On February 5, 2026, key reforms to the UK’s data protection regime came into force, effectuating a departure from certain aspects of the EU regime and underscoring an emerging divergence between the UK and EU frameworks. These changes introduce new flexibility in areas such as cookie consent, automated decision-making (ADM) and processing of data for scientific research purposes, while raising the bar for compliance in areas such as the handling of data relating to minors.Continue Reading Reforms to UK Data Protection and Privacy Laws Come into Force
2026 Year in Preview: European Digital Regulatory Developments for Companies to Watch Out For
As we ring in the new year, we want to make you aware of key issues that we expect lawmakers and regulators to focus on in the months ahead.
Below are the top European digital regulatory issues to watch out for in 2026:Continue Reading 2026 Year in Preview: European Digital Regulatory Developments for Companies to Watch Out For
EU Unveils Next Five-Year Consumer Protection Strategy
Consumer protection has become a key policy focus in the EU, as policymakers modernize competition and consumer laws to reflect the realities of the digital economy. The EU has implemented landmark regulations designed to reshape the obligations of online platforms, focusing on promoting fair competition and enhancing user protections in digital markets. Key among these are the Digital Markets Act (DMA) and the Digital Services Act (DSA). See Wilson Sonsini’s previous factsheets for more information on the DMA and DSA.Continue Reading EU Unveils Next Five-Year Consumer Protection Strategy
EU Data Act Enters into Force
Effective September 12, 2025, the EU Data Act introduced new rules on access to and sharing of data from certain products and services in business-to-consumer (B2C), business-to-business (B2B), and business-to-government (B2G) contexts. This alert highlights the key obligations. The EU Data Act applies to any business offering products or services in the EU, regardless of its location.Continue Reading EU Data Act Enters into Force
EU Reaches a Deal on Rules for Swifter Cross-Border GDPR Enforcement
On June 16, 2025, the Council of the EU (Council) and the European Parliament (EP) reached a provisional agreement on a new regulation (the Draft Regulation) to enhance enforcement of the General Data Protection Regulation…
Continue Reading EU Reaches a Deal on Rules for Swifter Cross-Border GDPR EnforcementEuropean Privacy Regulators Issue Guidance on Age Assurance
On February 11, 2025, the European Data Protection Board (EDPB) adopted a statement (Statement) on age assurance. The Statement comes at a formative time in the development of age assurance practices, as EU and UK regulatory frameworks increasingly require companies to take steps to identify and protect child users of online services. The Statement outlines key privacy principles that should be followed when developing and deploying age assurance processes, together with the risks to individuals’ rights that can arise.Continue Reading European Privacy Regulators Issue Guidance on Age Assurance
Understanding the EU’s Cyber Solidarity Act: Key Takeaways
On February 4, 2025, the European Union’s (EU) Cyber Solidarity Act (CSA) entered into force. The CSA aims to harmonize and strengthen the cooperation between EU authorities to improve their capacity to detect and address…
Continue Reading Understanding the EU’s Cyber Solidarity Act: Key Takeaways