Category: Regulations

AI regulations EU organisations need to follow, including enforcement updates, guidance, and compliance deadlines

Denmark wants consent for deepfakes Why AI-Assisted Attacks Go Through The Side Door AMD plans its chip supply further ahead An AI Savings Target Is A Promise, Not A Result Spotting AI-Generated Scams Is The Wrong Defence Copyright and AI: Brussels asks again BNP’s Google deal has a data boundary EDPB: a fine unless the breach is minor The KIDS Act gates AI chatbots

Stay ahead of AI change. Get practical updates from Future Prep direct to your inbox.

By subscribing you agree to receive Future Prep news. Unsubscribe any time.

AI Generated - Balance scale weighing a single explanation sheet against a binder of paperwork, illustrating the right to explanation under Article 22 GDPR and Article 86 AI Act

Right to Explanation: 3 Critical Gaps

The Dutch DPA's consultation on the right to explanation closes on 26 May 2026. The draft reframes Article 22 GDPR and Article 86 AI Act obligations as a deliverable on demand, not paperwork. Three deployer gaps to close before the final guidance arrives in Q3 2026.
AI Generated - Open August 2026 calendar with 2 August circled in red beside a torn paper marked POSTPONEMENT and a red wax pencil.

What the DMA review actually changed for your cloud and AI stack

The 28 April DMA review did not expand the law to cloud and AI. It narrowed enforcement onto two specific providers and one specific service category. The date worth pinning to your governance calendar is November 2026, not 28 April. Here is what changes for an EU mid-market stack.
AI Generated - Stone plaques showing Solvinity replaced by Kyndryl illustrating DigiD sovereignty risk

DigiD Under Foreign Law: The Sovereignty Risk Nobody Wants to Name

A supplier acquisition can quietly move national identity infrastructure under foreign jurisdiction. The DigiD sovereignty risk is a live example of how this happens, why EU law already rules it out and what every EU organisation running critical systems should check before the same logic applies to them.
AI vendor governance risk depicted as a ceramic tile fracturing under pressure in an industrial vice with an unopened spare beside it

What the Anthropic Case Reveals About AI Vendor Governance

The Anthropic-Pentagon fallout is not a defence story. It is an AI vendor governance case study that exposes three structural risks every EU deployer needs to assess and monitor.
AI Generated - DSA platform designation risk illustrated by a regulatory stamp pressing onto a network cable connecting an office to a server

When a DSA Platform Designation Changes Your AI Risk Profile

The European Commission is assessing whether ChatGPT qualifies for DSA platform designation. For deployers, this changes the risk profile of every AI tool built on a regulated platform.
AI-generated - output ownership gap illustrated by a stamped document dissolving into blank paper on a desk

Who Owns What Your AI Produces?

The EU AI Act regulates AI inputs but says nothing about who owns the output. Most governance programmes have not addressed this gap. Here are four steps to close it.
Scroll to Top