and the proposal amending the directive on measures for a high common level of cybersecurity across the EU (NIS2); an event discussing how the Digital Markets Act and existing competition rules can address generative AI and AI assistants; a consultation on guidelines from the European Data Protection Board (EDPB) on data protection authorities' powers to impose fines under the GDPR; EDPB guidelines on the interplay between the Digital Services Act and the GDPR; and the first stakeholder meeting of the Media Board. It also lists events taking place this week.