European Union: Data Protection

The European Data Protection Board and European Data Protection Supervisor have issued their Joint Opinion on the European Commission's proposed Cybersecurity Act 2 and amendments to the NIS 2 Directive. While generally supportive of strengthened cybersecurity measures, the opinion emphasizes the need to balance effective security protocols against fundamental rights to privacy and data protection, offering specific recommendations to ensure compliance with EU data protection law.

The EU AI Act has been in force since August 2024, but the ink was barely dry before the European Commission proposed changes to it. In November 2025, the Commission published the Digital Omnibus proposal — a package of targeted amendments aimed at simplifying and clarifying the AI Act, alongside broader adjustments to several pieces of EU digital legislation, including the GDPR and Data Act. The proposal came as a response to concerns about legal uncertainty and the practical challenges businesses face in preparing for the new digital legislation.

The European Data Protection Board has released a draft template for Data Protection Impact Assessments, marking a significant step toward harmonizing GDPR compliance across the EU.

Gérard Haas et son équipe ont compilé pour vous les actualités clés afin de vous permettre de rester à jour sur les dernières tendances et évolutions des secteurs juridique et numérique.

Studies consistently show that many M&A transactions fail to reach their full potential due to an unsuccessful integration process. A carve-out is, by its nature, one of the most operationally demanding...

The European Union has reached a compromise on the Payment Services Directive 3 (PSD3) and Payment Services Regulation (PSR), introducing sweeping changes to harmonise payment rules across Member States. The package addresses fragmentation under PSD2 by migrating conduct-of-business rules into directly applicable regulations, while introducing new provisions on cash access, cryptocurrency payment services, fraud liability, and open banking.

Gérard Haas et son équipe ont compilé pour vous les actualités clés afin de vous permettre de rester à jour sur les dernières tendances et évolutions des secteurs juridique et numérique.

AI's impact hinges on the safeguards and governance frameworks that guide its deployment, not the technology itself. Recent harmful chatbot incidents expose the inadequacy of voluntary self-regulation when commercial pressures eclipse safety considerations. The EU AI Act emerges as a critical regulatory intervention to establish mandatory safety standards, accountability mechanisms, and oversight structures that protect the public from preventable AI-related harm.

La Cour de justice de l'Union Européenne précise dans l'arrêt Brillen Rottler les conditions permettant de qualifier une demande d'accès aux données personnelles d'abusive.