This week's edition of EU Law weekly highlights includes analyses on the impact of the Revised EU Product Liability Directive on the automated vehicles sector, what legal teams need to know about Deepseek AI, the challenges to designate AI models ‘with systemic risk’ under the EU AI Act and the integration of revised Code of Conduct on countering illegal hate speech online into the framework of the Digital Services Act. In addition this week, the Commission published the first of its planned omnibus simplification packages, unveiled the Clean Industrial Deal and Affordable Energy Action Plan, launched calls for evidence evaluating the EU legislation on plant variety rights and the Cosmetic Products Regulation, and the European Scientific Advisory Board on Climate Change published a report recommending actions to scale up carbon dioxide removals in the EU.

The European Commission’s Directorate-General for Environment has launched a call for evidence on a proposed Communication entitled Water sector–accelerating digitalisation for better management and sustainability, which forms part of the European Water Resilience Strategy and is planned for adoption in the fourth quarter of 2026. The Commission stated that water management systems across the EU remain fragmented and insufficiently digitalised, resulting in inefficiencies, higher administrative burdens and weaker responses to droughts, floods, water scarcity and pollution. To address these issues, the initiative proposes accelerating digitalisation through AI-driven data analytics, wider deployment of Internet-of-Things technologies such as smart meters and sensors, increased use of Earth observation systems, and the development of a coherent digital governance framework to improve interoperability, transparency, cybersecurity and data sharing. The Commission argued that EU-level action is necessary because many water challenges are cross-border in nature and because fragmented systems hinder economies of scale and the functioning of the internal market. The initiative is expected to improve operational efficiency, reduce water consumption, strengthen monitoring and forecasting capabilities, lower reporting burdens and support the EU’s competitiveness in the global water technology market, while also contributing to clean water and sustainability objectives. As the proposal is a non-binding Communication, no impact assessment is planned, and the Commission will continue consulting stakeholders throughout 2026 before finalising the action plan. The call for evidence will run until 24 June 2026.

The European Commission has launched a consultation on initiative 15594 concerning European Health Data Space (EHDS) requirements for cross-border exchange of personal health data under the MyHealth@EU programme. The draft implementing regulation establishes detailed rules governing the infrastructure, including technical, semantic and organisational interoperability, cybersecurity, and service management, building on the existing eHealth Digital Service Infrastructure to enable secure and efficient data exchange across Member States. It assigns the Commission responsibility for operating a central interoperability platform, comprising reference software, a terminology service, a secure communication network and a configuration service, while working with a Member State steering group that approves technical specifications, system changes and operational plans. The framework introduces a requirements catalogue and technical specifications, alongside structured procedures for updates, compliance checks and authorisation, requiring national contact points for digital health to meet defined standards before initiating and while continuing cross-border data exchange. It also clarifies data protection roles by designating national contact points as joint controllers and the Commission as processor, setting out obligations relating to security, confidentiality and data subject rights, and provides transitional measures and a phased implementation timeline beginning in March 2027 in line with the broader EHDS framework. The consultation closes on 7 May 2026.

This week's edition of Risk & Compliance weekly highlights includes publication of OFSI’s annual frozen assets review, new UK–US sanctions targeting cybercriminal networks, an analysis of draft AML reforms reshaping the UK’s anti-money laundering framework, and the UK government’s call on major firms to bolster cyber resilience.

This week's edition of Risk & Compliance weekly highlights includes: the latest financial sanctions, the opening of a consultation on new legislative proposals to tackle cybercrime and response to House of Lords Committee Report on Modern Slavery Act 2015 by the Home Office, and an analysis on how forced labour imports raise criminal risks for UK retailers.

STOP PRESS: Regulation (EU) 2026/1744 amending Regulation (EU) 2024/1689, Regulation (EU) 2018/1139 and Regulation (EU) 2023/1230 as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI) was published in the Official Journal on 24 July 2026 and entered into force on 27 July 2026. This Practice Note will be updated shortly to reflect amendments to Regulation (EU) 2024/1689, the EU Artificial Intelligence Act. For further information on the changes introduced by the Digital Omnibus on AI, see Practice Note: EU Digital Omnibus—tracker and News Analysis: Digital Omnibus proposal—re-writing the EU's digital rulebook. This Practice Note provides an overview of the objectives and scope of Regulation (EU) 2023/1230 on machinery also known as the EU Machinery Regulation (EU MR). The EU MR requires manufacturers and other market participants involved in the production of machinery and related products to adhere to various health and safety requirements. This document describes the key obligations of manufacturers, importers and distributors (as well as other individuals who may

This Practice Note provides practical guidance on the core UK legal, regulatory and compliance issues for business-to-business (B2B) digital commerce delivered through websites, platforms, mobile apps, portals, APIs/EDIs and related digital channels. It is drafted to support businesses selling goods and/or services to other businesses online, whether through standard form contracting, bespoke framework agreements or models such as Software-as-a-Service (SaaS). This Practice Note considers the regulation of information society services under the Electronic Commerce (EC Directive) Regulations 2002 (E-commerce Regulations 2002), SI 2002/2013, and the regulation of online platforms more widely. It provides a summary of key legal issues such as brand protection, website compliance, advertising and marketing, competition law, and signposts further detailed commentary throughout. For an introduction to digital commerce, including the types of platforms and technologies used, see Practice Note: Digital commerce—introduction. This Practice Note does not consider the formation and enforcement of online B2B contracts. For more information, see Practice Notes: Business-to-business digital commerce—forming contracts online and Digital commerce—website terms, policies and notices. Assimilated law Throughout this Practice Note, references

This week's edition of Risk & Compliance weekly highlights includes: the FCA’s £21m fine against Monzo for financial crime control failings, OFSI’s updated sanctions FAQs, FATF’s report on terrorist financing enforcement gaps, EU changes to the AML high-risk jurisdictions list, and the ICO’s consultation on cookies and tracking technologies.

This week's edition of Practice Compliance weekly highlights includes OFSI’s penalty on Colorcon for Russia sanctions breaches, OFSI’s new and updated General Licences and an update to the OFSI UK Financial Sanctions FAQs. We also cover EU pressure on member states to implement new AML rules, the NCA and Law Society campaign against payment diversion fraud and a High Court ruling restricting unqualified employees from conducting litigation.

This week's edition of Energy weekly highlights includes: the Department for Energy Security and Net Zero (DESNZ)'s extension of the Green Gas Support Scheme (GGSS) application deadline to 31 March 2028 and the International Energy Charter's acknowledgment of the UK's written notification of withdrawal from the Energy Charter Treaty.

Consideration of electronic data interchange (EDI) arrangements, blockchain, smart contracts or sector-specific laws or regulations, including those applicable to financial services, intermediation services or online auctions, is beyond the scope of this Practice Note. For an introduction to EDI and smart contracts, see Practice Notes: Digital commerce—introduction and Smart legal contracts. For guidance on blockchain, see: Blockchain—overview and Practice Note: Blockchain—key legal and regulatory issues. The type and functionality of the website The compliance requirements and applicable rules and regulations for a website will depend on the nature of the website and its functionality or purpose. As a first step, the website operator should identify the nature of the website to be offered and the proposed scope of its functionality. For example: • will the website be an ‘information only’ site? • will it be a platform for third parties to upload information or content or carry out transactions? • will it provide a service? • will it conduct transactions? • will it be targeted at consumers or businesses (or businesses providing services to consumers)? • will any aspect

This week's edition of Practice Compliance weekly highlights includes the latest Practice Compliance monthly forecast, together with updates on OFSI’s revised approach to sanctions licensing and DBT’s guidance on Russian trade sanctions evasion. We also cover significant fraud developments, including the UK’s new fraud strategy and INTERPOL’s latest global threat assessment, as well as a High Court ruling in an FCA fraud investigation. In addition, we report on EU data protection developments relating to the proposed Biotech Act, alongside CMA guidance on agentic AI and a European Commission consultation on enforcement procedures under the EU AI Act.