This week's edition of EU Law weekly highlights includes analysis on the new EDPB guidelines on the scope of the ‘cookie rule’ under the ePrivacy Directive, Court of Justice rulings on the EU GDPR not obliging supervisory authorities to exercise corrective powers in every instance of a breach, the scope of copyright protection for computer programs, and identifying COMI under the EU Recast Regulation on Insolvency, Meta Platforms, Microsoft, Google and X suspending the training of generative AI models due to lack of clarity on AI model training under the EU GDPR, an upcoming ‘omnibus’ regulation to simplify EU due-diligence reporting duties, and EU’s finance targets for COP29. In addition, this week, the European Commission launched the Ecodesign Forum, opened a consultation on guidance on AI system definition and prohibitions under the EU AI Act and initiated the rulemaking process for digital product passport service providers, the Medical Device Coordination Group updated its vigilance guidance for medical devices, and the European Insurance and Occupational Pensions Authority launched a consultation on mass-lapse reinsurance and termination clauses to enhance risk mitigation guidance.