Last Updated: January 2023

This is a multipart series intended to provide privacy professionals with an overview of new EU legislation adopted since May 2022 under the European Union’s Strategy for Data, such as the EU Data Governance Act, the Digital Services Act, the Digital Markets Act and the NIS2 Directive. Each brief will depict a legislation’s objective, material and territorial scope, main requirements, enforcement, and oversight structure.

EU Data Governance Act: 101
In the first of this multipart series, we explore the EU Data Governance Act. The DGA seeks to foster public sector information reuse; to create a supervisory framework for the provision of data sharing services; and to establish a framework for voluntary registration of entities which collect and process data made available for altruistic purposes. This brief provides an overview of the DGA’s objective, material and territorial scope, main requirements, enforcement, and oversight structure.

EU Digital Markets Act: 101
Continuing this multipart series, we explore the EU Digital Markets Act. The DMA creates new obligations for big technology platforms acting as “gatekeepers providing core platform services” to create a fairer environment for business users that rely on gatekeepers, and to ensure consumers have access to better services and can easily switch providers. This brief provides an overview of the DMA’s objective, material and territorial scope, prohibited practices, and enforcement.

EU Digital Services Act: 101
The third chart in this series explores the EU Digital Services Act. The DSA aims to harmonize conditions for the provision of intermediary services and increases transparency requirements for online intermediaries. This brief provides an overview of the DSA's objective, key requirements and enforcement.

EU NIS2 Directive: 101
The fourth chart in this series explores the NIS2 Directive on measures for a high common level of cybersecurity across the EU, which further improves the resilience and incident response capacities of the public and private sectors, and the EU as a whole, through risk management measures and reporting obligations. It replaces the current NIS directive adopted in 2016.

More briefs will be added to this page soon.