[{"source":"BEREC Office","url":"https://www.berec.europa.eu/en/news/press-releases/berec-presents-its-assessment-of-the-digital-networks-act-proposal","titre":"BEREC presents its assessment of the Digital Networks Act proposal","pubDate":"Thu, 11 Jun 2026 10:23:49 +0200","id":2947754,"description":"BEREC presents its assessment of the Digital Networks Act proposal yannick.stephan Wed, 10/06/2026 - 18:07 Press Releases Europe’s electronic communications framework is entering a pivotal phase of reform, with the proposed Digital Networks Act (DNA ) set to update the regulatory framework for connectivity across the EU. At the BEREC public debriefing on 10 June, the BEREC Chair, Marko Mismas (AKOS, Slovenia), and the Working Group Co-Chairs presented BEREC’s assessment of the DNA proposal, outlining key regulatory considerations that emerged from its analysis. BEREC welcomes the ambition of modernising the EU connectivity framework and supporting resilient, sustainable and high-quality digital networks. At the same time, the assessment highlights areas where further refinement may be needed to ensure that the future framework strengthens rather than adds unnecessary complexity to the internal market for electronic communications. BEREC has developed thematic papers examining key elements of the proposal in greater depth, supporting evidence-based input to the co-legislators. To further contribute to the policy debate, BEREC will publish three additional thematic papers by the end of June. BEREC remains committed to providing its technical and regulatory expertise to help shape a competitive, innovative and future-proof digital Europe. 5G slicing guidance BEREC experts look forward to receiving stakeholders’ input to the public consultation on the draft further guidance on 5G network slicing by 6 August 2026. The draft guidance aims to provide greater regulatory certainty for market players and support innovation in 5G services, while safeguarding open internet principles. Building on the existing Open Internet framework, the guidance will assist providers in assessing whether network slicing-based services comply with the Regulation, including in relation to internet access and specialised services. Reflecting the principle of technological neutrality, the approach is intended to remain relevant beyond 5G and to apply to other technologies that use comparable quality-of-service mechanisms. Call for inputs on roaming BEREC has issued a call for inputs regarding its work on roaming. This call aims to support the preparation of BEREC’s Opinion for the European Commission on the upcoming review of the EU Roaming Regulation and the Implementing Regulation on Fair Use Policy and Sustainability, which is scheduled for submission by the first quarter of 2027. Building on its 2025 Opinion, BEREC invites stakeholders to provide new information, evidence, and perspectives by 21 August 2026. In addition, following the consultation on possible amendments to the BEREC Roaming Benchmark Data Collection procedure, BEREC decided to maintain the current quarterly data collection approach. However, the expansion of the Roam-Like-at-Home regime to Ukraine and Moldova on 1 January 2026, together with the simplification proposals in BEREC’s 2025 Opinion on the Roaming Regulation, requires an update of the roaming data collection template. BEREC therefore launched a call for input on the revised template and invites operators to submit their comments by 3 July 2026. Emergency communications resilience Ensuring uninterrupted access to emergency services for end users remains a critical priority as 2G and 3G mobile networks are progressively phased out across Europe. During its latest plenary meeting, the Heads of the European regulators for electronic communications discussed and adopted a BEREC statement addressing concerns that some devices may fail to connect to emergency communications services, including 112, once legacy networks are switched off. The statement aims to raise awareness of the issue and calls for closer cooperation across the entire communications ecosystem. BEREC underlines the need for further investigation, improved detection of potential failures, and greater transparency among stakeholders to help safeguard the reliability of emergency communications throughout the technological"},{"source":"The Cybersecurity Review Europe","url":"https://www.thecybersecurityrevieweurope.com/news/key-drivers-behind-the-rising-demand-for-virtual-cisos--nwid-1282.html","description":"Key Drivers Behind the Rising Demand for Virtual CISOs Wednesday, April 22,2026 Businesses are navigating the challenges of a digital-first environment, which is driving an increased demand for expert-driven cybersecurity solutions. The virtual chief information security officer (vCISO) has become essential for organizations seeking to enhance their cybersecurity resilience while managing costs effectively. Effective security leadership is more crucial than ever, particularly in light of the evolving threat landscape, which includes ransomware attacks and data breaches. Addressing Cybersecurity Challenges Organizations face a significant escalation in cyberattacks as hackers continually evolve their tactics. This dynamic landscape makes it challenging for businesses to maintain effective defenses. A vCISO plays a pivotal role by providing specialized guidance in threat intelligence, risk management, and incident response. By working with a vCISO, companies can proactively identify vulnerabilities and implement comprehensive security frameworks tailored to their needs. This partnership empowers organizations to build stronger defenses against the rising tide of cyber threats. Compliance with various regulations remains a formidable hurdle for many businesses. Non-compliance can incur severe penalties and damage reputations, prompting the need for expert oversight. A vCISO helps organizations navigate complex regulatory landscapes and ensures ongoing assessments and strategic roadmaps to meet compliance needs. By implementing best practices aligned with the latest standards, businesses can mitigate risks and enhance their security posture. A Cost-Effective Solution for Security Leadership Hiring a full-time chief information security officer can be a significant financial burden, especially for small and mid-sized businesses (SMBs) with limited resources. A vCISO offers a cost-effective alternative, providing high-level security expertise without the expenses associated with a permanent hire. Organizations can customize vCISO services, enabling them to pay only for the cybersecurity guidance they require, thus allowing for more efficient allocation of resources. The digital transformation driven by adopting technologies like cloud computing, remote work, and the Internet of Things has further amplified the need for vCISOs. These advancements expand attack surfaces, making traditional security approaches insufficient. A vCISO aids organizations in implementing modern cybersecurity frameworks, ensuring robust data protection across various environments, including cloud services and remote workforces. Additionally, the ongoing shortage of cybersecurity professionals enhances the appeal of vCISOs. Many companies struggle to find and retain in-house talent, but a vCISO can provide immediate access to seasoned security experts with extensive industry knowledge. This accessibility allows businesses to improve their security strategy without the delays associated with lengthy hiring processes. The flexibility and scalability offered by vCISO services make them suitable for organizations of all sizes. Whether a startup outlines its initial cybersecurity strategy or an established firm seeks ongoing risk assessments, vCISOs can deliver tailored security solutions that effectively address specific business objectives.","titre":"Read more","pubDate":"Tue, 28 Apr 2026 10:47:09 +0200","id":2852311},{"url":"https://www.edpb.europa.eu/news/news/2026/marking-10-years-gdpr-evolution-european-data-protection-landscape_en","source":"EDPB News","id":2850552,"pubDate":"Mon, 27 Apr 2026 14:14:32 +0200","titre":"Marking 10 years of the GDPR: the evolution of the European data protection landscape","description":"Brussels, 27 April – Today marks the 10th anniversary of the GDPR’s adoption, the first comprehensive data protection framework spanning an entire continent, establishing clear rights for individuals and obligations for organisations across Europe. The moment that led to the creation of the EDPB The GDPR led to the establishment of the European Data Protection Board (EDPB) on 25 May 2018, replacing the Article 29 Working Party that was previously in charge of dealing with issues relating to the protection of personal data. The GDPR gave the Data Protection Authorities (DPAs) stronger enforcement powers and expanded the scope of their work from focusing mainly on national compliance complaints to routinely dealing with cross-border cases. In the past 10 years, the 31 European DPAs comprising the EDPB have worked together to ensure the consistent enforcement of the GDPR and a harmonised data protection approach across Europe.   A key role in an evolving digital landscape Today, the GDPR is part of a broader and evolving European digital framework, alongside other digital laws such as the Digital Services Act, the Digital Markets Act, and the AI Act . In a world shaped by artificial intelligence, platform economies, and increasing data-driven innovation, the GDPR ensures that technological progress goes hand in hand with the protection of individuals’ fundamental rights . An inspiration for the rest of the world The impact of the GDPR has extended far beyond Europe’s borders, inspiring similar frameworks across the globe and contributing to a growing international recognition of privacy as a fundamental right .   How the GDPR has shaped the data protection landscape: insights from Data Protection Authorities Have you ever wondered what the data protection landscape looked like before the GDPR and how DPAs prepared for its entry into force? How has life for Europeans changed since its adoption? Watch the video for insights and testimonies from Data Protection Authorities which contributed to the shaping of the data protection landscape in Europe.   Sorry, your browser doesn't support embedded"},{"source":"Les Cahiers Scientifiques du Transport - Scientific Papers in Transportation - Dernières publications","url":"https://doi.org/10.46298/cst.11574","titre":"Modelling the governance of European medium-sized port-cities","pubDate":"Thu, 09 Apr 2026 14:03:48 +0200","id":2815873,"description":"The paper presents a model designed to analyse port governance. It considers that thestakeholders ability to adopt cooperative behaviors constitutes the key element to portdevelopment. Its focus is on medium-sized European ports and fifteen cases were studied. Eachterritory was first subject to a qualitative survey and analysis of the contents of local stakeholdersdiscourse (over 80 interviews conducted). The material is rich, allowing for the comparisonbetween two or even three ports, yet the delicate nature of the relations brought to light addsconsiderable complexity to the comparison within a larger ensemble. The paper, therefore,proposes a semi-automatic treatment which helps to mitigate this difficulty by means of acomputer model based on graph theory. It involves a modelling system based on the relationsbetween the entities of the system. In this context, the relations between stakeholders wereanalysed in order to create typologies and eventually envisage some standard models ofgovernance. In order to territorialize the subject, six typical cases out of fifteen were used: LeHavre, Nantes-Saint Nazaire, Dunkirk (France), Gdynia (Poland), Klaipėda (Lituania), Hamina-Kotka (Finland).All these port environments modelled according to a single format (i.e. a graph) led to theapplication of a certain number of metrics which enables them to be compared. Two mainmetrics were presented in the framework of this paper for illustrative purposes: “Density” and“S_metric”. These metrics originating in graph theory, coupled with other indicators (distributionof degrees and number of hubs per port), allowed to measure the relationships' intensity and thedistribution of these intensities among the stakeholders, and to identify the main stakeholders orconversely the least"},{"url":"https://www.berec.europa.eu/en/news/press-releases/berec-provides-early-assessment-of-the-digital-networks-act-welcoming-ambition-while-highlighting-areas-for-improvement","source":"BEREC Office","pubDate":"Mon, 30 Mar 2026 19:33:01 +0200","id":2793006,"titre":"BEREC Provides Early Assessment of the Digital Networks Act, Welcoming Ambition While Highlighting Areas for Improvement","description":"BEREC Provides Early Assessment of the Digital Networks Act, Welcoming Ambition While Highlighting Areas for Improvement yannick.stephan Mon, 30/03/2026 - 12:57 Press Releases The Body of European Regulators for Electronic Communications (BEREC) today published its early assessment of the European Commission’s proposal for a Digital Networks Act (DNA). BEREC welcomes the overarching ambition to modernise the regulatory framework for Europe’s connectivity sector and to support resilient, sustainable and high quality digital networks. At the same time, BEREC identifies important areas where further refinement is needed to ensure that the DNA strengthens, rather than complicates, Europe’s internal market for electronic communications. BEREC stands ready to provide its regulatory expertise in order to avoid undue complexity or uncertainty and to ensure that the final framework delivers a competitive, connected and resilient digital Europe. BEREC welcomes the updated objectives introduced by the DNA , including resilience, sustainability, in addition to the existing objectives addressed by the European Electronic Communications Code. While BEREC supports the ambition to strengthen the competitiveness of the EU digital sector, it highlights that this can only be achieved through an effective and robust competition framework. It further notes that the proposal introduces elements of greater centralisation that require further clarification to ensure they contribute effectively to a well functioning internal market. While BEREC recognises the Commission’s intention to streamline the General Authorisation procedures, the proposed Single Passport mechanism raises concerns from several perspectives. In particular, by concentrating significant enforcement responsibilities in the Member State of first notification, the system risks forum shopping, uneven supervisory burdens and slower enforcement. Overall, BEREC considers that the proposal could introduce greater operational complexity, administrative burden and legal uncertainty, without offering clear benefits over the current straightforward authorisation regime. BEREC also notes that the DNA proposes major changes to spectrum management , including treating spectrum as an EU‑level resource and introducing common rules for fees, long‑duration rights and satellite authorisation. While these measures aim at harmonisation, BEREC warns that the proposed single market procedure, which includes a Commission veto, signifies a notable trend towards centralisation and raises certain concerns. BEREC also cautions that some proposals in particular the introduction of unlimited license duration and automatic renewals, risk favouring existing rights holders and reducing market contestability. On the other hand, it welcomes it proposed role in the market shaping aspects of spectrum assignment. On satellite authorisation, BEREC supports EU coordination but stresses the need for alignment with ITU‑R rules. The DNA’s move to treat numbering resources as a common Union asset introduces a more centralised approach, and while BEREC sees potential benefits in greater harmonisation, it notes that key concepts—such as an EU wide numbering plan and pan European numbering ranges—require further clarification. BEREC also considers that additional analysis of demand, use cases and operational impacts would help ensure that any new framework is aligned with the needs of end users, operators and regulators. BEREC welcomes the preservation of the Significant Market Power regime, a cornerstone of the EU regulatory model, alongside the continued availability of symmetric access tools . Nonetheless, several DNA proposals, including new sequencing rules for remedies, the potential removal of the Recommendation on Relevant Markets, and expanded Commission veto powers could reduce the ability of NRAs to address national market needs. BEREC supports the goal of enabling a smooth transition from copper to fibre networks and recognises improvements made to"},{"description":"Brussels, 19 March - The EDPB has launched its Coordinated Enforcement Framework (CEF) action for 2026*. Following a year-long coordinated action on the right to erasure in 2025 , the CEF's focus this year will shift to compliance with the obligations of transparency and information under the GDPR . The GDPR ensures that individuals are informed when their data is being processed (under Art. 12, 13 and 14). This right to be informed is a core element of transparency and ensures that individuals have more control over their data. Next steps During 2026, 25 Data Protection Authorities (DPAs) across Europe will take part in this initiative. They will look closely to assess the compliance of controllers with their transparency obligations under the GDPR. Participating DPAs will soon contact controllers from different sectors across Europe, either through enforcement actions or fact-finding exercises. In the latter case, they might also decide to undertake additional follow-up actions if needed. During the second half of the year, participating DPAs will share and discuss their findings together, with a view to aggregate the results of their national actions and generate deeper insight into the topic. A consolidated report will then be drafted and submitted for adoption by the EDPB, allowing for targeted follow-ups on both national and EU levels. Background The CEF is a key action of the EDPB under its 2024-2027 Strategy , aimed at streamlining enforcement and cooperation among DPAs. In 2023, the EDPB published the report on its first coordinated action on the use of cloud-based services by the public sector . In 2024, the EDPB also published the report on the outcome of the second coordinated action on the designation and position of Data Protection Officers . In 2025, the EDPB issued the report on its third coordination action on the implementation of the right of access . In 2026, the EDPB has adopted a report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) .   Note to editors: *The Board selected this topic during its October 2025 plenary","id":2769535,"pubDate":"Thu, 19 Mar 2026 14:12:59 +0100","titre":"CEF 2026: EDPB launches coordinated enforcement action on transparency and information obligations under the GDPR","url":"https://www.edpb.europa.eu/news/news/2026/cef-2026-edpb-launches-coordinated-enforcement-action-transparency-and-information_en","source":"EDPB News"},{"url":"https://www.edpb.europa.eu/news/news/2026/edpb-identifies-challenges-hindering-full-implementation-right-erasure_en","source":"EDPB News","pubDate":"Wed, 18 Feb 2026 15:27:14 +0100","id":2703238,"titre":"EDPB identifies challenges hindering the full implementation of the right to erasure","description":"Brussels, 18 February - The European Data Protection Board (EDPB) has adopted a  report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) .  The  Board selected this topic  as it is one of the most frequently exercised GDPR rights and one about which DPAs frequently receive complaints from individuals. The main objectives of this coordinated action are to ensure that the right to erasure is effectively exercised by individuals in Europe and understand how controllers comply with this right in practice. In addition, the EDPB identified good practices and the most important related challenges, with the aim of providing further guidance on this topic.  Throughout 2025, 32 DPAs across Europe took part in this initiative. More specifically, 9 DPAs have initiated new formal investigations or have continued ongoing ones, and 23 DPAs carried out a fact-finding exercise. A total of 764 controllers across Europe responded to the action, ranging from small and medium-sized enterprises (SMEs) to big companies active in many different industries and fields, as well as various types of public entities. The results of these national actions have been aggregated and analysed together allowing for targeted follow-up on both national and EU level.   Areas of improvement and main challenges The report lists the issues that were identified, along with a series of recommendations addressed to controllers, to help them implement the right to erasure. Seven recurring main challenges were identified by DPAs. The results confirmed some of the findings of the 2024 coordinated action on the right of access , for example when it comes to the lack of appropriate internal procedures to handle requests, or the lack of sufficient information provided to individuals. In addition, participating DPAs reported specific findings related to the reliance by some controllers on inefficient anonymisation techniques to handle erasure requests as an alternative to deletion. DPAs also noted inconsistent practices, and the difficulties faced by controllers regarding the determination of retention periods and the deletion of personal data in the context of back-ups. In addition, as the right to erasure is not an absolute right, some controllers face difficulties in assessing and applying the conditions for the exercise of this right, including in carrying out the different balancing tests between the right to erasure and other rights and freedoms.   Follow-up to help organisations comply  Extensive guidance, documents and templates exist at national level to help controllers comply with the right of erasure and help individuals exercise this right. In line with the Helsinki Statement’s objectives of making GDPR compliance easier and ensuring consistent interpretation and enforcement across Europe, the extensive guidance and templates already available at national level will be leveraged at EDPB level where appropriate.   Background and next steps The CEF is a key action of the EDPB under its 2024-2027 Strategy , aimed at streamlining enforcement and cooperation among DPAs.  In 2023, the EDPB published the report on its first coordinated action on the  use of cloud-based services by the public sector . In 2024, the EDPB also published the report on the outcome of the second coordinated action on the  designation and position of Data Protection Officers . In 2025, the EDPB issued the report on its third coordination action on the  implementation of the right of access . The CEF 2026 action will be on the  obligations of transparency and information under the GDPR .   For further information: DA DPA:   EDPB vedtager rapport om dataansvarliges overholdelse af retten til sletning EL DPA: Ολοκλήρωση της συντονισμένης δράσης του"},{"id":2099053,"pubDate":"Tue, 06 May 2025 15:51:59 +0200","titre":"European Patent Organisation and extension of adequacy decisions for the UK: EDPB adopts opinions","description":"Brussels, 06 May - During its latest plenary, the European Data Protection Board (EDPB) adopted an opinion on the European Commission’s draft adequacy decision under the GDPR concerning the European Patent Organisation (EPO) . In addition, the Board adopted an opinion on the European Commission’s proposal to extend the validity of the UK adequacy decisions under the GDPR and the Law Enforcement Directive (LED) . Finally, the EDPB agreed to grant the status of observer to the Personal Data Protection Agency of Bosnia and Herzegovina.   Adequate protection of personal data by the EPO At the European Commission’s request, the Board adopted an opinion on the Commission’s draft adequacy decision regarding the European Patent Organisation (EPO). Once formally adopted by the Commission, this will be the first adequacy decision concerning an international organisation and not a country or a region. An adequacy decision is a key-mechanism in EU data protection legislation which allows the European Commission to determine whether a third country or an international organisation offers an adequate level of data protection. The effect of such a decision is that personal data can flow freely from Europe to that third country or international organisation. EDPB Chair, Anu Talus, said: “The EDPB welcomes the Commission’s initiative to work on the first adequacy decision concerning an international organisation. This decision shows how the legal framework of such organisations can be recognised as ensuring an adequate level of protection on the basis of Art.45 GDPR. The EDPB underlines the importance of ongoing dialogue between the Commission and international organisations, with a view to developing this category of adequacy decisions in addition to those relating to third countries.” In its opinion, the Board positively notes that the EPO data protection framework is largely aligned with the European Union data protection framework, including on data protection rights and principles. This shows that the GDPR and, in particular, its transfer provisions, can facilitate safe data flows from Europe to international organisations, while taking into account their status.   Six-month extension of the UK adequacy decisions The EDPB opinion, requested by the European Commission, addresses the proposed extension of the two UK adequacy decisions under the GDPR and the LED, which are set to expire on 27 June 2025. The opinion only concerns the proposed 6-month extension of these adequacy decisions and does not address the level of protection for personal data afforded in the UK, which will be examined by the EDPB following the Commission’s assessment, and if the renewal of the UK adequacy decisions is proposed. Since the UK‘s data protection reform is still pending in the UK parliament, the EDPB recognises the need for a technical and time-limited extension of the adequacy decisions until 27 December 2025.This will give the European Commission sufficient time to evaluate the updated UK legal framework once it has been adopted.   The EDPB stresses that this extension is exceptional and is due to the ongoing legislative developments in the UK. It should not, in principle, be further prolonged. The Board recalls the validity of its opinions 14/2021 and 15/2021 on the two UK adequacy decisions, adopted in April 2021, and invites the European Commission to take them into account in its future assessments.  The Board also recalls the Commission’s obligation to monitor all relevant developments in the UK during the extension period.   New observer to the EDPB’s activities Finally, EDPB members agreed to grant observer status to the EDPB’s activities to the Bosnia and Herzegovina Data Protection Authority, in line with Art. 8 EDPB Rules of Procedure .","url":"https://www.edpb.europa.eu/news/news/2025/european-patent-organisation-and-extension-adequacy-decisions-uk-edpb-adopts_en","source":"EDPB News"},{"url":"https://www.edpb.europa.eu/news/news/2025/cef-2024-edpb-identifies-challenges-full-implementation-right-access_en","source":"EDPB News","description":"Brussels, 20 January - The European Data Protection Board (EDPB) has adopted a report on the implementation of the right of access by controllers . The report summarises the outcome of a series of coordinated national actions carried out in 2024 under the Coordinated Enforcement Framework (CEF). It lists the issues that were observed for some controllers, along with a series of recommendations to help them implement the right of access. A central element is controllers’ awareness of the EDPB Guidelines 01/2022 on data subjects rights – Right of access and whether these guidelines were followed in practice. EDPB Deputy Chair Zdravko Vukíc said: “The CEF is a valuable initiative that helps strengthen the cooperation among Data Protection Authorities (DPAs): by tackling selected topics in a coordinated fashion, they achieve greater efficiency and more consistency. How controllers implement the right of access lies at the heart of data protection and it is one of the most frequently exercised data subject rights.” Throughout 2024, 30 DPAs across Europe launched coordinated investigations into the compliance of controllers with the right of access, by opening formal investigations, assessing whether a formal investigation was warranted and/or carrying out fact-finding exercises.  A total of 1,185 controllers, consisting of small and medium-sized enterprises (SMEs) and big companies active in different industries and fields, as well as various types of public entities, responded to the action. Areas of improvement and main challenges The results suggest that more awareness raising about Guidelines 01/2022 is necessary , both at national and EU level, as the guidelines help controllers implement the right of access, explain how exercising this right can be made easier, and list the exceptions and limitations of the right to access. As a result of the 2024 CEF action, seven challenges were identified. One of them is the lack of documented internal procedures to handle access requests. In addition, inconsistent and excessive interpretations of the limits to the right of access were also observed, such as overly relying on certain exceptions to automatically refuse access requests. Another example is the barriers that individuals could encounter when exercising their right of access, such as  formal requirements or being requested to provide excessive identification documents. For each challenge identified, the report provides a list of non-binding recommendations to be taken into account by controllers and DPAs. Positive findings Despite the existing challenges, two thirds of participating DPAs evaluated the level of compliance of responding controllers with respect to the right of access from ‘average’ to ‘high’. One important factor identified as having an impact on the level of compliance was the volume of access requests received by controllers, as well as the size of the organisation. More specifically, large-sized controllers or controllers receiving more requests were more likely to reach a higher level of compliance than small organisations with less resources. Positive findings were observed across Europe. These include the implementation of best practices by controllers, such as user-friendly online forms enabling individuals to submit an access request easily as well as self-service systems to allow individuals to autonomously download their personal data in a few clicks and at any time. Background and next steps The CEF is a key action of the EDPB under its 2024-2027 Strategy, aimed at streamlining enforcement and cooperation among DPAs.  In the past three years, two previous CEF actions were carried out. The results of these national actions are aggregated and analysed together to generate deeper insight into the topic and allowing for targeted follow-up on both national and EU level. In 2023, the EDPB published the report on its first coordinated action on the use of cloud-based services by the public sector . In 2024, the EDPB also published the","pubDate":"Mon, 20 Jan 2025 15:49:16 +0100","id":1857297,"titre":"CEF 2024: EDPB identifies challenges to the full implementation of the right of access"}]