Last updated: 16 August 2026 Italy’s Garante ruled against a broadcaster over AI-manipulated video of a named journalist on 23 July 2026, ten days before the AI Act’s transparency duties began to apply, and announced it two weeks later. The finding was made under Articles 5 and 25 of the GDPR, which have been applicable…
Three AI Act transparency duties apply from 2 August 2026. The final guidelines draw the line at the date a file was generated. Fines reach 15 million euro.
The chatbot notice belongs to your supplier and the high-risk delay belongs to companies you are not. Three duties reach a deployer on 2 August 2026.
Spain fined Amadeus 14.4M for reusing booking data it could collect but not repurpose. Plus Vodafone, Emirates, and July’s deadline pileup before 2 August.
Last updated: 29 June 2026 Eight EU regulations now set the compliance workload for most mid-sized European companies, and they share no deadline, no penalty cap and no single enforcer between them. This EU compliance regulations comparison puts GDPR, NIS2, the AI Act, DORA, CSRD, CBAM, the Cyber Resilience Act and EUDR side by side,…
Commission published the AI labelling Code of Practice on 10 June. CBAM adds 180 downstream products. Elkjøp fined €1.85M for loyalty programme consent.
The Commission published 148 pages on AI Act high-risk classification. CNIL fined IQVIA €5M for health data warehouses. Finland passed the first CRA law.
Parliament and Council extended AI Act high-risk by 16 months to 2 December 2027, but formal adoption must clear before 2 August. Also: ESRS cut 70%, Yango fined €100M.
Ten Article 21 measures, a 24-hour incident clock and personal liability for the board. What in-scope entities have to do, and by when, in 2026.