Data Economy, Privacy and Cybersecurity Newsletter - October 2026
In this newsletter, we offer the latest updates on everything related to the data economy (technology law, technological innovations, artificial intelligence, digital law, e-Commerce), privacy (data protection and related fundamental rights), and cybersecurity (information security and the protection of the networks and systems that process it). We cover the most recent rulings from relevant authorities and agencies, key court decisions, and the most important news in this field.The Digital Markets Act (DMA) enters a new phase: enforcement, litigation and the road ahead
As the DMA moves beyond its initial implementation, enforcement activity and the first EU court rulings are adding clarity on the application of the rules. Attention is now also turning to how the framework will respond to developments in artificial intelligence and cloud computing.The European Union simplifies corporate sustainability rules: the new ESRS reduce the reporting burden
The publication of Delegated Regulation (EU) 2026/1563 in the Official Journal of the European Union culminates the review of the European Sustainability Reporting Standards, aimed at simplifying reporting requirements. Businesses must review their double materiality and data preparation processes in order to adapt to the future sustainability reporting framework.Spain: These are the obligations for e-commerce platforms in relation to waste and extended producer responsibility
In response to the growing prevalence of cross-border sales of products through e-commerce platforms, lawmakers have imposed on platform operators the obligation to oversee compliance by sellers with the extended producer responsibility regime and, where they fail to comply, to assume secondary liability.ESG in the courts: risks, trends and defense strategies
ESG litigation is a reality in the international legal landscape. It exposes companies to significant economic and reputational risks, which should be anticipated through prevention and compliance, not only to reduce the likelihood of claims, but also to strengthen the defense if they ultimately cannot be avoided.The AI Digital Omnibus Regulation has been published, redefining deadlines and simplifying requirements for companies and developers
The new European regulation published in the OJEU will require many organizations to revisit their artificial intelligence (AI) compliance plans. While it introduces simplification measures and extends certain transition periods, it also modifies key aspects of the rules applicable to high-risk systems, transparency, data processing, and innovation, making it necessary to reassess the regulatory impact of ongoing AI projects.The European Union’s digital regulatory crossroads: simplification, increased flexibility, or deregulation?
The legislative process surrounding the Digital Omnibus and AI Omnibus packages has placed a fundamental issue at the heart of the European debate: how to reduce burdens and gain competitiveness without eroding the trust, legal certainty and rights on which the EU model is built.Data Economy, Privacy and Cybersecurity Newsletter - July 2026
In this newsletter we featured two articles: one on quantum computing and its impact on the data economy, privacy, and cybersecurity, and another on personal data regulation in Colombia. We also covered the latest developments, regulatory updates, and court decisions relating to the data economy, privacy, and cybersecurity.Limoges porcelain, Portuguese embroidery and Brittany granite: the first registrations of geographical indications for craft and industrial products
The first geographical indications for craft and industrial products are now a reality in the EU. From Limoges porcelain to Portuguese embroidery, this new framework creates fresh opportunities, as Spain moves forward with its first applications and works to avoid falling behind.