ZeroGravity Weekly Brief | March 9, 2026

Where is Europe’s digital rulebook heading this week? Debate continues in the EU over simplifying GDPR rules, with regulators warning not to weaken the definition of “personal data.” At the same time, the Commission is increasing scrutiny of AI competition with its case on WhatsApp, while the DSA turns attention to transparency and child safety online. In Sweden, authorities are tightening guidance on health data, cybersecurity, and DORA reporting as organisations are urged to strengthen cyber practices and fix reporting errors.

EU Level

EU AI Act

5 Mar 2026 — The Commission published a second draft voluntary Code of Practice on marking/labelling AI-generated content to support Article 50 compliance, and indicated feedback collection (to end of March) ahead of expected finalisation in early June.

Read More

DSA

2 Mar 2026 — The Commission highlighted the first harmonised DSA transparency reports, emphasising clearer, standardised visibility into content moderation practices across intermediary services.

Read More

5 Mar 2026 — The Commission held the first meeting of its Special Panel on child safety online, positioning it as an expert forum feeding into upcoming work on minors’ protection and platform responsibilities.

Read More

Sweden Level

GDPR

3 Mar 2026 — IMY updated guidance for healthcare providers on information security in health and social care personal data processing, reinforcing GDPR-aligned security expectations in a sector context.

Read More

5 Mar 2026 — IMY updated public-facing guidance explaining patients’ GDPR rights in healthcare (how GDPR rights apply alongside Swedish health data rules).

Read More

NIS2

2 Mar 2026 — MCF reported that the fourth Cybersäkerhetskollen again shows many public-sector organisations lack foundational elements of systematic cyber work, and stressed the need to accelerate improvements in light of the new cybersäkerhetslagen (NIS2) environment.

Read More

DORA

4 Mar 2026 — FI announced it received EBA feedback on errors in firms’ DORA information register reporting, will contact reporters to correct common error codes, and set deadlines for resubmission/quality checks through April.

Read More

Continue reading
Need help?
Contact Us