Afghanistan: Compliance

The EU AI Act's transparency requirements are now in effect, impacting businesses across sectors that deploy AI in marketing, customer service, or content creation. Understanding whether your organization qualifies as a 'deployer' or 'provider' under Article 50 determines your compliance obligations. This analysis clarifies how these regulations apply to your AI usage and what steps you need to take.

The EU Cyber Resilience Act introduces mandatory cybersecurity requirements for software and digital products entering the European market, including CE marking and free security updates. With compliance deadlines approaching in December 2027, companies must begin preparing their conformity assessment processes now to meet these far-reaching obligations that may fundamentally reshape go-to-market strategies.

The European Commission has proposed replacing the EU's three public procurement directives with a single, directly applicable regulation that would fundamentally transform how public contracts are awarded across Member States. This comprehensive reform aims to simplify procurement procedures, strengthen economic security through European preference principles, and elevate environmental and social considerations to strategic priorities. The proposal introduces extensive digitalisation measures and consolida

Starting September 11, 2026, manufacturers of digital products in the EU must report cybersecurity vulnerabilities and incidents within strict 24-hour and 72-hour deadlines under the new Cyber Resilience Act. Companies face penalties up to €15 million or 2.5% of global turnover for non-compliance, requiring immediate preparation of incident response procedures and assessment of product portfolios to meet these unprecedented product-focused cybersecurity obligations.

Starting January 2027, the Classification, Labelling and Packaging Regulation will explicitly designate distributors as duty holders, fundamentally changing how companies manage Poison Centre Notification requirements across the European Union supply chain. This regulatory clarification particularly impacts businesses that sell mixtures not covered by existing notifications or rebrand products under their own labels. Companies must now assess whether their current compliance framework adequately addresses t

The EU Forced Labour Regulation establishes comprehensive requirements for all companies operating in the EU market, regardless of size or sector, to ensure their products and supply chains are free from forced labour. New guidelines provide practical implementation measures that will shape enforcement practices when the regulation takes effect in December 2027.

The European Union's 20th and 21st sanctions packages against Russia mark a fundamental shift in enforcement strategy, moving beyond traditional designation lists to systematically target the financial infrastructure enabling Russia's war economy. Financial institutions now face heightened compliance obligations requiring them to identify how transactions, financing arrangements, and digital assets may indirectly facilitate sanctioned economic activity across payment channels, banking relationships, crypto-

The EU institutions have reached consensus on replacing SFDR's Articles 8 and 9 with three product categories, but significant disagreements persist on fossil fuel exposure criteria and whether alternative investment funds marketed exclusively to professional investors should be exempt from the new categorisation regime. These unresolved issues carry particular weight for private markets participants navigating the evolving regulatory landscape.

The European Union's Artificial Intelligence Act continues to evolve with significant regulatory updates that reshape compliance timelines and clarify key obligations. Recent developments include the Digital Omnibus on AI, which extends implementation deadlines for high-risk systems and introduces new prohibitions on harmful AI applications, alongside comprehensive guidance from the European Commission on classification criteria, transparency requirements, and general-purpose AI model obligations.