Loading the bibliography, with its filters and the uses of each source. Until it arrives — or without JavaScript — this is every source, 189 in all, by tier:
Primary law and courts 37
- Cour administrative du Grand-Duché de Luxembourg. Cour administrative, arrêt du 12 mars 2026, n° 52757C du rôle, ECLI:LU:CADM:2026:52757. March 12, 2026. https://ja.public.lu/50001-55000/52757C.pdf.
- Court of Justice of the European Union. Judgment in Case C-413/23 P, EDPS v SRB. September 4, 2025. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex:62023CJ0413.
- Court of Justice of the European Union. Judgment of 8 April 2014, Digital Rights Ireland and Seitlinger and Others, Joined Cases C-293/12 and C-594/12, EU:C:2014:238. April 8, 2014. http://publications.europa.eu/resource/celex/62012CJ0293.
- Court of Justice of the European Union. Judgment of 21 December 2016, Tele2 Sverige and Watson and Others, Joined Cases C-203/15 and C-698/15, EU:C:2016:970. December 21, 2016. http://publications.europa.eu/resource/celex/62015CJ0203.
- Court of Justice of the European Union. Judgment of 6 October 2020, La Quadrature du Net and Others, Joined Cases C-511/18, C-512/18 and C-520/18, EU:C:2020:791. October 6, 2020. http://publications.europa.eu/resource/celex/62018CJ0511.
- Court of Justice of the European Union. Judgment of 6 October 2020, Privacy International, Case C-623/17, EU:C:2020:790. October 6, 2020. http://publications.europa.eu/resource/celex/62017CJ0623.
- Regulation (EU) 2016/679 (General Data Protection Regulation). EUR-Lex. May 4, 2016. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679.
- Regulation (EU) 2022/2065 (Digital Services Act). EUR-Lex. October 27, 2022. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2065.
- Regulation (EU) 2022/1925 (Digital Markets Act). EUR-Lex. October 12, 2022. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R1925.
- Regulation (EU) 2024/1689 (Artificial Intelligence Act). EUR-Lex. July 12, 2024. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689.
- Regulation (EU) 2023/2854 (Data Act). EUR-Lex. December 22, 2023. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023R2854.
- Directive (EU) 2022/2555 (NIS 2 Directive). EUR-Lex. December 27, 2022. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555.
- Directive (EU) 2022/2557 (Critical Entities Resilience Directive). EUR-Lex. December 27, 2022. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2557.
- Regulation (EU) 2022/2554 (Digital Operational Resilience Act). EUR-Lex. December 27, 2022. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022R2554.
- Regulation (EU) 2024/2847 (Cyber Resilience Act). EUR-Lex. November 20, 2024. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R2847.
- Directive (EU) 2024/2853 on liability for defective products. EUR-Lex. November 18, 2024. https://eur-lex.europa.eu/eli/dir/2024/2853/oj/eng.
- Regulation (EU) 2026/1744 of 8 July 2026 (Digital Omnibus on AI). EUR-Lex. July 8, 2026. https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng.
- Commission Delegated Regulation (EU) 2025/2050 of 1 July 2025 on data access under the Digital Services Act. EUR-Lex. July 1, 2025. https://eur-lex.europa.eu/eli/reg_del/2025/2050/oj/eng.
- Regulation (EU) 2026/1744 of 8 July 2026 (Digital Omnibus on AI). EUR-Lex / ELI. July 24, 2026. http://data.europa.eu/eli/reg/2026/1744/oj.
- European Commission. “COM(2025) 837 final — Digital Omnibus Regulation.” November 19, 2025. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52025PC0837.
- European Commission. “Commission Decision of 13.5.2024 designating Booking Holdings Inc. as a gatekeeper pursuant to Article 3 of Regulation (EU) 2022/1925 (C(2024) 3176 final, Case DMA.100019).” May 13, 2024. https://ec.europa.eu/competition/digital_markets_act/cases/202442/DMA_100019_191.pdf.
- General Court of the European Union. Judgment of 8 July 2026, Apple and Apple Distribution International v Commission, Joined Cases T-1079/23, T-1080/23 and T-214/24, ECLI:EU:T:2026:451. July 8, 2026. http://publications.europa.eu/resource/celex/62023TJ1079.
- High Court of Ireland (Commercial). TikTok Technology Limited and TikTok Information Technologies UK Limited v Data Protection Commission [2026] IEHC 347 (Mulcahy J, 3 June 2026), Record No. 2025/248 MCA. June 3, 2026. https://ww2.courts.ie/acc/alfresco/d03be1e0-7395-4ba4-86f5-c331e3670995/2026_IEHC_347.pdf/pdf.
- High Court of Ireland (Commercial). TikTok Technology Limited and TikTok Information Technologies UK Limited v Data Protection Commission [2026] IEHC 419 (Mulcahy J, 30 June 2026), Record No. 2025/248 MCA. June 30, 2026. https://www2.courts.ie/acc/alfresco/65d7e861-a6f7-4fa9-b03c-91c1eb07c96c/2026_IEHC_419.pdf/pdf.
- Regulation (EU) 2025/2518 of 26 November 2025 laying down additional procedural rules on the enforcement of Regulation (EU) 2016/679. Publications Office of the European Union (Cellar). December 12, 2025. http://publications.europa.eu/resource/celex/32025R2518.
- Regulation (EU) 2023/1781 of 13 September 2023 establishing a framework of measures for strengthening Europe's semiconductor ecosystem (Chips Act) (OJ L 229, 18.9.2023, p. 1). Publications Office of the European Union (Cellar). September 18, 2023. http://publications.europa.eu/resource/celex/32023R1781.
- Regulation (EU) 2018/1725 of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies (OJ L 295, 21.11.2018, p. 39). Publications Office of the European Union (Cellar). November 21, 2018. http://publications.europa.eu/resource/celex/32018R1725.
- Publications Office of the European Union (Cellar). “Charter of Fundamental Rights of the European Union, Article 51 (OJ C 202, 7.6.2016, p. 404).” June 7, 2016. http://publications.europa.eu/resource/celex/12016P051.
- Regulation (EU) 2024/1083 of 11 April 2024 establishing a common framework for media services in the internal market (European Media Freedom Act) (OJ L 2024/1083, 17.4.2024). Publications Office of the European Union (Cellar). April 17, 2024. http://publications.europa.eu/resource/celex/32024R1083.
- Regulation (EU) 2024/900 of 13 March 2024 on the transparency and targeting of political advertising (OJ L 2024/900, 20.3.2024). Publications Office of the European Union (Cellar). March 20, 2024. http://publications.europa.eu/resource/celex/32024R0900.
- Directive (EU) 2024/2831 of 23 October 2024 on improving working conditions in platform work (OJ L 2024/2831, 11.11.2024). Publications Office of the European Union (Cellar). November 11, 2024. http://publications.europa.eu/resource/celex/32024L2831.
- Regulation (EU) 2025/327 of 11 February 2025 on the European Health Data Space (OJ L 2025/327, 5.3.2025). Publications Office of the European Union (Cellar). March 5, 2025. http://publications.europa.eu/resource/celex/32025R0327.
- Regulation (EU) 2024/1183 of 11 April 2024 amending Regulation (EU) No 910/2014 as regards establishing the European Digital Identity Framework (OJ L 2024/1183, 30.4.2024). Publications Office of the European Union (Cellar). April 30, 2024. http://publications.europa.eu/resource/celex/32024R1183.
- Commission Implementing Regulation (EU) 2024/2981 of 28 November 2024 as regards the certification of European Digital Identity Wallets. Publications Office of the European Union (Cellar). December 4, 2024. http://publications.europa.eu/resource/celex/32024R2981.
- Regulation (EU) 2022/868 of 30 May 2022 on European data governance (Data Governance Act) (OJ L 152, 3.6.2022, p. 1). Publications Office of the European Union (Cellar). June 3, 2022. http://publications.europa.eu/resource/celex/32022R0868.
- Directive 2002/58/EC of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (OJ L 201, 31.7.2002, p. 37). Publications Office of the European Union (Cellar). July 31, 2002. http://publications.europa.eu/resource/celex/32002L0058.
- Publications Office of the European Union (Cellar). “Consolidated version of the Treaty on European Union, Article 4 (OJ C 202, 7.6.2016, p. 18).” June 7, 2016. http://publications.europa.eu/resource/celex/12016M004.
Regulators and EU institutions 90
- Autoriteit Persoonsgegevens (Dutch Data Protection Authority). “Uber fined nearly 825 million euros for automated driver blocking.” August 21, 2026. https://www.autoriteitpersoonsgegevens.nl/en/current/uber-fined-nearly-825-million-euros-for-automated-driver-blocking.
- Autoriteit Persoonsgegevens (Dutch Data Protection Authority). “Dutch DPA imposes a fine of 290 million euro on Uber because of transfers of drivers' data to the US.” August 26, 2024. https://www.autoriteitpersoonsgegevens.nl/en/current/dutch-dpa-imposes-a-fine-of-290-million-euro-on-uber-because-of-transfers-of-drivers-data-to-the-us.
- Commission nationale de l'informatique et des libertés (CNIL). “Cookies and advertisements inserted between emails: GOOGLE fined 325 million euros by the CNIL.” September 3, 2025. https://www.cnil.fr/en/cookies-and-advertisements-inserted-between-emails-google-fined-325-million-euros-cnil.
- Commission nationale de l'informatique et des libertés (CNIL). “Cookies placed without consent: SHEIN fined 150 million euros by the CNIL.” September 3, 2025. https://www.cnil.fr/en/cookies-placed-without-consent-shein-fined-150-million-euros-cnil.
- Council of the European Union. “ST 10104/2026 — transmission of COM(2026) 502 final, Cloud and AI Development Act.” June 4, 2026. https://data.consilium.europa.eu/doc/document/ST-10104-2026-INIT/en/pdf.
- Court of Justice of the European Union. Press release on Case C-413/23 P. September 4, 2025. https://curia.europa.eu/site/upload/docs/application/pdf/2025-09/cp250107en.pdf.
- Court of Justice of the European Union. Press Release No 123/20 — Case C-623/17 Privacy International and Joined Cases C-511/18, C-512/18 and C-520/18 La Quadrature du Net and Others. October 6, 2020. https://curia.europa.eu/jcms/upload/docs/application/pdf/2020-10/cp200123en.pdf.
- Court of Justice of the European Union. “Appeal brought on 20 November 2025 by the European Commission against the judgment of the General Court in Case T-55/24, Meta Platforms Ireland v Commission (Case C-744/25 P), OJ C/2026/164.” January 12, 2026. http://publications.europa.eu/resource/celex/62025CN0744.
- Court of Justice of the European Union. “Appeal brought on 20 November 2025 by the European Commission against the judgment of the General Court in Case T-58/24, Tiktok Technology v Commission (Case C-745/25 P), OJ C/2026/165.” January 12, 2026. http://publications.europa.eu/resource/celex/62025CN0745.
- Court of Justice of the European Union. “InfoCuria case register — state of eleven cases, read 27 September 2026.”. https://infocuria.curia.europa.eu/.
- Court of Justice of the European Union. “InfoCuria case register — Case C-1009/26, Tiktok Technology and TikTok Information Technologies UK, read 27 September 2026.”. https://infocuria.curia.europa.eu/.
- Data Protection Commission (Ireland). “Data Protection Commission — Annual Report 2025.” June 30, 2026. https://www.dataprotection.ie/sites/default/files/uploads/2026-06/DPC-Annual-Report-2025-Digital-AW.pdf.
- Data Protection Commission (Ireland). “Fines.”. https://www.dataprotection.ie/en/dpc-guidance/decisions/fines.
- Data Protection Commission (Ireland). “Data Protection Commission publishes Annual Report for 2025 and results of 'Sharenting' survey.” June 30, 2026. https://www.dataprotection.ie/en/data-protection-commission-publishes-2025-annual-report.
- Data Protection Commission (Ireland). “Data Protection Commission announces conclusion of inquiry into Meta Ireland.” May 22, 2023. https://www.dataprotection.ie/en/news-media/press-releases/Data-Protection-Commission-announces-conclusion-of-inquiry-into-Meta-Ireland.
- Data Protection Commission (Ireland). “Irish Data Protection Commission fines TikTok €530 million and orders corrective measures following Inquiry into transfers of EEA User Data to China.” May 2, 2025. https://www.dataprotection.ie/en/news-media/latest-news/irish-data-protection-commission-fines-tiktok-eu530-million-and-orders-corrective-measures-following.
- Data Protection Commission (Ireland). “Data Protection Commission — Annual Report 2023.” May 29, 2024. https://www.dataprotection.ie/sites/default/files/uploads/2024-05/DPC%20EN_AR%202023_Final%20.pdf.
- data.europa.eu (Publications Office of the European Union). “Digital Services Act takes effect for large online platforms.” August 25, 2023. https://data.europa.eu/en/news-events/news/digital-services-act-takes-effect-large-online-platforms.
- European Commission. “Digital Services Act: Commission designates first set of Very Large Online Platforms and Search Engines (IP/23/2413).” April 25, 2023. https://ec.europa.eu/commission/presscorner/detail/en/ip_23_2413.
- European Commission. “Frequently Asked Questions — Data Act, Version 1.4.” January 22, 2026. https://ec.europa.eu/newsroom/dae/redirection/document/108144.
- European Commission. “Commission decides to refer Bulgaria, France, Luxembourg, the Netherlands, Poland, Spain and Sweden to the Court of Justice for failing to transpose the Directive on critical entities resilience (IP/26/910).” April 29, 2026. https://ec.europa.eu/commission/presscorner/detail/en/ip_26_910.
- European Commission. “Commission fines X EUR 120 million under the Digital Services Act.” December 5, 2025. https://digital-strategy.ec.europa.eu/en/news/commission-fines-x-eu120-million-under-digital-services-act.
- European Commission. “Commission fines Temu EUR 200 million for breaching the Digital Services Act.” May 28, 2026. https://digital-strategy.ec.europa.eu/en/news/commission-fines-temu-eu200-million-breaching-digital-services-act.
- European Commission. “Commission accepts TikTok's commitments on advertising transparency under the Digital Services Act.” December 5, 2025. https://digital-strategy.ec.europa.eu/en/news/commission-accepts-tiktoks-commitments-advertising-transparency-under-digital-services-act.
- European Commission. “Commission accepts TikTok's commitments on advertising transparency under the Digital Services Act (IP/25/2940).” December 5, 2025. https://ec.europa.eu/commission/presscorner/detail/en/ip_25_2940.
- European Commission. “Commission preliminarily finds TikTok's addictive design in breach of the Digital Services Act.” February 6, 2026. https://digital-strategy.ec.europa.eu/en/news/commission-preliminarily-finds-tiktoks-addictive-design-breach-digital-services-act.
- European Commission. “Commission preliminarily finds addictive design on Instagram and Facebook in breach of the Digital Services Act.” July 10, 2026. https://digital-strategy.ec.europa.eu/en/news/commission-preliminarily-finds-addictive-design-instagram-and-facebook-breach-digital-services-act.
- European Commission. “Commission preliminarily finds TikTok in breach of the Digital Services Act for failing to ensure safe accounts for minors.” July 24, 2026. https://digital-strategy.ec.europa.eu/en/news/commission-preliminary-finds-tiktok-breach-digital-services-act-failing-ensure-safe-accounts-minors.
- European Commission. “Commission finds Apple and Meta in breach of the Digital Markets Act.” April 23, 2025. https://digital-markets-act.ec.europa.eu/commission-finds-apple-and-meta-breach-digital-markets-act-2025-04-23_en.
- European Commission. “Meta commits to give EU users choice on personalised ads under Digital Markets Act.” December 8, 2025. https://digital-markets-act.ec.europa.eu/meta-commits-give-eu-users-choice-personalised-ads-under-digital-markets-act-2025-12-08_en.
- European Commission. “Commission provides guidance under Digital Markets Act to facilitate development of innovative products on Apple's platforms (IP/25/816).” March 19, 2025. https://ec.europa.eu/commission/presscorner/detail/en/ip_25_816.
- European Commission. “Commission fines Google EUR 2.95 billion over abusive practices in online advertising technology.” September 5, 2025. https://competition-policy.ec.europa.eu/about/news/commission-fines-google-eu295-billion-over-abusive-practices-online-advertising-technology-2025-09-05_en.
- European Commission. “Commission opens antitrust investigation into Meta's new policy regarding AI providers' access to WhatsApp.” December 4, 2025. https://digital-strategy.ec.europa.eu/en/news/commission-opens-antitrust-investigation-metas-new-policy-regarding-ai-providers-access-whatsapp.
- European Commission. “Commission launches market investigations on cloud computing services under the Digital Markets Act (IP/25/2717).” November 18, 2025. https://ec.europa.eu/commission/presscorner/detail/en/ip_25_2717.
- European Commission. “European Media Freedom Act.”. https://commission.europa.eu/topics/democracy/eu-actions-protect-democracy/european-media-freedom-act_en.
- European Commission. “Transparency and targeting of political advertising.”. https://commission.europa.eu/strategy-and-policy/policies/justice-and-fundamental-rights/democracy-eu-citizenship-anti-corruption/democracy-and-electoral-rights/transparency-and-targeting-political-advertising_en.
- European Commission. “The future of work (platform work).”. https://employment-social-affairs.ec.europa.eu/policies-and-activities/rights-work/future-work_en.
- European Commission. “European Health Data Space Regulation (EHDS).”. https://health.ec.europa.eu/ehealth-digital-health-and-care/european-health-data-space-regulation-ehds_en.
- European Commission. “The European Digital Identity Regulation.”. https://digital-strategy.ec.europa.eu/en/policies/eudi-regulation.
- European Commission. “Cybersecurity Package — Questions & Answers.” January 20, 2026. https://digital-strategy.ec.europa.eu/en/faqs/cybersecurity-package-questions-answers.
- European Commission. “Digital Markets Act: Commission designates six gatekeepers (IP/23/4328).” September 6, 2023. https://ec.europa.eu/commission/presscorner/detail/en/ip_23_4328.
- European Commission. “Designated gatekeepers must now comply with all obligations under the Digital Markets Act.” March 7, 2024. https://digital-markets-act.ec.europa.eu/designated-gatekeepers-must-now-comply-all-obligations-under-digital-markets-act-2024-03-07_en.
- European Commission. “Commission refers Ireland, Spain, France and the Netherlands to the Court of Justice for failing to transpose NIS2.” July 8, 2026. https://digital-strategy.ec.europa.eu/en/news/commission-refers-ireland-spain-france-and-netherlands-court-justice-failing-transpose-rules.
- European Commission. “Commission calls on 23 Member States to fully transpose the NIS2 Directive.” November 28, 2024. https://digital-strategy.ec.europa.eu/en/news/commission-calls-23-member-states-fully-transpose-nis2-directive.
- European Commission. “General-Purpose AI Code of Practice.” July 10, 2025. https://digital-strategy.ec.europa.eu/en/policies/ai-code-practice.
- European Commission. “General-Purpose AI Code of Practice — Safety and Security chapter (PDF).” July 10, 2025. https://ec.europa.eu/newsroom/dae/redirection/document/118119.
- European Commission. “Commission publishes guidelines for providers of general-purpose AI models.” July 18, 2025. https://digital-strategy.ec.europa.eu/en/news/commission-publishes-guidelines-providers-general-purpose-ai-models.
- European Commission. “New measures unlock access to data of the largest online platforms to support research.” October 29, 2025. https://digital-strategy.ec.europa.eu/en/news/new-measures-unlock-access-data-largest-online-platforms-support-research.
- European Commission. “Commission adopts delegated act on data access under the Digital Services Act.” July 2, 2025. https://digital-strategy.ec.europa.eu/en/news/commission-adopts-delegated-act-data-access-under-digital-services-act.
- European Commission. “AI Omnibus enters into force.” July 27, 2026. https://digital-strategy.ec.europa.eu/en/news/ai-omnibus-enters-force.
- European Commission. “DMA Review Report, COM(2026) 178 final.” April 28, 2026. https://digital-markets-act.ec.europa.eu/system/files/2026-04/DMA%20Review%20Report_COM_2026_178_1_EN.pdf.
- European Commission. “DMA review — questions and answers.” 2026. https://digital-markets-act.ec.europa.eu/about-dma/dma-review-qa_en.
- European Commission. “Commission publishes summary and responses to the consultation on the ongoing review of the Digital Markets Act.” January 8, 2026. https://digital-markets-act.ec.europa.eu/commission-publishes-summary-and-responses-consultation-ongoing-review-digital-markets-act-2026-01-08_en.
- European Commission. “Strengthening Europe's tech sovereignty.” June 3, 2026. https://commission.europa.eu/news-and-media/news/strengthening-europes-tech-sovereignty-2026-06-03_en.
- European Commission. “The Future of European Competitiveness (Draghi report).” September 9, 2024. https://commission.europa.eu/topics/competitiveness/draghi-report_en.
- European Commission. “Commission opens non-compliance investigations against Alphabet, Apple and Meta under the Digital Markets Act (IP/24/1689).” March 25, 2024. https://ec.europa.eu/commission/presscorner/detail/en/ip_24_1689.
- European Commission. “Commission fines Google €890 million for breaches of the Digital Markets Act.” July 23, 2026. https://digital-markets-act.ec.europa.eu/commission-fines-google-eur890-million-breaches-digital-markets-act-2026-07-23_en.
- European Commission. “Press release IP/26/1670 — Commission fines Google €890 million for breaches of the Digital Markets Act.” July 23, 2026. https://ec.europa.eu/commission/presscorner/detail/en/ip_26_1670.
- European Commission. “Commission reaches preliminary position that Amazon's and Microsoft's market leading cloud services should be designated under the DMA.” June 25, 2026. https://digital-markets-act.ec.europa.eu/commission-reaches-preliminary-position-amazons-and-microsofts-market-leading-cloud-services-should-2026-06-25_en.
- European Commission. “AI Act — regulatory framework for artificial intelligence.”. https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai.
- European Commission. “Commission starts enforcing AI Act rules and new transparency requirements on 2 August.” August 2, 2026. https://ec.europa.eu/commission/presscorner/detail/en/ip_26_1714.
- European Commission. “The EU Digital Markets Act — Who's in charge (DMA portal home page).”. https://digital-markets-act.ec.europa.eu/index_en.
- European Commission. “Do you want to help enforce the Digital Services Act? Apply now to be part of the DSA enforcement team!.” January 15, 2024. https://digital-strategy.ec.europa.eu/en/news/do-you-want-help-enforce-digital-services-act-apply-now-be-part-dsa-enforcement-team.
- European Commission. “DMA designated gatekeepers.” April 23, 2025. https://digital-markets-act.ec.europa.eu/gatekeepers-portal_en.
- European Commission. “Commission fines AliExpress EUR 550 million for breaching the Digital Services Act.” July 20, 2026. https://digital-strategy.ec.europa.eu/en/news/commission-fines-aliexpress-eu550-million-breaching-digital-services-act.
- European Data Protection Board. “CEF 2026: EDPB launches coordinated enforcement action on transparency and information obligations under the GDPR.” March 19, 2026. https://www.edpb.europa.eu/news/news/2026/cef-2026-edpb-launches-coordinated-enforcement-action-transparency-and-information_en.
- European Data Protection Board. “EDPB Guidelines 3/2025 on the interplay between the DSA and the GDPR.” September 17, 2026. https://www.edpb.europa.eu/documents/guideline/guidelines-32025-on-the-interplay-between-the-dsa-and-the-gdpr_en.
- European Data Protection Board and European Data Protection Supervisor. “EDPB–EDPS Joint Opinion 1/2026 on the AI Omnibus proposal.” January 20, 2026. https://www.edpb.europa.eu/documents/legislative-opinion/edpb-edps-joint-opinion-12026-on-the-proposal-for-a-regulation-as_en.
- European Data Protection Board and European Data Protection Supervisor. “EDPB–EDPS Joint Opinion 2/2026 on the Digital Omnibus proposal.” February 2026. https://www.edpb.europa.eu/documents/legislative-opinion/edpb-edps-joint-opinion-22026-on-the-proposal-for-a-regulation-as_en.
- European Parliament. “Legislative Train — Digital Omnibus on AI.” 2026. https://www.europarl.europa.eu/legislative-train/package-digital-package/file-digital-omnibus-on-ai.
- European Parliament. “Legislative Train — Digital Package.” 2026. https://www.europarl.europa.eu/legislative-train/theme-a-new-plan-for-europe-s-sustainable-prosperity-and-competitiveness/file-digital-package.
- European Parliament. “European Parliament Legislative Train — AI Liability Directive.” October 6, 2025. https://www.europarl.europa.eu/legislative-train/theme-a-europe-fit-for-the-digital-age/file-ai-liability-directive.
- European Parliament — Legislative Observatory. “Procedure file 2025/0359(COD): Simplification of the implementation of harmonised rules on artificial intelligence – Digital Omnibus on AI.”. https://oeil.secure.europarl.europa.eu/oeil/en/procedure-file?reference=2025/0359(COD).
- Garante per la protezione dei dati personali. “ChatGPT, il Garante privacy chiude l’istruttoria. OpenAI dovrà realizzare una campagna informativa di sei mesi e pagare una sanzione di 15 milioni di euro.” December 20, 2024. https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/10085432.
- General Court of the European Union. Press Release No 96/26 — Joined Cases T-1079/23, T-1080/23 and T-214/24, Apple v Commission. July 8, 2026. https://curia.europa.eu/site/upload/docs/application/pdf/2026-07/cp260096en.pdf.
- General Court of the European Union. Press Release No 114/25 — Cases T-55/24 Meta Platforms Ireland and T-58/24 TikTok Technology. September 10, 2025. https://curia.europa.eu/site/upload/docs/application/pdf/2025-09/cp250114en.pdf.
- General Court of the European Union. “Action brought on 7 July 2025 – Apple v Commission (Case T-438/25), OJ C/2025/5215.” October 6, 2025. http://publications.europa.eu/resource/celex/62025TN0438.
- General Court of the European Union. “Action brought on 4 July 2025 – Meta Platforms v Commission (Case T-435/25), OJ C/2025/5214.” October 6, 2025. http://publications.europa.eu/resource/celex/62025TN0435.
- General Court of the European Union. “Action brought on 16 February 2026 – X Internet and X Holdings v Commission (Case T-114/26), OJ C/2026/2390.” May 4, 2026. http://publications.europa.eu/resource/celex/62026TN0114.
- General Court of the European Union. “Action brought on 16 February 2026 – X.AI Holdings v Commission (Case T-120/26), OJ C/2026/2391.” May 4, 2026. http://publications.europa.eu/resource/celex/62026TN0120.
- General Court of the European Union. “Action brought on 16 February 2026 – Musk v Commission (Case T-121/26), OJ C/2026/2392.” May 4, 2026. http://publications.europa.eu/resource/celex/62026TN0121.
- General Court of the European Union. “Action brought on 13 June 2023 – Meta Platforms Ireland v EDPB (Case T-325/23), OJ 2023/C 271/47.” July 31, 2023. http://publications.europa.eu/resource/celex/62023TN0325.
- Government of Ireland — Department of Enterprise, Tourism and Employment. “General Scheme of the Data Bill 2025.” February 4, 2026. https://www.gov.ie/en/department-of-enterprise-tourism-and-employment/publications/general-scheme-of-the-data-bill-2025/.
- Houses of the Oireachtas. “Oireachtas legislation register — bills of 2025 and 2026 (open data API).”. https://api.oireachtas.ie/v1/legislation?bill_year=2026&limit=500.
- Justice Luxembourg (justice.public.lu). Arrêt de la Cour administrative en relation avec un des grands acteurs mondiaux au niveau du commerce en ligne. March 13, 2026. https://justice.public.lu/fr/actualites/2026/03/arret-cour-administrative-amazon.html.
- Publications Office of the European Union. “National implementing measures notified for Directive (EU) 2022/2555 (NIS2) and Directive (EU) 2022/2557 (CER) — Cellar, 27 September 2026.”. https://publications.europa.eu/webapi/rdf/sparql.
- Publications Office of the European Union. “Regulation (EU) 2026/1744 (Digital Omnibus on AI) — publication record.” July 24, 2026. https://op.europa.eu/en/publication-detail/-/publication/b459c07f-86fb-11f1-bf5e-01aa75ed71a1/language-en.
- United States Department of Justice, Office of Public Affairs. “United States Files Request to Intervene in Case Brought by X Corp. and Elon Musk Seeking to Annul Decision by European Commission.” September 24, 2026. https://www.justice.gov/opa/pr/united-states-files-request-intervene-case-brought-x-corp-and-elon-musk-seeking-annul.
- US House Judiciary Committee (release of the European Commission's decision). “Commission Decision C(2025) 8630 final of 5.12.2025, Cases DSA.100101, DSA.100102 and DSA.100103 — X (formerly Twitter).” January 2026. https://judiciary.house.gov/sites/evo-subsites/republicans-judiciary.house.gov/files/2026-01/ACT_part1.pdf.
- The White House. “Fact Sheet: President Donald J. Trump Issues Directive to Prevent the Unfair Exploitation of American Innovation.” February 21, 2025. https://www.whitehouse.gov/fact-sheets/2025/02/fact-sheet-president-donald-j-trump-issues-directive-to-prevent-the-unfair-exploitation-of-american-innovation/.
Research 7
- AlgorithmWatch. “Researching Systemic Risks under the Digital Services Act (interim report).” July 26, 2024. https://algorithmwatch.org/en/researching-systemic-risks-under-the-digital-services-act/.
- Center for Security and Emerging Technology, Georgetown University. “AI Safety under the EU AI Code of Practice — A New Global Standard?.” July 1, 2025. https://cset.georgetown.edu/article/eu-ai-code-safety/.
- Department of Enterprise, Tourism and Employment (Ireland); report prepared by KPMG. “The value of data centres to Ireland — an independent report prepared by KPMG for the Department of Enterprise, Tourism and Employment (March 2026).” June 2, 2026. https://enterprise.gov.ie/en/publications/publication-files/the-value-of-data-centres-to-ireland.pdf.
- eucrim (Max Planck Institute for the Study of Crime, Security and Law). “New Regulation Speeds Up Handling of Cross-Border GDPR Complaints.” January 16, 2026. https://eucrim.eu/news/new-regulation-speeds-up-handling-of-cross-border-gdpr-complaints/.
- European Law Blog. “Establish, Then Escape? How the Court of Rome, the One-Stop-Shop and a Single Word Opened an AI Enforcement Gap.” June 4, 2026. https://europeanlawblog.eu/establish-then-escape-how-the-court-of-rome-the-one-stop-shop-and-a-single-word-opened-an-ai-enforcement-gap/.
- Nadezhda Purtova. “The law of everything. Broad concept of personal data and future of EU data protection law.” April 2, 2018. https://www.tandfonline.com/doi/full/10.1080/17579961.2018.1452176.
- Papakonstantinou and De Hert. “The Regulation of Digital Technologies in the EU: the law-making phenomena of “act-ification”, “GDPR mimesis” and “EU law brutality”.” May 21, 2022. https://techreg.org/article/view/11459.
Industry, advocacy and press 55
- 300polityka. “Prezydent podpisał 5 ustaw, w tym pierwszą wdrażającą DSA.” September 25, 2026. https://300polityka.pl/pl/live/2026-09-25/prezydent-podpisal-5-ustaw-w-tym-pierwsza-wdrazajaca-dsa.
- artificialintelligenceact.eu (unofficial AI Act Explorer). “EU AI Act Explorer — Article 2 (Scope) and Article 4 (AI literacy), as amended.”. https://artificialintelligenceact.eu/article/2/.
- artificialintelligenceact.eu (unofficial AI Act Explorer). “EU AI Act Explorer — Articles 101, 111 and 113, as amended.”. https://artificialintelligenceact.eu/article/113/.
- Bird & Bird. “Digital Omnibus on AI: Trilogue Stalls Ahead of the AI Act Deadline.” May 5, 2026. https://www.twobirds.com/en/insights/2026/digital-omnibus-on-ai-trilogue-stalls-ahead-of-the-ai-act-deadline.
- Center for Democracy and Technology. “Analysis of the AI Act law-enforcement and national-security boundary.”. No public URL located.
- CISPE (Cloud Infrastructure Services Providers in Europe). “Joint letter of European cloud CEOs to EVP Virkkunen on the Cloud and AI Development Act, 17 March 2026.” March 17, 2026. https://www.cispe.cloud/website_cispe/wp-content/uploads/2026/03/Cloud-CEOs-Joint-Letter-March-17-2026-FINAL.pdf.
- CMS. “GDPR Enforcement Tracker — case database.”. https://www.enforcementtracker.com/.
- CMS. “GDPR Enforcement Tracker Report — Luxembourg.” May 21, 2026. https://cms.law/en/int/publication/gdpr-enforcement-tracker-report/luxembourg.
- CMS. “GDPR Enforcement Tracker Report 2025/2026 (7th edition).” March 1, 2026. https://cms.law/en/int/publication/GDPR-Enforcement-Tracker-Report/executive-summary.
- CMS. “GDPR Enforcement Tracker — Insights (data refreshed 27 September 2026).” September 27, 2026. https://www.enforcementtracker.com/insights.
- CSO Online. “GDPR set the tone for regulatory action — and the AI fine pushback to come.” May 29, 2026. https://www.csoonline.com/article/4178001/gdpr-set-the-tone-for-regulatory-action-and-the-ai-fine-pushback-to-come.html.
- DLA Piper. “Understanding switching rights under the Data Act.” July 31, 2025. https://www.dlapiper.com/insights/publications/2025/07/understanding-switching-termination-rights-under-the-data-act.
- DLA Piper. “GDPR Fines and Data Breach Survey: January 2026 (eighth edition).” January 21, 2026. https://www.dlapiper.com/en/insights/publications/2026/01/dla-piper-gdpr-fines-and-data-breach-survey-january-2026.
- EU Perspectives. “Social platform X challenges €120m EU fine in first major court test of DSA enforcement.” February 20, 2026. https://euperspectives.eu/2026/02/social-platform-x-challenges-e120m-eu-fine-in-first-major-court-test-of-dsa-enforcement/.
- eu-data-act.com (unofficial reproduction of the Data Act text). “EU Data Act — article index, Article 1 (Subject matter and scope) and Article 50 (Entry into force and application).”. https://www.eu-data-act.com/Data_Act_Articles.html.
- eu-digital-markets-act.com (unofficial reproduction of the DMA text). “The final text of the Digital Markets Act (DMA) — Article 2, Definitions.”. https://www.eu-digital-markets-act.com/Digital_Markets_Act_Article_2.html.
- eu-digital-markets-act.com (unofficial reproduction of the DMA text). “The final text of the Digital Markets Act (DMA) — Articles 11, 13, 14, 15, 38 and 39.”. https://www.eu-digital-markets-act.com/Digital_Markets_Act_Article_38.html.
- eu-digital-markets-act.com (unofficial reproduction of the DMA text). “The final text of the Digital Markets Act (DMA) — Article 54, Entry into force and application.”. https://www.eu-digital-markets-act.com/Digital_Markets_Act_Article_54.html.
- eu-digital-services-act.com (unofficial reproduction of the DSA text). “The Digital Services Act — Article 14 (Terms and conditions) and Article 19 (Exclusion for micro and small enterprises).”. https://www.eu-digital-services-act.com/Digital_Services_Act_Article_19.html.
- eucrim. “EU fines X 120 million in first DSA non-compliance decision.” December 2025. https://eucrim.eu/news/eu-fines-x-120-million-in-first-dsa-non-compliance-decision/.
- EUobserver. “Budapest free to celebrate Pride again, but Orbán-surveillance machine still in place.” June 25, 2026. https://euobserver.com/224022/budapest-free-to-celebrate-pride-again-but-orban-surveillance-machine-still-in-place/.
- Euronews. “Péter Magyar sworn in as Hungary's new prime minister after landslide April election victory.” May 9, 2026. https://www.euronews.com/my-europe/2026/05/09/peter-magyar-sworn-in-as-hungarys-new-prime-minister-after-landslide-april-election-victor.
- European Center for Not-for-Profit Law. “Civil society urges the European Commission to uphold the AI Act in Hungary.” 2025. https://ecnl.org/news/civil-society-urges-european-commission-uphold-ai-act-hungary.
- European Digital Rights (EDRi). “President's veto further delays the implementation of the DSA in Poland.” January 21, 2026. https://edri.org/our-work/presidents-veto-further-delays-the-implementation-of-the-dsa-in-poland/.
- European Digital Rights (EDRi). “Hungary's new biometric surveillance laws violate the AI Act.” May 6, 2025. https://edri.org/our-work/hungarys-new-biometric-surveillance-laws-violate-the-ai-act/.
- The European Legal Framework for the Digital World (this brief). “Original source document underlying this site.” August 19, 2026. No public URL located.
- european-cyber-resilience-act.com (unofficial reproduction of the CRA text). “Cyber Resilience Act, Article 71 — Entry into force and application.”. https://www.european-cyber-resilience-act.com/Cyber_Resilience_Act_Article_71.html.
- Hunton Andrews Kurth LLP. “EU Digital Omnibus on AI Enters Into Force.” July 28, 2026. https://www.hunton.com/privacy-and-cybersecurity-law-blog/eu-digital-omnibus-on-ai-enters-into-force.
- IAPP. “New Irish Data Protection Commissioner Niamh Sweeney addresses scrutiny over her appointment, shares agency priorities.” April 1, 2026. https://iapp.org/news/a/new-irish-data-protection-commissioner-niamh-sweeney-addresses-scrutiny-over-her-appointment-shares-agency-priorities.
- IAPP. “Notes from the AI Governance Center: AI Act Omnibus: What just happened and what comes next?.” April 29, 2026. https://iapp.org/news/a/ai-act-omnibus-what-just-happened-and-what-comes-next.
- Information Technology and Innovation Foundation. “Comments to the European Commission for Its First Review of the Digital Markets Act.” September 24, 2025. https://itif.org/publications/2025/09/24/comments-to-the-european-commission-for-its-first-review-of-the-digital-markets-act/.
- Insight EU Monitoring. “EU Commission orders Meta to restore free WhatsApp access for rival AI assistants.” June 9, 2026. https://ieu-monitoring.com/editorial/eu-commission-orders-meta-to-restore-free-whatsapp-access-for-rival-ai-assistants/1243042.
- Interia Biznes. “Nawrocki podpisał ustawę. Polska będzie mogła karać platformy internetowe.” September 2026. https://biznes.interia.pl/gospodarka/news-nawrocki-podpisal-ustawe-polska-bedzie-mogla-karac-platformy,nId,23549252.
- International Center for Law & Economics. “EU Digital Omnibus Hands the Wheel to the Referee.” June 11, 2026. https://laweconcenter.org/resources/eu-digital-omnibus-hands-the-wheel-to-the-referee/.
- International Center for Law & Economics. “ICLE Comments to the European Commission on GDPR and ePrivacy in the Digital Omnibus.” March 13, 2026. https://laweconcenter.org/resources/icle-comments-to-the-european-commission-on-gdpr-and-eprivacy-in-the-digital-omnibus/.
- Irish Council for Civil Liberties. “Europe's enforcement paralysis: ICCL's 2021 GDPR report.” September 13, 2021. https://www.iccl.ie/digital-data/2021-gdpr-report/.
- Legiscope. “NIS2 Enforcement Tracker 2026: Fines, Audits, Status.” July 10, 2026. https://www.legiscope.com/blog/nis2-enforcement-tracker-2026.html.
- Linari Law Firm. “Luxembourg court of appeal cancels EUR 746 million CNPD fine against Amazon.” March 2026. https://www.linari-law.lu/luxembourg-court-of-appeal-cancels-eur-746-million-cnpd-fine-against-amazon/.
- Matheson. “The Data Act Part III: The Irish Enforcement Framework.” May 18, 2026. https://www.matheson.com/insights/the-data-act-part-iii-the-irish-enforcement-framework/.
- MLex. “Meta, TikTok facing EU Commission appeal against supervisory fee court ruling.” November 24, 2025. https://www.mlex.com/mlex/data-privacy-security/articles/2414639/meta-tiktok-facing-eu-commission-appeal-against-supervisory-fee-court-ruling.
- MLex. “Meta and TikTok supervisory fee wins appealed by EU Commission.” January 12, 2026. https://www.mlex.com/mlex/articles/2428819/meta-and-tiktok-supervisory-fee-wins-appealed-by-eu-commission.
- MLex. “Amazon sees Luxembourg appeals court annul EUR 746 million GDPR fine.” March 2026. https://www.mlex.com/mlex/articles/2452693/amazon-sees-luxembourg-appeals-court-annul-746-million-gdpr-fine.
- NicFab. “Digital Omnibus AI: Official Journal (closing article of a ten-part series).” July 28, 2026. https://nicfab.eu/en/posts/digital-omnibus-ai-official-journal/.
- nis-2-directive.com (unofficial reproduction of the NIS2 text). “The NIS 2 Directive — Article 20 (Governance) and Article 32 (Supervisory and enforcement measures in relation to essential entities).”. https://www.nis-2-directive.com/NIS_2_Directive_Article_20.html.
- noyb. “Digital Omnibus Report V3: Analysis of Select GDPR and ePrivacy Proposals by the Commission.” February 24, 2026. https://noyb.eu/en/digital-omnibus-report-v3-analysis-select-gdpr-and-eprivacy-proposals-commission.
- Paperjam. “€746m fine: CNPD decision against Amazon overturned.” March 13, 2026. https://en.paperjam.lu/article/eu746m-fine-cnpd-decision-against-amazon-overturned.
- PPC Land. “EU Council draft drops unconditional opt-out from GDPR AI clause.” September 26, 2026. https://ppc.land/eu-council-draft-drops-unconditional-opt-out-from-gdpr-ai-clause/.
- Privacy Next. “Digital Omnibus negotiations — GDPR July 2026 update.” July 8, 2026. https://www.privacynext.eu/resources/digital-omnibus-negotiations-gdpr-july-2026-update/.
- RTÉ. “Data Protection Commission owed over EUR 4 billion in fines.” January 12, 2026. https://www.rte.ie/news/business/2026/0112/1552670-data-protection-commission-fines/.
- Tech Policy Press. “EU tests limits of platform risk assessments with 200 million Temu fine.” May 2026. https://www.techpolicy.press/eu-tests-limits-of-platform-risk-assessments-with-200-million-temu-fine/.
- Tech Policy Press. “When National Security Becomes a Shield for Evading AI Accountability.” February 16, 2026. https://www.techpolicy.press/when-national-security-becomes-a-shield-for-evading-ai-accountability/.
- TheNextWeb. “US lawmakers press Trump to open trade probe into EU tech rules.” July 21, 2026. https://thenextweb.com/news/us-lawmakers-eu-tech-rules-trade-probe.
- TheStory.ie. “Billions in data protection fines imposed, just EUR 20 million collected.” January 13, 2026. https://www.thestory.ie/2026/01/13/billions-in-data-protection-fines-imposed-just-e20-million-collected-dpc-says-vast-majority-of-penalties-remain-stuck-in-legal-limbo/.
- US House Judiciary Committee. “The Foreign Censorship Threat: How the European Union's Digital Services Act Compels Global Censorship and Infringes on American Free Speech (Interim Staff Report).” July 25, 2025. https://judiciary.house.gov/sites/evo-subsites/republicans-judiciary.house.gov/files/2025-07/DSA_Report%26Appendix%2807.25.25%29.pdf.