21 July 2026
AMLA finalises standards for supervisory cooperation in direct supervision
amla.europa.eu AMLA published final standards for sharing data and supervisory history with national regulators before it takes over direct supervision in 2028.
20 July 2026
The European Parliament's answer to its AI worries: More AI
politico.eu Parliament is giving MEPs and staff sanctioned access to models from OpenAI, Anthropic, Meta and Mistral after hallucinated citations appeared in drafts.
The EU is about to sell our most sensitive data to the US for visa-free travel
edri.org A leaked draft shows the Commission close to granting US border authorities access to EU biometric databases in exchange for continued visa-free travel.
Commission publishes final Guidelines on AI Act Article 50 transparency obligations
digital-strategy.ec.europa.eu Final guidelines require providers to mark AI-generated content machine-readably and deployers to disclose deepfakes, emotion recognition and AI-written text.
Commission fines AliExpress €550 million for breaching the Digital Services Act
ec.europa.eu The Commission fined AliExpress €550m, the largest DSA penalty yet, for failing to curb illegal and unsafe products and under-resourcing moderation.
19 July 2026
Trump pushes UN 'free speech' declaration in veiled attack on EU tech regulation
politico.eu A draft US declaration to be circulated at the UN General Assembly frames platform rules such as the DSA as threats to freedom of expression.
17 July 2026
EDPB calls for legal basis for cross-regulatory information sharing
edpb.europa.eu The EDPB asked the Commission for a legal basis letting data protection authorities share confidential information with regulators in adjacent fields.
"Made in Europe" password manager Passwork found to share Russian origins and state-certified ties
occrp.org Passwork, sold as a European password manager and used by Dutch and Irish public bodies, shares code and ties with an FSB-certified Russian firm.
16 July 2026
US judge halts sanctions policy that hit ex-EU commissioner Breton
politico.eu A federal judge paused the State Department policy imposing visa bans on officials who enforce platform laws, including Thierry Breton, on First Amendment grounds.
The digital rulebook is fit for purpose: better enforcement is needed, not simplification
edri.org EDRi's submission to the Digital Fitness Check argues the rulebook works and asks for enforcement, a spyware ban and AdTech rules instead of simplification.
The Digital Omnibus is going on summer break. Your rights are not.
edri.org The AI Omnibus is law, but the data package stalled in Council after a blocking minority led by Germany and Poland pushed decisions past the summer.
Proposed Europol reform dangerously erodes privacy, automates surveillance, and sidelines oversight
edri.org The Commission's third Europol reform in six years adds €3bn, auto-uploads national police data, lowers the biometric threshold and drops prior EDPS approval.
Proposed Europol reform dangerously erodes privacy, automates surveillance, and sidelines oversight
ec.europa.eu The Europol reform would double its budget to €3bn, automate uploads of national police data and let it bypass EDPS approval for urgent sensitive processing.
Judgment of the Court in Case C-421/24 AGCOM (Online gambling): Google may be held liable for the YouTube videos of a content creator with whom it has a commercial partnership
curia.europa.eu Google cannot claim intermediary immunity for videos from a creator it partners with commercially, the CJEU held, upholding a €750,000 Italian fine.
Hadopi law (2009–2026): French Conseil d'État finds the surveillance system breaches EU fundamental rights
edri.org France's Conseil d'État found the Hadopi graduated-response system breaches EU fundamental rights and ordered the government to repeal the key decree provisions.
EU debuts new digital sovereignty assessment tools
commission.europa.eu The Commission published guidance letting organisations score cloud and AI providers against its eight sovereignty criteria, after questions over a €180m award.
15 July 2026
The EU AI Act deadline moved, vendor questionnaires will not
iapp.org Delaying the AI Act's high-risk deadlines to 2027 and 2028 will not slow procurement teams, who keep demanding compliance evidence at contract renewal.
Commission accepts X's corrective measures to terminate breaches of the DSA
digital-strategy.ec.europa.eu The Commission accepted X's plan to fix its ad repository and researcher data access after last year's €120m fine. X has six months to deliver.
14 July 2026
When the facts change, adequacy must be reviewed
edri.org EDRi and 36 other groups asked the Commission to reassess the EU-US adequacy decision, arguing Trump v. Slaughter guts its independent-oversight safeguard.
EDPB requires Belgian DPA to handle the merits of NOYB cookie banner complaint
edpb.europa.eu A binding EDPB decision requires the Belgian DPA to rule on the merits of NOYB's cookie-banner complaint against VRT rather than dismiss it as an abuse.