NIS2: the French Resilience bill is postponed again at the National Assembly
The bill transposing NIS2 was removed from the National Assembly agenda on 6 October 2026.
HDS: EEA-only storage and transparency on transfers now apply
Since 27 September 2026, hosted health data must be stored only in the EU or EEA.
GDPR: the Digital Omnibus reform remains stuck
The data part of the Digital Omnibus is still at first reading; the current GDPR keeps applying.
CRA: vulnerability and incident reporting is now mandatory
Since 11 September 2026, manufacturers report exploited vulnerabilities and severe incidents through ENISA's platform.
AI Act: the Digital Omnibus on AI delays high-risk obligations
Regulation (EU) 2026/1744 moves Annex III high-risk AI obligations to 2 December 2027.