EU Level
EU AI Act
5 Mar 2026 — The Commission published a second draft voluntary Code of Practice on marking/labelling AI-generated content to support Article 50 compliance, and indicated feedback collection (to end of March) ahead of expected finalisation in early June.
DSA
2 Mar 2026 — The Commission highlighted the first harmonised DSA transparency reports, emphasising clearer, standardised visibility into content moderation practices across intermediary services.
5 Mar 2026 — The Commission held the first meeting of its Special Panel on child safety online, positioning it as an expert forum feeding into upcoming work on minors’ protection and platform responsibilities.
Sweden Level
GDPR
3 Mar 2026 — IMY updated guidance for healthcare providers on information security in health and social care personal data processing, reinforcing GDPR-aligned security expectations in a sector context.
5 Mar 2026 — IMY updated public-facing guidance explaining patients’ GDPR rights in healthcare (how GDPR rights apply alongside Swedish health data rules).
NIS2
2 Mar 2026 — MCF reported that the fourth Cybersäkerhetskollen again shows many public-sector organisations lack foundational elements of systematic cyber work, and stressed the need to accelerate improvements in light of the new cybersäkerhetslagen (NIS2) environment.
DORA
4 Mar 2026 — FI announced it received EBA feedback on errors in firms’ DORA information register reporting, will contact reporters to correct common error codes, and set deadlines for resubmission/quality checks through April.
%20(A2%20(Landscape))%20(9).png)
%20(A2%20(Landscape))%20(10).png)