This Week in ICT & Cybersecurity — Brussels (#16, 2026)
Commission review finds DMA fit for purpose; Parliament urges swift DMA enforcement; Commission opens merger guidelines consultation; Meta faces DSA breach findings on minors; Council debates banks’ AI and cyber resilience.
April 26, 2026 to May 02, 2026
Commission review finds DMA fit for purpose; Parliament urges swift DMA enforcement; Commission opens merger guidelines consultation; Meta faces DSA breach findings on minors; Council debates banks’ AI and cyber resilience.
📋 In This Week's Newsletter
• 📅 This Week's Calendar in Brussels
• 🇪🇺 European Commission
• ⚖️ EU Legislation
• 🏛️ European Parliament
• 🤝 EU Council
• 📝 EP Motions & Questions
• ✒️ EP Committee Work
This Week's Calendar in Brussels
- Committee on Civil Liberties, Justice and Home Affairs (LIBE): On May 04, the European Parliament's Committee on Civil Liberties, Justice and Home Affairs (LIBE) is scheduled to meet. Agenda includes: Chair’s announcements; Date of next meetings; Establishing the Justice programme for the period 2028-2034 and repealing Regulation (EU) 2021/693.
- Committee on the Internal Market and Consumer Protection (IMCO): On May 06, the European Parliament's Committee on the Internal Market and Consumer Protection (IMCO) is scheduled to meet. Agenda includes: * * *; ------; 12a. Safety and cyber security risks potentially posed by advanced AI systems, such as Anthropic's Mythos, and the application of the EU AI Act and European digital rules• Exchange of views.
- Committee on Industry, Research and Energy (ITRE): On May 06, the European Parliament's Committee on Industry, Research and Energy (ITRE) is scheduled to meet. Agenda includes: Agreement between the European Union and Canada laying down the conditions for the participation of Canadian legal entities and products originating in Canada to procurement under the SAFE Instrument; Chair’s announcements; *** End of electronic vote ***.
- Committee on Industry, Research and Energy (ITRE): On May 06, the European Parliament's Committee on Industry, Research and Energy (ITRE) is scheduled to meet. Agenda includes: Amending Directives (EU) 2018/2001, (EU) 2019/944, (EU) 2024/1788 as regards acceleration of permit-granting procedures; Amending Regulation (EU) 2023/956 as regards the extension of its scope to downstream goods and anti-circumvention measures; Chair’s announcements.
- Committee on Civil Liberties, Justice and Home Affairs (LIBE): On May 06, the European Parliament's Committee on Civil Liberties, Justice and Home Affairs (LIBE) is scheduled to meet. Agenda includes: Age Verification, Assurance, and Estimation Techniques for the Protection of Minors Online; Amending Regulations (EU) 2016/679, (EU) 2016/1036, (EU) 2016/1037, (EU) 2017/1129, (EU) 2023/1542 and (EU) 2024/573 as regards the extension of certain mitigating measures available for small and medium sized enterprises to small mid-cap enterprises and further simplification measures; Chair’s announcements.
- Committee on the Internal Market and Consumer Protection (IMCO): On May 07, the European Parliament's Committee on the Internal Market and Consumer Protection (IMCO) is scheduled to meet. Agenda includes: * * *; ------; 12a. Safety and cyber security risks potentially posed by advanced AI systems, such as Anthropic's Mythos, and the application of the EU AI Act and European digital rules• Exchange of views.
- Committee on Civil Liberties, Justice and Home Affairs (LIBE): On May 07, the European Parliament's Committee on Civil Liberties, Justice and Home Affairs (LIBE) is scheduled to meet. Agenda includes: Age Verification, Assurance, and Estimation Techniques for the Protection of Minors Online; Amending Regulations (EU) 2016/679, (EU) 2016/1036, (EU) 2016/1037, (EU) 2017/1129, (EU) 2023/1542 and (EU) 2024/573 as regards the extension of certain mitigating measures available for small and medium sized enterprises to small mid-cap enterprises and further simplification measures; Chair’s announcements.
European Commission
Commission Review: Digital Markets Act Remains Effective, Focus Shifts to AI and Cloud
The European Commission published its first review of Regulation (EU) 2022/1925 (Digital Markets Act) on 27 April 2026. The review indicates that the DMA has delivered tangible results in its first two years, such as increased data portability, more choice for search engines and browsers, and greater interoperability for connected devices. The report notes the DMA's relevance in a rapidly evolving digital environment and identifies AI and cloud services as future focus areas. The accompanying study finds no clear current demand for social network interoperability but highlights the need for ongoing monitoring. The regular three-year review is mandated by the DMA to ensure continued effectiveness.
Commission Consults on Draft EU Merger Guidelines
On 29 April 2026, the European Commission launched a public consultation on the draft of the new EU Merger Guidelines, marking the first significant reform of merger control in two decades. The draft guidelines aim to modernise the assessment of mergers, address dynamic harms, and clarify considerations around innovation, sustainability, and market power. These guidelines are set to replace both the Horizontal and Non-Horizontal Merger Guidelines. The public consultation is open until 26 June 2026, after which the Commission will analyse stakeholder input before finalising the guidelines.
Commission Seeks Feedback on Interoperability Measures for Google Android under DMA
On 26 April 2026, the European Commission invited stakeholders to comment on draft measures to ensure effective interoperability with Google's Android platform under the Digital Markets Act. The specification proceedings, opened in January 2026, focus on enabling competing AI services to access Android device capabilities currently reserved for Google's offerings. The measures would permit activation of alternative AI services, including through custom 'wake words', and aim to foster competition and user choice. The public consultation runs until 13 May 2026, with final binding measures to follow within six months.
Commission Issues Preliminary Findings: Meta in Breach of Digital Services Act for Minors’ Access
On 28 April 2026, the European Commission preliminarily found Meta’s Instagram and Facebook in breach of Regulation (EU) 2022/2065 (Digital Services Act) for failing to prevent minors under 13 from accessing their platforms. The findings cite insufficient age verification and ineffective reporting mechanisms. Meta has the right to respond and propose remedies in line with the 2025 DSA Guidelines on the protection of minors. A non-compliance decision could lead to fines of up to 6% of global turnover.
Commission Refers Seven Member States to Court over CER Directive Transposition Failures
On 28 April 2026, the Commission referred Bulgaria, France, Luxembourg, the Netherlands, Poland, Spain, and Sweden to the Court of Justice of the EU for failing to transpose Directive (EU) 2022/2557 on the resilience of critical entities (CER Directive). The Directive, which covers sectors including digital infrastructure and cybersecurity, required transposition by 17 October 2024. The Commission requests the Court to impose financial sanctions for non-notification of national transposing measures.
EU Legislation (Official Journal)
Delegated Regulation (EU) 2026/339 Repeals Cybersecurity Requirements for Radio Equipment
Commission Delegated Regulation (EU) 2026/339 of 16 February 2026, published on 29 April 2026, repeals Delegated Regulation (EU) 2022/30. The repeal coincides with the application of Regulation (EU) 2024/2847 (Cyber Resilience Act), which introduces horizontal cybersecurity requirements for digital products. The repeal takes effect from 11 December 2027 to avoid overlapping regulations.
Commission Implementing Regulation (EU) 2026/903 Establishes ICSMS Forced Labour Module
Commission Implementing Regulation (EU) 2026/903 of 24 April 2026, published on 27 April 2026, specifies details and functionalities of the information and communication system used under Regulation (EU) 2024/3015 on prohibiting products made with forced labour. The regulation establishes a forced labour module in the Information and Communication System for Market Surveillance (ICSMS) for use by the Commission, competent authorities, and customs authorities.
European Parliament
Parliament Debates and Votes on Enforcement of Digital Markets Act
On 28 April 2026, the European Parliament held a plenary debate on the enforcement of the Digital Markets Act (DMA) (2026/2596(RSP)). The debate focused on the need for consistent enforcement and the importance of addressing new market concerns, including developments in AI and cloud services.
Parliament Votes on Discharge for the European Data Protection Supervisor
On 29 April 2026, Parliament voted on the discharge for the implementation of the EU general budget 2024, Section IX – European Data Protection Supervisor. The report (A10-0057/2026) was prepared by Pasquale Tridico (Committee on Budgetary Control).
Parliament Votes on Cyberbullying and Online Harassment Resolution
On 30 April 2026, the European Parliament voted on motions for resolutions concerning targeted criminal provisions and platform responsibility to address cyberbullying and online harassment (2026/2693(RSP)). Several group and individual motions were tabled.
EU Council
Eurogroup Reviews Bank Cybersecurity and AI Resilience
On 4 May 2026, the Eurogroup discussed the operational resilience of banks, focusing on cybersecurity and artificial intelligence. The agenda also included the economic impact of the Middle East conflict.
Informal Telecom Council Meeting
Telecommunications ministers met informally on 29 April 2026 in the Transport, Telecommunications and Energy Council configuration.
EP Motions & Questions
Joint Motion: Criminal Provisions and Platform Responsibility on Cyberbullying
On 28 April 2026, the EPP, S&D, and Renew groups tabled a joint motion (RC-B10-0206/2026) for a resolution calling for coordinated action and possible criminal law provisions to address cyberbullying and hold platforms accountable.
ECR Motion: Cyberbullying and Platform Responsibility
Assita Kanko and Stefano Cavedagna, on behalf of the ECR Group, submitted an individual motion for a resolution (B10-0212/2026) highlighting the complexity of online harassment, the role of platforms, and the need for educational and legal measures.
Renew Motion: Targeted Criminal Provisions for Cyberbullying
Veronika Cifrová Ostrihoňová, for the Renew Group, tabled a motion (B10-0206/2026) addressing criminal provisions and platform obligations regarding cyberbullying and the protection of minors.
Verts/ALE Motion: Cyberbullying, Criminal Law, and Platform Accountability
Nicolae Ștefănuță and colleagues for the Greens/EFA group introduced a motion (B10-0207/2026) emphasising prevention, digital literacy, and scrutiny of recommender systems under the DSA.
Left Group Motion: Cyberbullying and Digital Rights
Isabel Serra Sánchez, for The Left Group, tabled a motion (B10-0208/2026) focusing on digital rights, online gender-based violence, and the effectiveness of age verification tools.
EP Committee Work
ENVI Committee Opinion on Critical Raw Materials Regulation Amendment
On 29 April 2026, the Committee on the Environment, Climate and Food Safety (ENVI) adopted its opinion on the proposal to amend Regulation (EU) 2024/1252 concerning the access and supply of critical raw materials. Rapporteur Jacek Ozdoba included recommendations for strengthening recycling, supply chain resilience, and administrative procedures in support of the Committee on Industry, Research and Energy (ITRE).
