Czech Republic transposes NIS2 Directive and empowers government to restrict high-risk vendors of 5G equipment
23 June 25
Jan Cisar
The NIS2 transposition law has not yet been officially published but it is expected to enter into force on 1 September 2025. The government would have sole responsibility for deciding on restricting high-risk vendors, while the national cybersecurity authority would implement the decision in practice.
EU co-legislators reach provisional agreement on proposed regulation on additional procedural rules for GDPR enforcement
22 June 25
Alessandra Vaes
The agreement, which is yet to be formally adopted, would set a 15-month deadline for data protection authorities to conclude their investigations. However, the press releases issued by the EP and the Council do not provide much detail on the substance of the final deal.
EU AI Act: European Commission is consulting on upcoming guidelines for high-risk AI systems
15 June 25
Elisar Bashir
The consultation aims to gather feedback on the classification of high-risk AI systems, practical examples of such use cases as well as potential amendments to the list of high-risk use cases and prohibited AI practices.
EU Digital & Media Weekly Report
15 June 25
Miljana Todorovic
This report gathers policy and regulatory developments at EU level covered by Cullen International’s Digital Economy and Media services during the last week. It also lists events taking place this week. The next edition of this report will be exceptionally published in two weeks’ time.
Belgian court confirms fine on IAB Europe for unlawful cookie consent framework
11 June 25
Marianna Mattera
A Belgian court of appeal confirmed that IAB Europe’s Transparency and Consent Framework involves the processing of personal data and that IAB Europe acts as a joint controller for those operations. However, the court decided that IAB Europe was not acting as a joint controller for the data processing carried out in the context of the open real-time bidding (RTB) protocol. The court upheld the €0.25m fine imposed by the Belgian data protection authority.
Stakeholders discuss sovereign cloud and EU’s AI leadership plans
10 June 25
Miljana Todorovic
Stakeholders exchanged insights on the state of cloud sovereignty in Europe. Proposed pathways to enhance technological sovereignty include a federated EU cloud and partnerships between EU and US cloud providers.