Latest Legal News

On 27 July 2026, the European Commission published practical, non-binding guidance to support timely implementation of the EU Cyber Resilience Act (CRA), which has been in force since December 2024. The guidance is intended to help manufacturers, developers and businesses meet CRA cybersecurity obligations across the full lifecycle of products with digital elements. The Commission highlights that the CRA’s main obligations apply from 11 December 2027, while certain reporting obligations apply from 11 September 2026. The guidance is positioned as part of the Commission’s broader simplification agenda and is aimed in particular at helping microenterprises and SMEs navigate compliance in a proportionate way.

On 18 July 2026, the Belgian Council of Ministers approved a preliminary draft law partially transposing the revised EU Product Liability Directive into Belgian law. The reform modernises the strict-liability regime for defective products and extends it to new technologies, including software, artificial intelligence and connected products. It also aims to make it easier for injured persons to prove claims involving technically complex products. The preliminary draft must still be reviewed by the Belgian Council of State and pass through the legislative process.

Regulation (EU) 2026/1744, the Digital Omnibus on AI, entered into force on 27 July 2026. It introduces targeted amendments to the EU AI Act intended to simplify implementation, extend certain timelines and support innovation, while preserving safeguards for safety and fundamental rights. The reform does not postpone the AI Act as a whole. Businesses should recalibrate their implementation programmes rather than suspend them.

On 20 July 2026, the European Commission published its final guidelines on the transparency obligations under Article 50 of the EU AI Act. The obligations apply from 2 August 2026 and are intended to help individuals recognise when they are interacting with AI or are exposed to AI-generated or manipulated content. The guidelines clarify which providers and deployers are covered, the relevant exceptions and how compliance can be demonstrated in practice.