Afghanistan: Data Protection

The EU Data Act's September 2026 deadline introduces a new access-by-design requirement for connected medical devices and related services, but the practical impact may be more limited than manufacturers expect. This analysis examines what life sciences companies must do to comply with both the upcoming milestone and the broader set of obligations that have been in force since September 2025.

The EU AI Act's transparency obligations became enforceable on 2 August 2026, requiring providers and deployers of AI systems to clearly disclose AI-generated content, inform users of AI interactions, and label deepfakes. Organizations must now navigate new compliance requirements including disclosure obligations for emotion recognition systems and content on matters of public interest, while facing potential fines of up to €15 million or 3% of global turnover for non-compliance.

The European Union's Artificial Intelligence Act continues to evolve with significant regulatory updates that reshape compliance timelines and clarify key obligations. Recent developments include the Digital Omnibus on AI, which extends implementation deadlines for high-risk systems and introduces new prohibitions on harmful AI applications, alongside comprehensive guidance from the European Commission on classification criteria, transparency requirements, and general-purpose AI model obligations.