On December 9, 2022, the European Commission (EC) published its draft Digital Markets Act (DMA) Implementing Regulation, which will be open for public comment until January 6, 2023. The package is designed to give guidance
Continue Reading Some Light Holiday Reading: Draft Procedural Guidance on the EU’s Digital Market Act Open for ConsultationEU Court Opinion: Competition Authorities May Consider Data Protection Breaches in Their Investigations
On September 20, 2022, an adviser to the EU’s top court opined that competition authorities may consider a company’s compliance with the EU’s data protection rules as part of an abuse of dominance investigation.
In…
Continue Reading EU Court Opinion: Competition Authorities May Consider Data Protection Breaches in Their InvestigationsEuropean Union Adopts Flagship Digital Services Act
On October 27, 2022, the Digital Services Act (DSA) was published in the Official Journal of the European Union, sweeping in a new era in the regulation of digital services. (See Wilson Sonsini’s DSA…
Continue Reading European Union Adopts Flagship Digital Services ActFormal Publication of the DMA and Timelines for Compliance
On October 12, 2022, the EU Digital Markets Act (DMA) was published in the Official Journal of the European Union (see here), giving clarity as to when the new rules will apply. The DMA will enter into force on November 1, 2022, and it will become fully applicable in May 2023. At that point, the gatekeeper designation process will start, and once designated, gatekeepers will have six months to comply with the DMA. This means that the DMA will only be fully enforceable against companies in spring 2024, likely around March.
Continue Reading Formal Publication of the DMA and Timelines for Compliance
European Commission Proposes New EU Cybersecurity Rules for Software and Hardware Products
On September 15, 2022, the European Commission (EC) published a Proposal for a Cyber Resilience Act (CRA Proposal) that sets out new rules in the European Union (EU) for software and hardware products and their remote data processing solutions. The CRA Proposal introduces mandatory cybersecurity-related requirements and reporting obligations, including about product vulnerabilities, for manufacturers, importers, and distributors of such products. The potential sanctions include product withdrawal from the EU market and fines of up to EUR 15 million or 2.5 percent of total worldwide annual turnover for the preceding year.
Continue Reading European Commission Proposes New EU Cybersecurity Rules for Software and Hardware Products
EU Reaches Political Agreement on Additional New Rules for Digital Platforms in the Digital Services Act
The EU is close to finalizing the adoption of the Digital Services Act (DSA), which will impose new obligations on digital platforms regarding content moderation, due diligence for illegal content, and advertising transparency. It will entail significant changes to existing EU law in these areas and will impose substantial new compliance burdens on companies in regard to online content.
Continue Reading EU Reaches Political Agreement on Additional New Rules for Digital Platforms in the Digital Services Act