Data sovereignty through local cloud infrastructure is necessary but insufficient — true control requires robust identity governance and transparency over metadata, encryption keys, and access protocols.
In 2026, AI funding will only be granted to projects with demonstrable development risk, with the EU AI Act—which is being phased in starting 2025—serving as the baseline for eligible solutions.
The code of conduct provides signatories with direct compliance evidence to EU authorities, eliminating separate individual audits in each member state.
The EU AI Act mandates binding compliance measures effective immediately and requires organizations to systematically classify and document their AI systems according to risk levels.
The EU Pay Transparency Directive creates information rights for employees and reporting obligations for employers that must be regulated by data protection rules—without specifying minimum group sizes for comparison groups.
In digital identity, security is not a product feature but the product itself — therefore, the required level of trust must be present from the start, not built up later.
Munich Regional Court strips Google’s AI Overviews of the previously granted liability privilege for search engines and recognizes AI-generated texts as statements directly attributable to Google.