EU Digital & Media Weekly Report
29 March 26
Javier Huerta Bravo
This report gathers policy and regulatory developments at EU level covered by Cullen International’s Digital Economy and Media services during the last week. It also lists events taking place this week.
White House issues recommendations to Congress on legislative approach to AI
27 March 26
Jose Jehuda Garcia
The White House has issued “A National Policy Framework for Artificial Intelligence” (NPFAI). The NPFAI is a set of legislative recommendations for the US Congress that aims to establish a uniform federal AI framework. Built around seven key policy areas, the framework seeks to pre-empt the adoption of conflicting state AI laws across the US. However, the NPFAI also includes specific pre-emption exceptions in three areas: child safety, data centre infrastructure, and state government procurement.
European Parliament committee calls for stronger enforcement of Digital Markets Act
26 March 26
Javier Huerta Bravo
Members of the European Parliament called on the European Commission to assess whether new AI tools introduced by gatekeepers hinder contestability and fairness in digital markets. The draft resolution comes before the first evaluation report on the DMA by the Commission which is due in May 2026.
Tool to compare proposed changes to EU General Data Protection Regulation and e-Privacy Directive available on Cullen website
26 March 26
Marianna Mattera
Cullen International has updated its Legislation Navigator to reflect the European Commission’s proposed amendments to the EU General Data Protection Regulation and the e-Privacy Directive under the Digital Omnibus and the Digital Networks Act proposals.
Dutch court upholds Huawei and ZTE ban in landmark telecoms ruling
25 March 26
Olha Hruba
The Dutch Trade and Industry Appeals Tribunal delivered its judgment confirming the legality of the government decision requiring Odido (former T-Mobile) to remove Huawei and ZTE equipment from critical parts of its mobile network.
Update on standardisation work in support of EU cybersecurity rules for products with digital elements
22 March 26
Alessandra Vaes
The European Commission noted that it has received the vast majority of the draft standards in support of the Cyber Resilience Act (CRA). It also stated that the EU single reporting platform for incident notifications is expected to be ready before reporting obligations apply (i.e. 11 September 2026). The CRA sets baseline cybersecurity requirements for the design, development and maintenance of products with digital elements.