CNIL and EC lead October regulatory activity across four domains
The CNIL and Cybermalveillance.gouv.fr have jointly published a new practical resource during the European Cybersecurity Month to help individuals respond to personal data breaches and adopt appropriate protective reflexes. The European Commission's October infringements package includes legal action against Member States for failing to comply with their obligations under EU law, with 2 energy-related letters identified within the package. In telecoms, BEREC has opened a public consultation on its draft Work Programme 2027, published on 1 October 2026, whilst the EP ENVI Committee has issued a proposal-stage opinion on the regulation amending Regulation (EU) 2024/1252.
For you: Review the source-backed developments below and assess relevance to your existing compliance and public affairs priorities.
How to read this digest
▼
Enforcement
Fines, sanctions, rulings
Legislation
New laws, statutory instruments
Consultation
Calls for evidence
Guidance
Frameworks, codes of practice
↔ Divergence
UK-EU moving apart
Regulatory signal
Risk, supervisory and policy signals
Commentary
Background, no action needed
Click a domain tile to expand, then click a category tag to see individual items.
The call for evidence seeks views from all stakeholders who have engaged with the Telecommunications (Security) Act 2021, the Electronic Communications (Security Measures) Regulati
An official website of the European Union How do you know? This site uses cookies. Visit our cookies policy page or click the link in any footer for more information and to change
An official website of the European Union How do you know? This site uses cookies. Visit our cookies policy page or click the link in any footer for more information and to change
Domains
Signals and context
Signals help explain where regulation, markets and technology may be moving. They are not obligation evidence.
The European Commission has sent an additional letter of formal notice to Bulgaria (INFR(2024)2241) for failing to designate and empower national authorities to enforce the Digital Services Act (Regulation (EU) 2022/2065
Politico reports that Meta's Mark Zuckerberg and Nvidia's Jensen Huang helped build support for 'morally binding' AI accords signed by President Trump and AI industry leaders at a White House lunch.
Guardian Tech reports: More than 44,000 individuals have filed formal legal objections to NHS England processing their data through the Palantir-built Federated Data Platform, amid broader controversy over Palantir's lin
Data Protection
1 item
1 guidance
Ecodesign & Energy
1 item
1 guidance
Product Safety
1 item
1 consultation
Telecoms
1 item
1 consultation
Unclassified
3 items
1 enforcement1 guidance1 regulatory signal
Data Protection, Privacy and Surveillance
On the occasion of Cybermois 2026, the CNIL and Cybermalveillance.gouv.fr have jointly released a new practical guidance resource designed to help individuals react appropriately in the event of a personal data breach. The resource, issued as guidance under the Cybermois framework, aims to promote good reflexes among members of the public to limit risks arising from data breaches.
The CNIL and Cybermalveillance.gouv.fr have jointly published a practical guidance resource during Cybermois 2026 (European Cybersecurity Month) to help individuals respond to personal data breaches and adopt protective reflexes.
Ecodesign and Energy Efficiency
Within the October infringements list, 2 energy-related letters of formal notice or reasoned opinion have been identified, though the specific Member States and instruments involved are not detailed in the available excerpt.
The European Commission's October infringements package includes two energy-related decisions pursuing legal action against Member States for failing to comply with EU energy law obligations.
Product Safety, Conformity and Standards
Proposal: "OPINION on the proposal for a regulation of the European Parliament and of the Council Amending Regulation (EU) 2024/1252". It does not by itself change current applicable law.
The European Parliament's ENVI Committee has issued an opinion on the proposal to amend Regulation (EU) 2024/1252, the Critical Raw Materials Act, signalling parliamentary scrutiny of proposed changes to that framework.
Telecoms and Network Regulation
BEREC opened a public consultation on its draft Work Programme 2027 on 1 October 2026, inviting stakeholder input into the body's planned regulatory priorities.
BEREC has opened a public consultation on its draft Work Programme for 2027, setting out the body's planned regulatory priorities and outputs for the year.
Unclassified
Opinion of the Advocate General at the Court Laila Medina in Case C-12/25 Source: CJEU Press Releases Curia (official). <div class="wiki feed"> Bisdom Gent <br /> Approximation of laws <br /> <div class="wysiwyg"><p>Advocate General Medina: the right to erasure under the GDPR may, in principle, apply to personal data contained in baptismal registers</p></div> </p> </div> 2026/0301(COD) ***I Source: EP Legislative Observatory OEIL (official).
Advocate General Medina has issued an opinion in Case C-12/25 (Bisdom Gent) concluding that the GDPR right to erasure may in principle apply to personal data held in baptismal registers maintained by the Catholic Church.
ETSI RSS published guidance, standard or assurance-scheme material: ETSI launches first of its kind standard to measure environmental impact of smartphones.
The European Parliament Legislative Observatory has registered a new ordinary legislative procedure under reference 2026/0301(COD), though no further procedural or substantive details are yet published.