Skip to main content
Home > Insights > Tech Law Key Developments: May 2025

Tech Law Key Developments: May 2025

May 2nd, 2025October 8th, 2025Marija NonkovicNo CommentsReading duration: 3 min

This month’s update from Marija Nonkovic’s on key tech law developments for the month ahead:

ateDescriptionFurther Information
12 May 2025Deadline for DSIT call for evidence on data intermediariesLink to Call for Evidence here
12 May 2025Deadline for DSIT call for evidence on data brokerage risksLink to Call for Evidence here
22 May 2025Deadline for European Commission consultation on GPAI models under EU AI ActLink to Consultation here

In addition, here are some developments from April 2025 which weren’t captured last month’s update.

DateDescriptionFurther Information
1 April 2025DSIT published policy statement of intent for Cyber Security and Resilience BillLink to Policy Statement here
1 April 2025Second reading of the Product Regulation and Metrology BillLink to Parliament page here
2 April 2025European Commission launched a survey on AI literacy measures under the EU AI ActLink to Survey here
2 April 2025ICO published new guidance on anonymisation and pseudonymisationLink to Guidance here
4 April 2025CMA published final guidance on unfair commercial practices under the DMCCALink to Guidance here
4 April 2025The Expert Group published its final report on SCCs and MCTs (under the EU Data Act)Link to Report here
4 April 2025Government launched call for evidence on Product Regulation and Metrology BillLink to Call for Evidence here
9 April 2025Ofcom launched first investigation into compliance with Online Safety ActLink to Investigation here
9 April 2025ICO announced date of ICO 2025 conference (14 October 2025)Link to Press Release here
9 April 2025European Commission published an AI Continent Action PlanLink to Plan here
9 April 2025European Commission launched consultation on Cloud and AI Development ActLink to Consultation here
8 April 2025DSIT published final draft of Cyber Governance Code of PracticeLink to Code here
9 April 2025European Commission launched consultation on its Apply AI Strategy Link to Consultation here
11 April 2025European Commission launched consultation on proposed revision to the Cybersecurity ActLink to Consultation here
11 April 2025Deadline for CMA consultation on its proposal to replace the Technology Transfer Block Exemption RegulationLink to Consultation here
14 April 2025EDPB adopted draft Guidelines 02/2025 on processing of personal data through blockchain technologiesLink to Guidelines here
22 April 2025European Commission launched consultation on guidelines for providers of GPAI models under the EU AI ActLink to Consultation here
25 April 2025EDPB published its annual report 2024Link to Report here
25 April 2025Deadline for European Commission consultation on its review of the technology transfer block exemption and guidanceLink to Consultation here
30 April 2025Deadline for first submission of registers of information to ESAs under DORALink to Press Release here

About the author

Marija is an Associate at Kemp IT Law, having joined the firm in September 2023. She advises a broad range of technology-driven businesses across the IT, digital and data sectors in relation to commercial, data protection and technology matters. Her experience includes drafting and advising on agreements for software licensing and development, IT managed services, and SaaS and other cloud based solutions.

Subscribe