Navigating the Future of Digital Regulation in Europe

In recent years, the European Union has significantly expanded its digital regulatory framework, increasing the number of laws related to digitalisation from approximately 20 to 88 over the past twelve years. This extensive "digital acquis" includes key regulations such as the Digital Markets Act (DMA), Digital Services Act (DSA), General Data Protection Regulation (GDPR), Data Act, AI Act, and Cyber Resilience Act. While these laws aim to shape the digital economy, their rapid growth has led to complexities, overlaps, and inconsistencies that may hinder legal certainty and innovation.

Next steps for EU law and regulation for the digital world – CEPSResearcher access under the Online Safety Act: getting transparency rightAge Verification Is Coming for the Whole InternetEuropol Calls for Stronger Data Laws to Combat CybercrimeMake Europe digitally sovereign, secure and competitiveParis prosecutor's office probing Siri, Apple's voice assistant

To address these challenges, the Centre for European Policy Studies (CEPS) has established a Task Force focused on refining existing regulations. The Task Force aims to enhance the effectiveness and coherence of flagship instruments, seeking targeted reforms rather than introducing new regulations. Upcoming workshops will address various aspects, including the interplay of the DMA with competition law, fine-tuning the DSA, and enhancing GDPR effectiveness. The final report, expected in March 2026, will synthesize discussions and research findings.

Next steps for EU law and regulation for the digital world – CEPS

On October 14, 2025, the EU Council will debate the controversial "Chat Control" bill, which mandates instant messaging platforms to scan private conversations for child sexual abuse material. Introduced in 2022, this proposal has faced backlash from activists and digital rights groups who argue that its core mechanism, Client-Side Scanning, poses significant privacy risks. Critics, including the Electronic Frontier Foundation (EFF), warn that the bill could lead to mass surveillance and compromise secure end-to-end encryption, affecting not only EU users but also global communications.

EU to revisit controversial ‘Chat Control’ bill requiring scanning of private messagesCyberscoopParis prosecutor's office probing Siri, Apple's voice assistantEuropol Calls for Stronger Data Laws to Combat CybercrimeMake Europe digitally sovereign, secure and competitive

The push for age verification across the internet is gaining momentum, with governments and tech companies advocating for measures to protect minors online. This trend is reflected in the EU's Digital Services Act, which requires platforms to implement age-appropriate content controls. Various countries, including the UK and the US, are also pursuing similar regulations. The implementation of age verification technologies, such as AI-driven ID scans, aims to balance compliance with privacy, but raises concerns about user data security and the potential for invasive practices.

Age Verification Is Coming for the Whole InternetNext steps for EU law and regulation for the digital world – CEPSMake Europe digitally sovereign, secure and competitiveResearcher access under the Online Safety Act: getting transparency right

Amidst these regulatory developments, Apple is under investigation by the Paris Prosecutor’s Office for potentially violating GDPR through its voice assistant, Siri. The inquiry, initiated by a complaint from La Quadrature du Net, focuses on allegations that Siri unlawfully collected user conversations without consent. If found in violation, Apple could face significant fines, highlighting the increasing scrutiny tech companies face regarding data privacy.

Siri data collection puts Apple under French Government scrutinyParis prosecutor's office probing Siri, Apple's voice assistantCyberscoop

The ongoing discussions and legislative efforts in Europe reflect a critical balancing act between enhancing digital security and protecting individual privacy rights. As the EU navigates these complex issues, the outcomes of proposed regulations, such as the Chat Control bill and age verification measures, will have far-reaching implications for digital communication and privacy standards globally. The evolving landscape underscores the necessity for continuous dialogue among policymakers, tech companies, and civil society to ensure that the digital future is both secure and respectful of fundamental rights.

EU to revisit controversial ‘Chat Control’ bill requiring scanning of private messages