Afghanistan: IT and Internet

The EU's Cyber Resilience Act introduces mandatory vulnerability and incident reporting obligations for manufacturers of digital products starting 11 September 2026, well before the broader regulatory framework takes effect. Manufacturers must navigate tight reporting deadlines, determine when they become "aware" of security events, and establish governance structures to comply with 24-hour early warnings and subsequent detailed notifications through a platform that is not yet operational.

The EU Cyber Resilience Act introduces mandatory cybersecurity requirements for products with digital elements sold in the European market, establishing a comprehensive framework for hardware and software security. Starting September 11, 2026, manufacturers face new reporting obligations for actively exploited vulnerabilities and severe security incidents, with strict timelines ranging from 24 hours to one month depending on the type of report.

The European General Court has upheld the Commission's prohibition of Booking Holdings' acquisition of Etraveli Group, endorsing a novel 'reverse leveraging' theory of harm in platform mergers. This landmark judgment establishes that a dominant platform can be blocked from acquiring a business in an adjacent market even when the transaction produces only a marginal market share increase, if it serves to entrench an already weak competitive environment and make it harder for rivals to challenge the incumbent

The European Union has unveiled a comprehensive digital infrastructure package aimed at tripling data centre capacity by 2030 while strengthening semiconductor manufacturing capabilities. This ambitious regulatory framework introduces acceleration zones, strategic project designations, and new procurement requirements that will fundamentally reshape how digital infrastructure is developed, operated, and integrated into Europe's energy systems.

The Code is voluntary, but it will likely become an important reference point for demonstrating compliance with Article 50 of the AI Act.

The European Commission has responded to the citizens' 'Stop Destroying Videogames' initiative, which garnered significant public support calling for mandatory requirements to preserve access to video games after their commercial lifecycle ends.