Afghanistan: Privacy

The EU Data Act's September 2026 deadline introduces a new access-by-design requirement for connected medical devices and related services, but the practical impact may be more limited than manufacturers expect. This analysis examines what life sciences companies must do to comply with both the upcoming milestone and the broader set of obligations that have been in force since September 2025.

The European Commission has launched a targeted consultation on safeguarding the EU's data sovereignty, seeking stakeholder input on data-related dependencies, barriers to accessing data in third countries, and risks linked to third-country access to sensitive data. This consultation connects directly to the European Tech Sovereignty Package and the broader European Data Union Strategy, with responses due by September 8, 2026.

The Court of Justice of the European Union has ruled on whether national courts may use personal data as evidence when that data was obtained in violation of GDPR provisions. The judgment addresses the tension between data protection rights and the right to a fair trial, establishing conditions under which unlawfully obtained evidence containing personal data may be admitted in court proceedings. This decision has significant implications for how courts across the EU balance privacy protections with the adm