ZeroGravity Weekly Brief | March 16, 2026

Health data safeguards move up the EU agenda as biotech rules advance. AI Act implementation continues with updates on AI-generated content labelling and standards. Under the DSA, platform oversight sharpens, while Sweden’s IMY pushes practical GDPR guidance through sandbox projects.

EU Level

GDPR

EDPB & EDPS backed harmonising clinical-trial rules under the proposed European Biotech Act, but urged stronger safeguards for sensitive health/genetic data (e.g., clearer controller roles, tighter retention scope, pseudonymisation, and coherence with the AI Act)

Read More

EU AI Act

The Commission updated the page hosting the second draft Article 50 Code of Practice on marking/labelling AI-generated content, keeping the draft open for feedback.

Read More

The Commission updated an AI Act FAQ explaining how harmonised standards will be developed and how “presumption of conformity” is expected to support compliance for high-risk AI systems

Read More

DSA

The Commission refreshed its EU register page listing certified out-of-court dispute settlement bodies that can review platform content-moderation decisions under the DSA

Read More

The Commission refreshed its EU register page listing designated trusted flaggers whose notices should be prioritised by platforms.

Read More

Sweden Level

GDPR

IMY launched two new projects in its data protection innovation sandbox to produce practical GDPR guidance: a healthcare project digitising ICU diaries and a mobile direct-communication project for on-site services in visitors’ phones.

Read More

IMY published a Swedish summary of the EDPB/EDPS Biotech Act joint opinion, highlighting calls for stronger safeguards for sensitive health data and coherence with the AI Act

Read More

Continue reading
Need help?
Contact Us