Articles for tag: Europäische KommissionKIKI-Verordnung

The GPAI Code of Practice

On 10 July 2025, the European Commission published the final version of its Code of Practice for General-Purpose AI (GPAI) – a voluntary rulebook developed by a group of independent experts and more than 1,400 stakeholders from industry, academia, civil society, and rightsholders. The Code is meant to prepare providers for what’s ahead: it offers a straightforward way to start complying with future obligations under the AI Act. Its success will ultimately depend on whether it manages to reduce compliance burdens and provide legal certainty. Even if not universally adopted, it could still serve as a regulatory benchmark under the AI Act.

Independence as a Desideratum

A recent report claiming that EU tech regulation has entered the ongoing trade negotiations with the U.S. has sparked fears that enforcement of the Digital Services Act (DSA) might be halted altogether. Although the DSA only came into full effect in February 2024, the European Commission’s subsequent enforcement has already showcased conflicts regarding its role as an autonomous political and administrative enforcement body. Considering the potential impact of the DSA on online communication, the Commission’s current role in DSA enforcement raises serious concerns. This calls for a search for alternative models of DSA enforcement. Three options present themselves.

Energy Sanctions Reloaded

The European Commission proposed a ban on Russian gas imports based on Article 207 TFEU – a legal basis related to the EU’s Common Commercial Policy, rather than the Common Foreign and Security Policy. Although the policy domains of trade and sanctions often overlap in practice, the new proposal seems to overlook that the EU maintains a distinct legal framework for imposing sanctions. If the ban is ultimately enacted under Article 207 TFEU, there is a risk that one or more Member States opposing these new sanctions against Russia will challenge it on the grounds that this EU Regulation is based on the wrong legal basis.

Reform ohne Wirkung

Im vergangenen Monat hat die Kommission einen Reformvorschlag zur DSGVO vorgelegt. Konkret soll Art. 30 DSGVO angepasst werden, der Datenverarbeiter verpflichtet ein sog. „Verarbeitungsverzeichnis“ zu führen. Bisher galt für Unternehmen mit weniger als 250 Beschäftigten eine Ausnahme. Künftig soll diese Grenze auf 750 Mitarbeiter angehobenen werden. Doch der Vorschlag polarisiert.

Anatomy of a Fall

On 11 February 2025, the Commission published its 2025 work programme and revealed the likely withdrawal of the Proposal for an Artificial Intelligence Liability Directive (‘AILD proposal’), citing “no foreseeable agreement” among Member States. This blog post highlights the proposed AILD’s main merits and shortcomings and it explores the implications of its likely withdrawal for EU tech regulation by clarifying the interplay between AI liability rules, the AI Act, and the PLD.

When Guidance Becomes Overreach

From 2 August 2025, providers of so-called “General Purpose AI” (GPAI) models will face far-reaching obligations under the EU’s AI Act. To demonstrate compliance, the AI Act allows providers to rely on a “Code of Practice”, currently being drafted by over 1000 stakeholders under the auspices of the AI Office, and expected to be adopted by the European Commission before August 2025. This post critically examines the third draft of the Code of Practice.

Efficiency, but at What Cost

The Commission’s proposal to reform the EU’s legal framework on return is presented as a necessary step to establish a “clear, modern, simplified [system of] […] common rules for managing returns effectively.” This blog post examines whether the proposal lives up to this objective. It assesses the extent to which the proposed changes address the deficits that currently hamper returns and illustrates how the reform would undermine the safeguards of the individuals concerned.

Simplification Promised, Uncertainty Delivered

The EU’s Green Deal had an ambitious goal: to make Europe the world’s first climate-neutral continent. Now, the Commission shifted its focus to instruments like the ‘Clean Industrial Deal’ and prioritizes the EU’s competitiveness: It proposes to drastically cut back core Green Deal instruments in the so-called ‘Omnibus Packages’. This blog post will concentrate on the changes proposed in the field of sustainability reporting in the Corporate Sustainability Reporting Directive and show why the Omnibus Packages now impose substantial uncertainty on companies.

Left Behind

The recently introduced EU Omnibus package aims at “simplifying” corporate sustainability reporting and due diligence requirements envisaged under the European Green Deal. Reflecting on its wider effects on sustainability and human rights for the Global South, this article argues that the reform overlooks the realities of informal economies and risks diminishing the EU’s credibility as the global forerunner for corporate governance.

Eine teure Busfahrt

Am 26. Februar 2025 hat die Europäische Kommission das erste Omnibus-Paket zur Vereinfachung von EU-Vorschriften im Nachhaltigkeitsbereich veröffentlicht. Es soll Verwaltungskosten einsparen, Komplexität reduzieren und kleine und mittlere Unternehmen entlasten. Dieser Beitrag zeigt, dass sich die geplanten Änderungen allerdings erheblich auf die Durchsetzung der Europäischen Lieferkettenrichtlinie auswirken. Vor allem mit der Streichung der zivilrechtlichen Haftungsnorm in Art. 29 CSDDD würde die Richtlinie einen großen Teil ihrer Durchsetzungskraft verlieren.