Authors
Authors
Digital Omnibus Package - Q1 2026
The EU Digital Omnibus package is a set of proposed EU regulations intended to simplify and align existing rules on data, privacy, cybersecurity and AI.
Online Safety Act 2023 – February 2026
Ofcom to publish final super-complaints guidance.
The Cyber Security and Resilience (Network and Information Systems) Bill - 3 February 2026
Expected to be finalized (coming into force later in 2026). Similar to EU NIS2 will include additional cybersecurity and breach notification provisions for in-scope services.
Section 138 of the Data Use and Access Act 2025 - 6 Feb 2026
New offences relating to the creation of intimate images of an adult without consent come into force.
eEvidence Directive - 18 Feb 2026
The EU e-Evidence Directive requires service providers to designate an establishment or appoint a legal representative in an EU member state for cross-border access to e-evidence for criminal investigations.
NIS2 (Germany) - 6 March 2026
The German NIS2 law will expand oversight of entities in critical sectors. Entities must register with the authority by 6 March 2026.
Data Use and Access Act 2025 - 19 March 2026
UK Government required to publish a report on the use of copyright works in the development of AI systems and an economic impact assessment.
Online Safety Act 2023 - 11 April 2026
Deadline for services whose qualifying worldwide revenue meets or exceeds £250 million, to notify under fees regime (in effect from 11 December 2025).
Data Use and Access Act 2025 - By Summer 2026
Changes to the Information Commissioner’s Office (ICO) governance. Structures to take effect. Expected to be completed by Summer 2026.
Data Use and Access Act 2025 - Spring/Summer 2026
ICO to publish updated guidance on research, archiving and statistical processing, rights of access and objection, and data protection considerations in recruitment and selection.
Data Use and Access Act 2025 - June 2026
All provisions of the DUAA are expected to be fully implemented and final guidance published.
Distance Marketing of Financial Services Directive - 19 Jun 2026
The EU distance marketing of financial services directive will protect EU consumers while purchasing online services. In particular, providers must offer mandatory “withdrawal buttons”, allowing customers to withdraw from contracts online.
Online Safety Act 2023 - July 2026
- Ofcom to publish register of categorised services (which have additional obligations under the OSA).
- Ofcom to publish its age assurance statutory report which will assess how services have used age assurance and how effective it has been for the purpose of complying with their duties under the Act.
AI Act - 2 Aug 2026
The EU AI Act will regulate AI systems by prohibiting unacceptable risk-practices, imposing strict obligations on high-risk systems and requiring transparency duties.
eEvidence Regulation - 18 Aug 2026
The EU e-Evidence Regulation enables authorities to directly order service providers to produce or preserve electronic evidence data within 10 days, 8 hours in emergencies.
Digital Markets, Competition and Consumers Act 2024 - Autumn 2026
Implementation of the new subscription contracts regime to start in Autumn 2026 at the earliest.
EU Cyber Resilience Act (CRA) - 11 Sep 2026
The EU Cyber Resilience Act aims to safeguard consumers and business buying software or hardware products with digital elements. Special reporting obligations will apply as of 2026.
Data Act (DA) - 12 Sep 2026
The EU Data Act requires manufacturers of connected products and data holders to share user generated data freely with other users, while easing cloud switching and protecting data from unlawful access. Mandatory changes to product design and manufacture rules will apply as of 2026.
Online Safety Act 2023 - October 2026
Ofcom to publish statutory report of findings on the incidence and severity of content harmful to children.
Online Safety Act 2023 - November 2026
Ofcom’s Online Information Advisory Committee will publish its first statutory report.
Revised Product Liability Directive (PLD) - 9 Dec 2026
The EU Revised Product Liability Directive will include liability rules for smart products and systems with AI, while strengthening evidence disclosure in the event of a claim.
Digital Fairness Act - Q4 2026
The EU Digital Fairness Act is a legislative proposal, which aims to tackle online harms like dark patterns, addictive design features, misleading marketing practices and other unfair exploitation methods.
Authors