This Week in ICT & Cybersecurity — Brussels (#27, 2026)
Commission mandates Google DMA compliance; EU-Ukraine Drone Alliance launched; Major semiconductor state aid approved; Council targets cyber-sanctions; Parliament committees focus on youth, digital safety.
July 12, 2026 to July 18, 2026
Commission mandates Google DMA compliance; EU-Ukraine Drone Alliance launched; Major semiconductor state aid approved; Council targets cyber-sanctions; Parliament committees focus on youth, digital safety.
📋 In This Week's Newsletter
• 🇪🇺 European Commission
• ⚖️ EU Legislation
• 🤝 EU Council
• ✒️ EP Committee Work
European Commission
Commission issues binding guidance to Google for AI interoperability on Android and search data sharing under the Digital Markets Act
On 15 July 2026, the European Commission issued two sets of binding specification measures to Google pursuant to the Digital Markets Act (DMA), regulating both interoperability for AI services on Android devices and the sharing of Google Search data with third-party search engines. The measures oblige Google to provide competitors’ AI assistants access to Android device functionalities equivalent to those available to Google’s own Gemini assistant, and to ensure third-party access to anonymised search data. Implementation is set for January and July 2027, while provisions for data privacy and security were outlined in accordance with draft Joint Guidelines by the Commission and European Data Protection Board. The specification proceedings, opened in January 2026, are distinct from infringement investigations and carry no immediate penalties but are legally binding once adopted.
Commission launches EU-Ukraine Drone Alliance to accelerate next-generation drone and counter-drone technologies
At the third EU-Ukraine Defence Industry Forum in Kyiv on 16 July 2026, the Commission formally launched the EU-Ukraine Drone Alliance. This initiative is a direct deliverable of the Joint Communication 'Preserving Peace – Defence Readiness Roadmap 2030' and follows the Drone Deal announced by President Ursula von der Leyen in July 2026. Eighteen founding members from the EU and Ukraine, chosen after an open call, will cooperate to develop and scale new drone and counter-drone systems with a focus on joint ventures and technology transfer. The Alliance also supports the objectives of the Action Plan on Drone and Counter-Drone Security published in February 2026. The first meeting of Alliance members is scheduled for September 2026 in Brussels.
Commission welcomes political agreement on the €115 million AGILE programme for rapid defence innovation
On 15 July 2026, the Commission acknowledged the political agreement reached by the Parliament and Council on the Programme for Agile and Rapid Defence Innovation (AGILE). Proposed in March 2026, AGILE is a €115 million pilot instrument aimed at accelerating disruptive defence technologies, including artificial intelligence, quantum, and drones. The instrument, prioritising start-ups and SMEs, is expected to be operational in early 2027. AGILE complements the European Defence Fund and the Defence Innovation Scheme, serving as a fast-track support mechanism highlighted in the EU Defence Industry Transformation Roadmap.
Commission approves €659 million German state aid for four new semiconductor facilities under the Chips Act
The European Commission approved €659 million in German state aid on 13 July 2026 to support establishment of four semiconductor manufacturing projects. Direct grants to Element 3-5 GmbH, Vishay Siliconix Itzehoe GmbH, KLA-Tencor MIE GmbH, and KETEK GmbH target first-of-a-kind facilities along the semiconductor value chain. The projects qualify under Article 107(3)(c) TFEU and are aligned with the European Chips Act and the Communication 'A Chips Act for Europe'. Beneficiaries commit to strengthening the EU semiconductor value chain, collaborating with research institutions, prioritising supply amid shortages, developing training, and sharing profits with Germany.
EU Legislation (Official Journal)
Commission Implementing Regulation (EU) 2026/1778: Implementation arrangements for digital product passport registry
On 16 July 2026, Commission Implementing Regulation (EU) 2026/1778 (CELEX: 32026R1778) was published, establishing technical and operational requirements for the digital product passport registry mandated under Regulation (EU) 2024/1781. The Regulation outlines user verification, registration, semantic interoperability, and access controls for economic operators, value chain actors, and authorities. Personal data processing, system log requirements, and security standards are also detailed. The regulation applies from 2026 and is binding in all Member States.
Commission Implementing Decision (EU) 2026/1736: Harmonised standards for digital product passports
Adopted on 14 July 2026, Commission Implementing Decision (EU) 2026/1736 (CELEX: 32026D1736) publishes harmonised standards for digital product passports in accordance with Regulation (EU) 2024/1781. References to EN 18216:2026 through EN 18223:2026 standards by CEN, Cenelec, and ETSI now confer presumption of conformity under Articles 10 and 11 of the 2024 Regulation.
Commission Implementing Regulation (EU) 2026/1566: ICT usage and e-commerce data requirements for 2027
On 13 July 2026, the Commission adopted Implementing Regulation (EU) 2026/1566 (CELEX: 32026R1566), which sets data requirements and reporting deadlines for Member States on ICT usage and e-commerce for the 2027 reference year, under Regulation (EU) 2019/2152. The deadlines for metadata and quality reports are 31 May and 5 November 2027, respectively.
Council Implementing Regulation (EU) 2026/1714: Cyber sanctions listing under Regulation (EU) 2019/796
Published on 13 July 2026, Council Implementing Regulation (EU) 2026/1714 (CELEX: 32026R1714) amends Regulation (EU) 2019/796 to add eight natural persons and four entities to the restrictive measures list for involvement in cyber-attacks with significant impact on the EU or its Member States.
Council Implementing Decision (EU) 2026/1725: EU Cybersecurity Reserve support authorised for Moldova
Adopted 10 July 2026, Council Implementing Decision (EU) 2026/1725 (CELEX: 32026D1725) authorises support from the EU Cybersecurity Reserve to Moldova for one year. The decision follows Regulation (EU) 2025/38 (Cyber Solidarity Act), addressing heightened cyber risk and requiring Moldova's compliance with association agreement terms relevant to the Digital Europe Programme.
EU Council
Justice and Home Affairs ministers discuss security, migration, digital sovereignty
On 16 July 2026, Justice and Home Affairs ministers convened informally to discuss EU priorities, including digital sovereignty, regulatory simplification, and support for Ukraine. Topics such as rule of law, migration, online child protection, and spyware misuse were raised, reflecting the broad agenda of the Council's current Irish Presidency.
EP Committee Work
CULT Committee adopts report calling for stronger rules and platform accountability to protect minors online
On 14 July 2026, the CULT committee adopted a report emphasizing the need for effective enforcement of EU digital safety legislation to protect children online. The report, drafted by Sandro Ruotolo (S&D), supports governance by privacy- and safety-by-design principles, algorithmic transparency, and bans on the most harmful addictive practices. The committee also advocates for the introduction of youth modes, stricter influencer and commercial exploitation regulation, and harmonisation across the AVMSD, GDPR, DSA, and AI Act. Mandatory ethical standards for AI companions and systematic monitoring of children's digital habits are proposed.
CULT Committee adopts draft report on the EU Youth Strategy 2019-2027 with recommendations for future-proofing youth policy
On 14 July 2026, the Committee on Culture and Education approved a report urging the Commission and Member States to strengthen the EU Youth Strategy to reflect technological, security, and mental health challenges. The report, led by rapporteur Sabrina Repp (S&D), calls for alignment with Youth Goals, robust funding in the post-2027 MFF, and expanded youth participation in policymaking processes. The report highlights structural inequalities and mainstreaming of youth concerns in policy domains including digital and media, health, and housing.
INTA Committee reviews outbound investments in technology critical for economic security
During its meeting on 13 July 2026, the INTA committee examined the state of play on the implementation of Commission Recommendation (EU) 2025/63 regarding the review of outbound investments in technology areas critical for Union economic security. Members engaged with Commission officials on mechanisms to monitor and safeguard strategic assets in the ICT sector.
SEDE Committee discusses defence innovation files, including AGILE and military mobility, in dialogue with Irish Presidency
On 14 July 2026, the Subcommittee on Security and Defence met with Ireland's Minister for Foreign Affairs and Trade, Helen McEntee, as part of the Irish Council Presidency debrief. The Presidency prioritised legislative progress on the AGILE regulation for rapid defence innovation, military mobility, and broader defence readiness, highlighting EU work on drone and cable infrastructure security and the digital dimension of critical infrastructure.
