26.10.2026EU AI Act Regulatory Brief — Week of 26 October 2026EU governments agreed their negotiating position on simplifying the GDPR on 21 October, including a proposed legal basis for using personal data to build AI; it is not yet law. In Italy, since 23 October, a final employment decision taken by an AI system without a person with real authority is void.Week 447 min read19.10.2026EU AI Act Regulatory Brief — Week of 19 October 2026Three developments this week: the first harmonised standard under the AI Act, covering quality management for high-risk AI, was cited in the Official Journal; the Commission said its AI Office has started enforcing the rules for general-purpose AI models; and the EDPB published preliminary GDPR guidance on AI-equipped smart glasses.Week 4311 min read12.10.2026EU AI Act Regulatory Brief — Week of 12 October 2026The EDPB has published the Dutch data protection authority's EUR 824.99 million GDPR fine against Uber for automated decision-making, the second-highest GDPR fine to date. Two key AI governance standards are nearing publication. The deadline for responding to the EU's AI web-scraping rules consultation is 30 October 2026.Week 429 min read05.10.2026EU AI Act Regulatory Brief — Week of 5 October 2026The Dutch data protection authority's €825 million fine on Uber, now under appeal, shows what Article 22 GDPR demands when automated systems cut people off. A leaked Council text would add an AI legitimate-interest clause to the GDPR without four Commission safeguards; it is not law. The AI Board met on 17 September and set no new deadlines.Week 417 min read28.09.2026EU AI Act Regulatory Brief — Week of 28 September 2026EN 18286:2026, the first European standard written for the AI Act, is published but not yet cited in the Official Journal. The EDPB's draft fining guidelines decide who can be fined, not only how much. Council talks on the GDPR part of the Digital Omnibus continue, with an AI legitimate-interest clause back in the text. No ISO/IEC 42001 change.Week 406 min read21.09.2026EU AI Act Regulatory Brief — Week of 21 September 2026The EDPB adopted draft fining-methodology guidelines and finalised DSA-GDPR interplay guidance at its 21 September plenary. No new EU AI Act enforcement instruments or ISO 42001 revisions were confirmed during the 15-21 September window.Week 394 min read14.09.2026EU AI Act Regulatory Brief — Week of 14 September 2026No new EU AI Act guidance or GDPR enforcement decisions were published this week. The material story is the AI Office's ongoing formal information request campaign against 30-plus GPAI model providers — the Act's first enforcement instruments. Germany and Austria completed ISO 42001 national transpositions in August; the underlying standard is unchanged.Week 386 min read07.09.2026EU AI Act Regulatory Brief — Week of 7 September 2026Three EU developments need attention before autumn deadlines. The Commission's guidelines on the AI Act's transparency obligations explain how they reach AI agents and narrow a business-to-business carve-out. The first European standard written for the AI Act was published but does not yet confer presumption of conformity. Ireland's data regulator fined the Health Service Executive €645,000.Week 379 min read24.08.2026EU AI Act Regulatory Brief — Week of 25–31 August 2026The EU AI Office sent its first formal requests for information to general-purpose AI model providers. The Digital Omnibus put the words "agentic AI" into binding EU law, in a notified-body code rather than a new obligation. Germany published ISO/IEC 42001 under European numbering, and France's data regulator answered common questions on credit refusal.Week 358 min read
Subscribe
The EU AI governance brief
One email a week, with every item sourced and dated. Each issue has a one-click unsubscribe.
Relay Labs Ltd is the controller. Your address is used to send you this brief and nothing else. Privacy notice.
Also available by RSS. Compiled by Relay Labs Ltd. Verified sources only. Not legal advice.
Questions
Frequently asked questions
What is the EU AI governance brief?
One email a week on the EU AI Act, ISO/IEC 42001 and the GDPR, sourced, dated and written for the people who have to act on it. It is also available by RSS, and it is general information, not legal advice.
How do I subscribe to the EU AI governance brief?
Enter a work email in the subscribe form and click the confirmation link that arrives; nothing is sent until you confirm. The brief is one email a week, each with a one-click unsubscribe.
Where can I read past issues?
Past issues are listed on this page, newest first, each with the week it covers, its title, a summary, a reading time and the publishers it cites. The archive can be searched by title, summary or publisher, and every issue has its own page.