digital economy regulation

This report gathers policy and regulatory developments at EU level covered by Cullen International’s Digital Economy and Media services during last week. It also lists events taking place this week.

Cullen International published a cheat sheet outlining how the various EU cybersecurity initiatives adopted thus far work together to strengthen the security and resilience of critical sectors at EU level.

The review of the EU Cybersecurity Act (CSA) will feature considerations for potential improvements of the scope and coverage of the EU cybersecurity certification framework and the candidate schemes. The CSA revision will also address the process for adopting a scheme, clarify the role of key stakeholders and evaluate how the existing framework interacts with other EU laws.

The extension would allow uninterrupted personal data transfers to the UK until 27 December 2025. This extension would give time for the Commission to assess whether the UK’s ongoing data protection reform is aligned with EU standards.

Members of the Parliament Industry (ITRE) committee noted several omissions in the draft report by Sarah Knafo (ESN, France), notably on spectrum policy and submarine cables.

Argentina’s capital markets regulator, CNV, approved regulations to govern virtual asset service providers. The rules consist of general provisions and conditions of operation. They also include cybersecurity requirements, information security policies, account segregation obligations and other rules for the proper custody of virtual assets. The regulations will become effective on 31 December 2025.