Julia Tar

the EU cybersecurity agency's role over artificial intelligence should be strengthened in further changes to a proposed revision of the Cybersecurity Act, the lead EU lawmaker on the proposal told a European Parliament committee Thursday. A senior EU digital official defended country-related criteria for assessing supplier risks and said she hoped for an agreement early next year. Other lawmakers called for stronger AI capabilities while questioning mandatory certification plans.

The EU’s digital simplification package was removed from the agenda of Sunday’s meeting of national ambassadors, with no new date set or revised text prepared, MLex understands. Continued opposition from Germany and other member states seeking stricter trade secrets protections may have left insufficient support to secure agreement on Sunday, prompting the postponement, MLex understands.

Microsoft-owned advertising technology company Xandr has received the Norwegian Data Protection Authority’s largest-ever fine for breaching the EU’s General Data Protection Regulation by unlawfully processing and sharing Grindr users’ personal data, including information revealing sexual orientation. The authority said Xandr had failed to ensure it had valid consent. Microsoft said the conduct predated its acquisition of Xandr and that it was reviewing the decision.

Talks between EU lawmakers, member states and the European Commission on the digital simplification package could begin next year, commission official Pavlina Peneva suggested Monday. The parliament is expected to adopt its negotiating position early next year, potentially allowing talks under Lithuania’s January-to-June period chairing legislative talks, she said. Meanwhile, EU governments have yet to agree their position.

National investigations under the EU’s Digital Services Act could yield results next year, Daniela Brönstrup, vice president of Germany’s Federal Network Agency, said Tuesday, while also noting difficulties in gathering evidence for European Commission cases and coordinating enforcement of the bloc’s Data Act.

Negotiations on EU rules to combat online child sexual abuse material, or CSAM, have become entrenched in privacy and data protection concerns, leaving children’s rights absent from parts of the debate, but an agreement should come soon, a leading European Commission official has said. Representatives of EU governments and the European Parliament are due to continue negotiating the law for tackling CSAM on Dec. 8, MLex understands.

Providers of general-purpose AI models with systemic risk offered in the EU would have to give the bloc’s cybersecurity agency access for security evaluations under joint amendments to a planned cyber law proposed by two European Parliament lawmakers, MLex understands. The proposals would also require contingency measures where necessary if access relied on by EU bodies, national authorities or essential entities were restricted or withdrawn.

A review commissioned by the European Parliament of the EU’s digital simplification package is examining whether proposed privacy and AI changes would support innovation and ease business burdens or create uncertainty for smaller companies, according to a September questionnaire seen by MLex. Responses were due by Sept. 25, and the findings might inform lawmakers’ work on the proposal, MLex understands.

Hosts using Airbnb, Booking and other short-term rental platforms can be required to obtain authorization in Brussels under certain circumstances, the EU’s highest court ruled on Thursday. The Brussels Court of Appeal must now decide whether the rules are justified and protect applicants’ rights before ruling on rental operator Smartflats’ challenge.

Several EU countries oppose plans to classify technology suppliers as security risks because of their links to non-EU states, according to comments on the proposed Cybersecurity Act revision compiled in a new document. Governments also differ over deadlines for removing high-risk suppliers’ telecom equipment. The objections mirror differences in the European Parliament, where lawmakers have proposed competing approaches to assessing supplier risks.