European Union: IT and Internet

A German court has ruled that Suno, a platform generating music from text prompts, infringed copyright by training its AI model on protected works without authorization.

The European Commission's proposed EU Kids Act introduces sweeping new requirements for digital service providers, establishing a harmonised age threshold of 15 for social media access and mandating safety-by-design principles across online platforms. This comprehensive regulatory framework fundamentally reshapes how providers must verify ages, design interfaces, and protect minors in the digital space, with sanctions reaching up to 6% of worldwide annual turnover for non-compliance.

The EU's Cyber Resilience Act establishes comprehensive cybersecurity obligations for manufacturers, importers, and distributors of products with digital elements. With reporting requirements now in effect and full compliance required by December 2027, economic operators must navigate conformity assessments, incident reporting protocols, and enforcement mechanisms that include substantial penalties for non-compliance.

The European Commission has proposed the EU KIDS Act, establishing one of the most prescriptive child-safety frameworks yet at EU level. This comprehensive regulation would introduce graduated age-based access controls for social media, mandate safety-by-design requirements, and create a harmonized age-verification system across Member States. The proposal carries far-reaching implications for digital services accessible to minors, requiring providers to fundamentally redesign products, implement strict def

Artificial intelligence is fundamentally reshaping the legal and tax profession, moving beyond simple tool adoption to transform how professionals create value and serve clients.

The European Union's data strategy introduces comprehensive interoperability obligations through the GDPR, Data Act, and Data Governance Act, fundamentally transforming how organizations handle data portability, switching between service providers, and data intermediation services. Organizations providing data processing services and those operating as data intermediaries face new compliance requirements, registration procedures, and operational standards that demand immediate attention and strategic implem

New EU e-Evidence rules take effect in Sweden from August 2026, requiring digital service providers to respond to cross-border law enforcement data requests within strict deadlines. Non-compliance carries administrative fees of up to 2% of global turnover, with liability based on strict liability principles. Service providers operating social networks, marketplaces, cloud services, and communications platforms serving Swedish users must establish designated points of contact and connect to EU-wide systems i

The EU Cyber Resilience Act's incident reporting obligations take effect on September 11, 2026, requiring manufacturers of connected devices and software to report certain vulnerabilities and cybersecurity incidents. This marks a critical milestone in EU cybersecurity regulation, introducing new compliance requirements for companies that may already face reporting obligations under other digital regulations.

New cross-border evidence rules take effect in Sweden in August 2026, requiring digital service providers to respond to EU law enforcement orders within strict timeframes. Non-compliance carries penalties of up to 2% of global revenue, making immediate preparation essential for companies offering services to Swedish users.