digital economy regulation

Argentina has no comprehensive AI legislation applicable to the private sector, though more than 45 AI-related bills are currently in Congress. Regulation is instead developing through guidelines for public-sector AI use and risk management, transparency, data protection, education and security initiatives.

This edition features, among others, a European Commission proposal excluding high risk suppliers from critical communication systems; updates on the state of implementation of the AI Act across Europe; the Commission's plans to deliver its proposal reviewing the Audiovisual Media Services Directive in 2027; and a public consultation on targeted copyright measures to address AI and piracy of live events. It also lists events taking place this week.

Entities in critical sectors, including digital infrastructure, would have to certify themselves under an EU cyber posture scheme (i.e. an organisational certification evaluating the overall state of cybersecurity) within one year after the scheme becomes available. The types of digital infrastructure covered would include telecoms, cloud computing and data centre service providers.

This edition features stories about the European Parliament rapporteur’s proposed changes to the framework for high-risk suppliers under the Cybersecurity Act 2 (CSA2) and the proposal amending the directive on measures for a high common level of cybersecurity across the EU (NIS2); an event discussing how the Digital Markets Act and existing competition rules can address generative AI and AI assistants; a consultation on guidelines from the European Data Protection Board (EDPB) on data protection authorities' powers to impose fines under the GDPR; EDPB guidelines on the interplay between the Digital Services Act and the GDPR; and the first stakeholder meeting of the Media Board. It also lists events taking place this week.

The rapporteur would require that national measures going beyond new EU rules covering the same risk-management requirements cease to apply one year after the EU rules take effect. The European Commission would have to deliver guidance on the consistent application of key aspects of the directive on measures for a high common level of cybersecurity across the EU (NIS2), including when security audits may be required.

Artificial intelligence (AI) policy in the Caribbean remains at an early and uneven stage. Some countries are developing strategies, institutions and readiness assessments, while others have no specific AI policy. Only Cuba and the Dominican Republic have adopted national AI strategies, although neither policy document allocates a specific amount of public investment to AI.