This month’s update from Marija Nonkovic’s on key tech law developments for the month ahead:
| Date | Description | Further Information |
| 6 April 2025 | Digital Markets, Competition and Consumers Act 2024 (DMCCA) (Consequential Amendments) Regulations 2025 come into force | Link to text here |
| 8 April 2025 | Deadline for Government consultation on ransomware threat reduction proposals | Link to Consultation here |
| 11 April 2025 | Deadline for CMA consultation on proposed changes to Assimilate Technology Transfer Block Exemption Regulation | Link to Consultation here |
| 30 April 2025 | Deadline for submission of Registers of Information by financial entities to European Supervisory Authorities under DORA | Link to Press Release here |
In addition, here are some developments from March 2025 (and a few extra ones from February) which weren’t captured last month’s update.
| Date | Description | Further Information |
| 25 February 2025 | The Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) (Amendment) Regulations 2025 (SI 2025/211) (Amendment Regulations) come into force | Link to Regulations here |
| 26 February 2025 | CMS Committee and SIT Committee published a joint response to Government’s consultation on copyright and AI | Link to Joint Response here |
| 28 February 2025 | UK Government launched a survey on UK AI sector | Link to Survey here |
| 28 February 2025 | OECD published common framework for AI incident reporting | Link to Framework here |
| 3 March 2025 | Government published its response to call for views on code of practice for software vendors | Link to Response here |
| 4 March 2025 | First reading of UK Artificial Intelligence Bill | Link to AI Bill page here |
| 5 March 2025 | CMA confirmed no investigation for Microsoft / OpenAI partnership | Link to Press Release here |
| 5 March 2025 | EDPB launched co-ordinated enforcement action on right to erasure | Link to Launch here |
| 5 March 2025 | Government published a report on proposed Cyber Governance Code of Practice | Link to Report here |
| 7 March 2025 | ESAs published their opinion on European Commission’s rejection of Subcontracting RTS | Link to Opinion here |
| 10 March 2025 | ICO and FCA published a letter re supporting AI innovation in financial services | Link to Letter here |
| 11 March 2025 | European Commission published third draft of GPAI Code of Practice | Link to Code here |
| 13 March 2025 | First Reading of Product and Metrology Bill in House of Commons | Link to Parliament page here |
| 14 March 2025 | Deadline for ICO consultation on updated guidance on storage and access technologies | Link to Consultation here |
| 14 March 2025 | CMA published a consultation on its proposed changes to the Assimilated EU Technology Transfer Block Exemption Regulation | Link to Consultation here |
| 17 March 2025 | DSIT launched call for evidence on data intermediaries | Link to call for evidence here |
| 18 March 2025 | European Commission proposed extension of the two 2021 adequacy decisions with the UK for a period of six months, until 27 December 2025. | Link to Press Release here |
| 18 March 2025 | DSIT launched a call for evidence on UK data brokerage market | Link to call for evidence here |
| 24 March 2025 | European Commission adopted a draft Delegated Regulation supplementing DORA regarding regulatory technical standards specifying the elements that a financial entity has to determine and assess when subcontracting ICT services supporting critical or important functions. | Link to Delegated Regulation hereLink to draft RTS here |
| 26 March 2025 | House of Commons Committee of Public Accounts published a report on the use of AI in government highlighting challenges and risks to the successful adoption of AI across the public sector | Link to Report here |
| 27 March 2025 | European Commission opened proceedings against 26 EU member states for failing to fully transpose DORA into national law | Link to press release here |
| 27 March 2025 | CMA published its Annual Plan 2025/26 | Link to Annual Plan here |
| 28 March 2025 | ICO published new guidance on anonymisation and pseudonymisation | Link to Guidance [We’ve%20published%20our%20Anonymisation%20and%20Pseudonymisation%20guidance]here |
| 30 March 2025 | Deadline for stakeholder feedback on third draft GPAI Code of Practice | Link to Code here |
| 31 March 2025 | Deadline for UK Government survey on UK AI sector | Link to Survey here |
| 31 March 2025 | Deadline for compliance by in-scope financial firms with Operational Resilience requirements | Link to Operational Resilience rules here |
