Skip to main content
Home > Insights > Tech Law Developments – August 2026

Please see the table below for an overview of key developments coming up in the month ahead.

DateDescriptionFurther Information
2 September 2026Deadline for DRCF consultation on consumer AI risk managementLink to Consultation here
8 September 2026Deadline for European Commission consultation on safeguarding EU data sovereigntyLink to Consultation here
9 September 2026Deadline for DSIT call for views on data regulation for AILink to Call for Views here
9 September 2026Deadline for DSIT call for evidence on UK international data transfer frameworkLink to Call for Evidence here
11 September 2026Reporting obligations under the Cyber Resilience Act start to applyLink to CRA text here
12 September 2026Design requirements start to apply under the EU Data ActLink to Data Act text here

In addition, here are some developments from July 2026 which weren’t captured in the last update:

DateDescriptionFurther Information
2 July 2026European Commission launched a public consultation on its proposals for a Cloud and AI Development ActLink to Consultation here
7 July 2026EDPS adopted draft Guidelines on anonymisationLink to draft Guidelines here
7 July 2026EDPS adopted Guidelines on the processing of personal data through blockchain technologies and published its reportLink to Guidelines hereLink to Report here
7 July 2026European Commission published its action plan on Cybersecurity and AILink to Action Plan here
8 July 2026EDPS adopted draft Guidelines on web scraping in the context of generative AILink to draft Guidelines here
10 July 2026UK Jurisdiction Taskforce launched Statement on liability for AI harmsLink to Statement here
14 Jul 2026Second reading of the Cybersecurity and Resilience Bill in the House of LordsLink to Parliament page here
15 July 2026DSIT launched call for evidence on UK international data transfer frameworkLink to Call for Evidence here
15 July 2026ENISA published self-assessment tool to assist SMEs with compliance with Cyber Resilience ActLink to Press Release here
20 July 2026European Commission published final Guidelines regarding transparency requirements under EU AI ActLink to Guidelines hereLink to Press Release here
22 July 2026CMA updated its guidance on unfair contract termsLink to Guidance hereLink to technical note here
24 July 2026European Commission published final guidance on Cyber Resilience ActLink to Guidance here
24 July 2026Digital Omnibus on AI published in Official JournalLink to Omnibus here
27 July 2026Digital Omnibus on AI entered into force 
2 August 2026Transparency rules under EU Ai Act started to applyLink to Press Release here
31 August 2026Deadline for DSIT consultation on data intermediaries and delegation of data subject rightsLink to Consultation here

About the author

Marija is an Associate at Kemp IT Law, having joined the firm in September 2023. She advises a broad range of technology-driven businesses across the IT, digital and data sectors in relation to commercial, data protection and technology matters. Her experience includes drafting and advising on agreements for software licensing and development, IT managed services, and SaaS and other cloud based solutions.

Subscribe