%20(A2%20(Landscape))%20(11).png)
EU Level
GDPR
The EDPB adopted a voluntary DPIA template, with an explainer document, to make GDPR risk assessments more structured and more consistent across Member States; the template is open for public consultation until 9 June 2026.
The EDPB adopted Guidelines 1/2026 on processing personal data for scientific research, set up a sprint team to finish anonymisation guidance by summer, and approved updated Europrivacy criteria, including the first European Data Protection Seal that can be used as a transfer tool under Articles 42 and 46 GDPR.
DSA
The Commission published the first monitoring results under the revised Code of Conduct on Countering Illegal Hate Speech Online+, a DSA-linked instrument, reporting that participating platforms maintained review of most monitored notices within 24 hours and generally provided systematic feedback.
The European Board for Digital Services said, after its 18th meeting, that protection of minors remains a top priority, that Member States and the Commission compared DSA enforcement actions under Article 28(1), and that the Board discussed rollout of the EU age-verification app and ways to streamline Board working methods to speed enforcement.
DMA
The Commission sent preliminary findings to Google proposing specific measures under the DMA to make search data available to third-party search engines on fair, reasonable and non-discriminatory terms, and said a public consultation on those measures would open on 17 April 2026.
Sweden Level
GDPR
IMY published a Swedish summary of the new EDPB research guidance, highlighting practical points for researchers and controllers, including scientific-research scope, further processing, storage, consent models, transparency duties, and data-subject rights; it also noted that the public consultation runs until 25 June 2026.
AI Act
IMY said the government’s spring amending budget proposes an extra SEK 1 million for 2026 so the authority can prepare for new AI Act duties, including market-surveillance tasks relating to some law-enforcement AI systems when the Act becomes fully applicable in Sweden.
Data Act
Swedish official item surfaced in review was the government’s 16 February 2026 remiss on complementary rules to the EU Data Act, which falls outside the requested dates.
