Regulation 2022/868 (Data Governance Act):
This regulation aims to foster trust in data sharing across the EU. It establishes a framework for data intermediaries (organizations that connect data holders with data users) to ensure they operate in a neutral and transparent manner. The Act also encourages the reuse of certain categories of protected public sector data (like health or environmental data) under specific conditions, streamlining access while safeguarding fundamental rights. Finally, it promotes the concept of “data altruism,” where individuals and organizations voluntarily make data available for the common good.
Directive 2022/2555 (NIS2 Directive):
This directive focuses on strengthening cybersecurity across the EU. It expands the scope of the previous NIS Directive to include more sectors deemed critical (like energy, transport, health, digital infrastructure, and public administration). NIS2 imposes stricter cybersecurity risk management obligations on these entities and mandates incident reporting requirements. It also aims to enhance cooperation and information sharing among Member States to ensure a coordinated response to cybersecurity threats.
Regulation 2022/2065 (Digital Services Act – DSA):
The DSA introduces new rules for online platforms and intermediaries, particularly large platforms, operating in the EU. It sets out obligations to address illegal content online, protect users’ fundamental rights, and increase transparency in algorithmic decision-making. The DSA includes measures to counter the spread of disinformation, ensure traceability of traders on online marketplaces, and empower users to report illegal content. Very large online platforms face additional scrutiny and are subject to independent audits.
Regulation 2022/2064 (Digital Markets Act – DMA):