Skip to content

Topic

EU Tech Regulation

The EU's expanding body of laws and enforcement actions regulating tech companies, covering privacy, competition, cybersecurity, and child safety.

Current stories

buildConfirmed2 publishers

Connected-product makers now have 24 hours to report exploited flaws under the EU Cyber Resilience Act

EU Cyber Resilience Act rules have required connected-product makers to report exploited flaws through ENISA within 24 hours since 11 September 2026. One incident can also start DORA, NIS2 and GDPR clocks, so runbooks need a triage step that splits into parallel filings.

Reality

Evidence72
Adoption
Not scored
Hype gap+15
Incentives60
Confidence70
securityConfirmed2 publishers

Google appeals the EU's search-data and Android order on privacy and security grounds

Google has appealed an EU DMA order that would make it share search data with rivals from January 2027 and open Android to rival AI services. Its case rests on user privacy and Android security, claims the EU's top court now has to weigh against a competition order.

Perspective Coverage

3 publishers
Builder
Builder 23%
Operator
Operator 40%
Investor
Investor 37%

Reality

Evidence60
Adoption
Not scored
Hype gap+10
Incentives65
Confidence60
buildOne report1 publisher

The CRA puts a 24-hour stopwatch on the moment your team notices an exploit

From 11 September 2026, an actively exploited vulnerability starts a 24-hour early warning, a 72-hour notification and a 14-day final report, all timed from awareness. The artifact that decides whether you make it is your SBOM archive.

Publishers:dev.to

Reality

Evidence58
Adoption
Not scored
Hype gap+15
Incentives50
Confidence60
productOne report1 publisher

The EU's draft Kids Act would strip companion chatbots of emotion and memory for under-18s

A draft seen by WIRED would bar chatbots from simulating emotions with anyone under 18 and stop them carrying memory between conversations. Fines reach 6% of worldwide turnover. The scoping work lands on product teams.

Publishers:wired.com

Reality

Evidence50
Adoption
Not scored
Hype gap+10
Incentives
Not scored
Confidence55
leadershipOne report1 publisher

The EU AI Act gives employers until December 2027 to explain an AI hiring decision

A Forbes Tech Council piece by Avature's chief executive argues the Act's high-risk hiring rules now set the benchmark for global employers. The survey behind the argument is his own company's, and it finds most are still piloting.

Publishers:forbes.com

Reality

Evidence30
Adoption25
Hype gap+38
Incentives85
Confidence55
leadershipOne report1 publisher

EU productivity has slid from almost 95 percent of the US level to 80 since 2000

A Foreign Affairs essay counts about 30 percent of the Draghi recommendations implemented by mid-2026 and argues that even full adoption would leave the gap open, because the barriers are Europe's own labor, tax and regulatory layers.

Reality

Evidence42
Adoption30
Hype gap+22
Incentives55
Confidence45
productOne report1 publisher

US firms sanction poor performance by software at nearly 17 times the European rate

An OECD survey of 6,047 employers found this software in most workplaces on both continents. The countries split over what firms are allowed to do with it, and most of these tools are not AI at all.

Publishers:thenextweb.com

Reality

Evidence68
Adoption82
Hype gap+8
Incentives30
Confidence62
productOne report1 publisher

Ternus names the iPhone as the ideal AI device in his first keynote as Apple CEO

Ternus told his first keynote as chief executive that the ideal AI device already exists. The hub Apple insiders expected instead has been waiting on an assistant Apple leases from Google and cannot yet sell in the EU.

Publishers:thenextweb.com

Reality

Evidence48
Adoption30
Hype gap+35
Incentives70
Confidence45
leadershipOne report1 publisher

Lagarde sets Europe's AI choice as forgone growth or dependence on US and Chinese tools

Christine Lagarde says Europeans can shun AI and lose growth or adopt it and depend on American and Chinese tools, while the safety debate that would set the technology's pace is run by two governments that have dismissed slowing down.

Publishers:theguardian.com

Reality

Evidence58
Adoption
Not scored
Hype gap+20
Incentives72
Confidence55
productOne report1 publisher

Apple gates its rebuilt Siri behind a waitlist in iOS 27

Siri AI shipped on 14 September as an opt-in beta in English on a short list of recent hardware. It does not run on iPhone, iPad or Watch in the EU, or anywhere in China, and Apple has set daily limits it has not published.

Publishers:thenextweb.com

Reality

Evidence55
Adoption28
Hype gap+28
Incentives74
Confidence56
buildOne report1 publisher

Brussels' draft Cybersecurity Act revision would start a 36-month Huawei removal clock at adoption

The January 2026 CSA2 proposal would let the Commission designate high-risk suppliers across 18 industries and force removal within 36 months of the law taking effect. It is still before Parliament and Council.

Publishers:dev.to

Reality

Evidence30
Adoption18
Hype gap+38
Incentives60
Confidence34
productOne report1 publisher

Apple's top Siri tier reaches six of the 33 iPhone models that run iOS 27

iOS 27 installs on iPhones going back to the 2019 iPhone 11, Apple Intelligence needs 8GB of RAM, and two of the new Siri features need 12GB. A rollout plan now has three hardware tiers and a regional block on top.

Publishers:tomsguide.com

Reality

Evidence45
Adoption55
Hype gap+15
Incentives40
Confidence50
productOne report1 publisher

Europe's strict product liability reaches standalone software on 9 December

David Sacks told Anthropic and OpenAI to pace the frontier without an antitrust waiver or an approval regime, and said product liability already disciplines them. Europe will run both regimes on the same models.

Publishers:thenextweb.com

Reality

Evidence60
Adoption
Not scored
Hype gap+15
Incentives70
Confidence45
buildOne report1 publisher

An Official Journal citation due late 2026 turns WCAG 2.2 into an EAA obligation

The next EN 301 549 is finished, but nothing binds until the European Commission cites it. Until then V3.2.1 and WCAG 2.1 remain the text you are actually measured against, and the citation date has already moved.

Publishers:dev.to

Reality

Evidence46
Adoption
Not scored
Hype gap−10
Incentives40
Confidence45
productOne report1 publisher

A hyperscaler reportedly handed Dutch regulators' emails to Congress. Residency was never sovereignty.

The CNCF's argument is that the CLOUD Act reaches European soil, so "our servers are in Frankfurt" buys residency and not control. The boundary that holds is infrastructure you can run yourself.

Publishers:cncf.io

Reality

Evidence32
Adoption
Not scored
Hype gap+22
Incentives72
Confidence38