News and Insights

Practical updates on AI governance, workforce strategy, and digital resilience for EU organisations
Denmark wants consent for deepfakes Why AI-Assisted Attacks Go Through The Side Door AMD plans its chip supply further ahead An AI Savings Target Is A Promise, Not A Result Spotting AI-Generated Scams Is The Wrong Defence Copyright and AI: Brussels asks again BNP’s Google deal has a data boundary EDPB: a fine unless the breach is minor The KIDS Act gates AI chatbots

Stay ahead of AI change. Get practical updates from Future Prep direct to your inbox.

By subscribing you agree to receive Future Prep news. Unsubscribe any time.

Latest Insights

From the Future Prep blog

AI Generated - Balance scale weighing a single explanation sheet against a binder of paperwork, illustrating the right to explanation under Article 22 GDPR and Article 86 AI Act

Right to Explanation: 3 Critical Gaps

The Dutch DPA's consultation on the right to explanation closes on 26 May 2026. The draft reframes Article 22 GDPR and Article 86 AI Act obligations as a deliverable on demand, not paperwork. Three deployer gaps to close before the final guidance arrives in Q3 2026.
AI Generated - Wooden shipping crate held closed by two independent fasteners, illustrating the Europrivacy transfer tool stack under Article 46.

The Europrivacy Transfer Tool: What Changes in AI Procurement

The EDPB has confirmed Europrivacy as both a Data Protection Seal under Article 42(5) and as an Article 46 transfer tool when combined with binding and enforceable commitments. Five concrete updates to make to your procurement file this quarter, with a decision sheet as the operational companion.
AI Generated - Three sets of calipers measuring one metal workpiece on a workshop bench, illustrating cyber-capable AI compliance across three regimes.

Cyber-Capable AI Compliance: : Three Regimes – the Same Model

A frontier AI model that finds and exploits software vulnerabilities sits inside three legal regimes at once: NIS2, the AI Act and the CRA. For deployers that means three sets of obligations and three sets of audit risk. The fix is a single control map built now.
AI Generated - A speaker at a lectern with mouth closed while twelve journalists take notes, illustrating AI chatbot data leakage before any user input.

Hidden AI Chatbot Data Leakage Risk

A new UC Davis measurement study shows AI chatbot data leakage is now the default behaviour of the modern chatbot stack. Names, emails and prompt content leave for third parties before a question is asked. For revenue leaders, this is a supply chain problem.
AI Generated - AI evaluation reports illustrated by a single printed report being read through a magnifying glass, reading glasses and a ruler on a wooden desk

Reading AI Evaluation Reports: A Practitioner’s Filter for the New Procurement Reality

AI evaluation reports are landing in procurement inboxes from vendors, third parties and government bodies like CAISI. Each type answers a different question. This practitioner filter walks through three evidence types, four reading checks, the AI Act conformity routes and the four triggers that should refresh your evidence.
AI Generated - Mid-aged employees carrying cardboard boxes leave a corporate office through a revolving door as younger workers arrive.

What Cloudflare’s 1,100 Layoffs Tell Us About AI Workforce Strategy

Cloudflare cut 1,100 jobs the same week it posted record revenue. The pattern is now structural across the enterprise, and Forrester and Gartner predict half of these reductions will quietly reverse. Here is what a sound AI workforce strategy actually requires.

Latest News

Short updates

Denmark wants consent for deepfakes

Denmark’s culture minister introduced a bill on 8 October to ban sharing realistic digital imitations of a person’s appearance or voice without consent. Performers’ work is covered too, and satire stays allowed. The minister hopes it takes effect at the turn of the year. For anyone generating synthetic voices or faces, the question moves from whether output is labelled to whose likeness it uses, and who agreed to that.

AMD plans its chip supply further ahead

AMD will substantially increase chip supply in 2027 and now plans three to five years ahead, chief executive Lisa Su told reporters in Taipei on 6 October. Demand still exceeds supply, AMD needs more advanced wafer capacity and Su called Taiwan critical to the chip supply chain. An AI roadmap set a year at a time quietly assumes that capacity will be there. How far ahead does yours look?

Copyright and AI: Brussels asks again

On 29 September the European Commission opened a consultation on how technology, AI included, affects copyright protection. The use of protected content in AI is one of four focus areas. Rights holders, generative AI providers and other AI value-chain actors are among those invited to respond until 3 November 2026. An organisation deploying generative AI arguably sits in that chain. Is its view on licensing better heard now, or after any new measures take shape?

BNP’s Google deal has a data boundary

BNP Paribas has signed a five-year Google Cloud partnership covering infrastructure, Gemini models and internal AI agents. It is not a wholesale move. The bank’s existing governance framework decides which data may run in public cloud, and certain categories will stay out. Each agent is to be limited to the resources its task needs. For an EU-operating organisation, the question is whether that boundary is drawn before the contract or after it.

EDPB: a fine unless the breach is minor

The EDPB has adopted guidelines setting a five-step test for when a data protection authority should fine rather than reprimand. Step four carries the weight. A minor infringement generally draws a reprimand, while a non-minor one brings a strong presumption that a fine follows. For an EU-operating organisation, the live question moves from whether a fine is likely to whether its own breach would count as minor. Consultation runs to 13 November.

The KIDS Act gates AI chatbots

The Commission’s KIDS Act proposal, adopted on 17 September, would stop AI companions and chatbots reaching the market until providers can demonstrate compliance and run a monitoring mechanism for emerging risks. Enforcement rides on the AI Act for chatbots and the DSA for platforms, with fines up to 6% of worldwide turnover. For anyone shipping a chatbot that minors can reach, that is a market gate rather than a conduct rule.

Scroll to Top