European digital regulation is becoming increasingly important for businesses – while its practical implementation remains challenging.

This is also reflected in a survey we conducted among businesses of different sizes and across a range of industries:
Respondents rated the strategic relevance of the regulatory requirements at an average of 8.2 out of 10. Their own level of knowledge stood at 5.9, while satisfaction with the regulatory framework was significantly lower at just 4.7.

A key priority is therefore to translate regulatory requirements into clear responsibilities, robust processes and appropriate contractual arrangements.

To provide practical guidance in this area, we have developed our “EU Digital Regulation: A Practical Guide”.

The guide provides a structured and practical overview of the key European regulatory frameworks, distinguishing in particular between requirements that apply to the business as a whole and those relating to specific products and services. For each regulatory framework, it provides a concise overview of:

• who is affected;

• the key compliance requirements; and

• the implications for contractual arrangements and internal processes.

Covering NIS2, DORA and the AI Act, as well as the Data Act, Cyber Resilience Act, Digital Services Act and MiCAR, the guide provides a practical introduction to an increasingly complex and interconnected European digital regulatory landscape.

Should you wish to explore individual topics in greater detail or assess the specific actions required for your business, we would be pleased to support you through workshops, roundtables, readiness assessments and compliance reviews.

For the Cyber Resilience Act in particular, we have developed a modular advisory offering that combines clearly defined scopes. The individual modules can be selected to suit each business’s specific needs, providing targeted support across the different stages of CRA implementation.

Please find the Tech Law Briefing by following this link.

Kind regards,

Your IP, Digital & Data Team of
ADVANT Beiten

The summer of AI in 2026 has brought a wide range of legal developments:

The courts have begun to cut a clear path through the legal thicket. The judgment of the Munich I Regional Court against Google offers a ray of hope to anyone who finds themselves misrepresented in an “AI Overview”. The same court also ruled in favour of the rights holders in the second action brought by GEMA against an AI provider. It applied not only German copyright law but also US copyright law. The Munich I Regional Court is thus likely to attract the attention of AI providers even beyond Germany’s borders.

The AI Act is also attracting international attention. The impact of the transparency obligations taking effect under the AI Act are already visible and noticeable across all media. Critics' early warnings now seem to be materialising: the sheer volume of labeling disclosures risks diluting their original warning function.

At least this foreword was written without the assistance of AI. Details of the latest developments can be found below. They may contain traces of AI but have been lovingly curated and checked by hand.

Kind regards,

Dr Andreas Lober
Head of the IP, IT & Data Practice Group

You can find the AI Briefing here.

Topics in this issue are:

Case law

• Federal Labour Court: No GDPR Right to a Complete Compliance Report
• Düsseldorf Administrative Court: Company Bears Burden of Proving Consent to Marketing Emails

Regulatory investigations and enforcement actions

• Netherlands: Fine of Approx. EUR 825 Million Against Uber for Automated Decision-Making
• Italy: EUR 1.7 Million Fine Following Social Engineering Attacks
• Italy: EUR 460,000 Fine for Excessive Retention of Employee Emails and Log Data

Opinions

• CNIL: Agentic AI Heightens Risks to Personal Data
• BFDI: Central Cookie Managers Instead of Cookie Banners

The Privacy Ticker is available in the download area below or under this link.

Topics in this issue are:

Case law

• EJ: No GDPR Prohibition on the Use of Unlawfully Obtained Data
• Federal Court of Justice: Personal Data of Third Parties Does not Need to be Redacted when Inspecting Files in Foreclosure Proceedings
• Federal Administrative Court: Health Insurance Plans Fall Under Art 9(2)(H) GDPR
• Regional Court of Freiburg: Art. 15 GDPR Covers Payment and Gaming History
• Berlin Regional Court I: Deutsche Wohnen Fine Reduced to EUR 900,000

Regulatory investigations and enforcement actions

• France: EUR 5 Million Fine Imposed on IQVIA for Health Data Violations
• Norway: EUR 1.8 Million Fine for Invalid Consent

Opinions

• Data Protection Authority Baden-Württemberg: AI Transcription of Municipal Council Meetings

The Privacy Ticker is available in the download area below.

Topics in this issue are:

Case law

• Administrative Court of Berlin: Video Surveillance and ID Checks in Public Outdoor Pools Permissible
• Regional Court of Dortmund: Art. 15 GDPR not an Investigative Tool for Gambling Games

Regulatory investigations and enforcement actions

• Netherlands: EUR 100 Million Fine Against Taxi App for Data Transfer to Russia
• Italy: EUR 12.5 Million Fine Against Poste Italiane and Postepay for App Monitoring

Opinions

• BFDI, Federal Network Agency and Hesse Publish Roadmap for AI in Medical Devices
• EU Commission: Recommendation for Privacy-Friendly Age Verification

Event highlights

• Webinar: The EU Cyber-Resilience Act - What Businesses Need to Do Now, 2 July from 11:00 - 12:00 CET

The Privacy Ticker is available under this link or in the download area below.

• EU Parliament/Council: Changes to the AI Regulation via the “Digital Omnibus”

Case law

• Higher Regional Court of Düsseldorf: AI-assisted modification of a photo does not automatically infringe copyright
• Regional Court of Frankfurt am Main: Copyright protection for a partially AI-generated song
• Berlin Administrative Court: AI-“invented” case law citations in a lawyer’s brief
• Augsburg Regional Court: AI client acquisition system prohibited
• Hamm Higher Regional Court: Operator liable for false statements made by an AI chatbot

Statement / Miscellaneous

• EU Commission: Draft guidelines on transparency obligations under Art. 50 AI Regulation
• EU Parliament: Copyright and generative AI
• BMDS: “Agentic AI Hub” launches pilot in municipalities
• EU Commission: Draft guidelines on the classification of high-risk AI systems

Event Highlight

• Digital Law Day on June 24 in Frankfurt
• Webinar: “The EU Cyber Resilience Act - What businesses need to do now” on July 2

Download the full newsletter below or under this link.

Topics in this issue are:

Case law

• Federal Court of Justice: Right to Information cannot be Asserted as a Derivative Right by Third Parties
• Administrative Court of Düsseldorf: transport Encryption for E-Mails is Generally Sufficient
• Regional Court of Krefeld: No Compensation for Zero-Day Exploit

Regulatory investigations and enforcement actions

• Italy: Fine of EUR 31.8 Million Against Bank for Unauthorized Access to Customer Data
• Italy: Fine of EUR 17.6 Million Against Bank for Passing on Customer Data
• Spain: Fine of EUR 950,000 for Inadmissible Processing of Biometric Data

Opinions

• EDPB Publishes DPIA Template
• Federal Council: Statement on Data Protection Regulations in the “Digital Omnibus”
• EDPB: Guidelines on the Processing of Personal Data for Scientific Research Purposes

The Privacy Ticker is available under this link or in the download area below.

In this AI Briefing, we will inform you about: 

Case Law:

• Higher Regional Court Hamburg: Text and Data Mining for AI Training Permissible in Case of Insufficient Opt-Out
• Regional Court Frankfurt: Liability of Google for “AI Overview” is not per se Excluded
• Local Court Munich on Copyright Protection for AI-Generated Graphics
• Administrative Court Hamburg: Use of ChatGPT Classified as Attempted Cheating Even Without Explicit Ban

Regulatory Actions

• EU Commission: Investigtation Launched into X Regarding Systemic Risks Posed by Grok

Opinions / Other:

• Joint Opinion of the EDPB and EDPS on the Digital Omnibus on AI
• EU Commission: First Draft of AI Transparency Code Published
• EU Commission: “Agentic AI” Report and Strategy for Autonomous AI Systems
• Stanford Study: Leading Models Reproduce Copyright Books Almost Entirely

You can find our briefing by downloading the associated files.

If you would like to discuss what these developments mean for your company, please do not hesitate to get in touch. We look forward to continuing the conversation – and wish you an engaging read.

In this AI Briefing, we will inform you about:

Changes in Legislation: 

• Draft Bill of the AI Act Implementation Law
• Italy: First EU Country with National AI Law

Case Law: 

• Munich Regional Court I: Inadmissible Use of Song Lyrics for AI Training and Output
• Hamburg Regional Court: AI Chatbot Grok not Spread Inaccurate Factual Assumptions
• Berlin Regional Court II: AI-Generated Voice Violates Personal Rights and Data Protection
• Cologne Local Court: Lawyer Uses AI to Invent Legal Rulings and Findings
• Great Britain: Barrister Uses AI and Cites Fictitious Judgements
• Great Britain: High Court London Dismisses Getty Images' Claim Against Stability AI
• Canada: AI Hallucinations Lead to Fine for Party

Opinions:

• DSK: Orientation Guidance Assesses RAG Method as Mitigating Action
• WhatsApp Changes General Terms and Conditions: Ban on General-Purpose AI Chatbots as of 2026

You can find the Briefing by downloading the associated files.