EU Law and Regulatory

On February 11, 2026, the European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) (jointly, the Authorities) issued a Joint Opinion on the European Commission’s proposed Digital Omnibus Regulation (Digital Omnibus). This follows their Joint Opinion of January 20, 2026 on the Digital Omnibus on AI.

The Digital Omnibus, as with the other “omnibuses” released by the Commission, aims to streamline several EU laws, reduce administrative burdens for covered entities, and enhance competitiveness in the EU. Once adopted, it should reshape how organizations handle personal data generally, including in relation to AI development, scientific research, and incident reporting. The Authorities welcome efforts to simplify and to promote consistent interpretations of key concepts found in the GDPR, the ePrivacy Directive, the NIS2 Directive, and the remaining Data Acquis. At the same time, they caution that this initiative launched by the Commission must not weaken fundamental rights protections, including data protection.

Below is an overview of the Authorities’ positions. It covers only the key amendments discussed in our previous blog post on the Digital Omnibus.

Continue Reading EU Regulators Issue Opinion on Revisions of GDPR and Other Data Laws

On 15 January 2026, the Belgian High Court delivered a judgment in proceedings initiated by the Belgian Supervisory Authority, in which it challenged the scope of judicial review exercised by the Market Court over its enforcement decisions. The authority was unsuccessful on both grounds of appeal.

Continue Reading Belgian High Court Confirms Full Judicial Review of Supervisory Authority Decisions

Germany has kicked off a new Pharma and MedTech Dialogue that aims to develop new policies and regulatory reform proposals to re‑establish Germany as a competitive, innovation‑friendly location for life sciences R&D and manufacturing. The outcome of this dialogue shall be the basis for a new German Pharma and MedTech Strategy.

Continue Reading German Government launches new Pharma & MedTech Dialogue – Broad agenda, big hopes but unclear prospects

On 16 December 2025, the European Commission presented the Automotive Package (the “Package”), a set of interlinked legislative and policy initiatives aimed at supporting the European automotive sector’s transition to clean mobility. The Package has four core components: (i) a proposal to revise the CO₂ emission performance standards for cars and vans, (ii) the so-called “Battery Booster Strategy”, (iii) a proposal on greening corporate vehicle fleets, and (iv) a proposal for an “Automotive Omnibus” regulation that would amend several pieces of automotive legislation to simplify regulations for vehicle manufacturers. Together, these initiatives signal a material recalibration of the EU’s approach to vehicle decarbonization.

Continue Reading The EU Automotive Package: Increased Compliance Flexibility, but Growing “Made in the EU” Conditionality

On December 11, 2025, the CNIL fined an Israeli company €1 million for failing to comply with its GDPR obligations after providing personalized advertising services to an EU music-streaming platform. The service helped the platform to personalize and optimize marketing campaigns to promote its streaming services.

The CNIL held that the GDPR applied to the non-EU processor under Article 3(2), on the basis that it had monitored the behavior of EU users by creating audience segments based on demographics and listening habits, on behalf of the controller.

Continue Reading French CNIL Imposes €1M GDPR Fine on Israeli Ad Tech Firm

On December 18, 2025, the UK Government passed the Employment Rights Bill, which will now be referred to as the Employment Rights Act 2025 (the “Act“). This represents the “biggest upgrade in employment rights for a generation” and introduces a wide-ranging suite of reforms to be…

Continue Reading UK Employment Rights Act Finally Becomes Law

This is one in a series of Inside EU Life Sciences blogs on the European Commission’s (“Commission’s”) latest proposal for a European Biotech Act.

On 16 December 2025, the Commission announced a proposal to introduce a new draft Regulation (“Proposed Regulation”) aimed at boosting the EU’s competitiveness in the biotech…

Continue Reading European Biotech Act: Potential new extension for supplementary protection certificates (SPCs) for ATMPs and biotechnology medicines

On December 2, 2025, the Court of Justice of the European Union (“CJEU”) issued a decision clarifying the obligations of online marketplace operators with regard to content posted on their platform, where such content includes personal data.  This blogpost provides an overview of the decision and its key takeaways.

Continue Reading CJEU Clarifies Responsibilities Of Online Marketplace Operators

On 3 December 2025, the European Commission adopted the RESourceEU Action Plan, signaling that Europe’s industrial competitiveness will increasingly depend on its ability to secure and diversify critical raw material (“CRM”) supply chains.  For companies, inside and outside the EU, RESourceEU is more than a technical update: it marks a policy shift toward a more interventionist and security-driven approach to CRM governance.

The analysis below outlines the drivers behind the initiative, its main components, and the implications for multinationals trading into the EU.

Continue Reading RESourceEU Action Plan – Strengthening the EU’s Access to Critical Raw Materials

At just after 5 am on 11 December 2025, the EU Parliament and the Council reached agreement on a new directive and a new regulation that will result in a major update to the EU’s pharmaceutical laws.  Progress towards these new rules began in 2016 and are the result of…

Continue Reading EU Announces Political Agreement on Pharma Law Review