AI & DIGITAL REGULATION

* EU AI Act — Art. 6-51: High-Risk AI Systems Fully Applicable
reg_score: 47.9/100 — doc_type: VERORDNUNG (2.0x) + legal_basis: 1 + deadline_proximity: 129 days
[eu_ai_office] | EU AI Office — Shaping Europe's Digital Future | https://eur-lex.europa.eu/eli/reg/2024/1689/oj#highrisk | doc_type: VERORDNUNG
legal_basis: ["(EU) 2024/1689"]
Article 113(1) of Regulation (EU) 2024/1689 mandates full application of rules for high-risk AI systems by August 2, 2026 — 129 days from today.

* EDPB Annual Report 2025: Supporting Stakeholders Through Guidance and Dialogue
reg_score: 41.4/100 — doc_type: VERORDNUNG (2.0x) + legal_basis: 5
[edpb] | EDPB News | https://www.edpb.europa.eu/news/news/2026/edpb-annual-report-2025-supporting-stakeholders-through-guidance-and-dialogue_en | doc_type: VERORDNUNG
legal_basis: ["AI act", "Art. 60 GDPR", "Art. 64(1) GDPR", "GDPR", "gdpr"]
The European Data Protection Board has published its 2025 annual report, detailing its activities in providing guidance on data protection, including intersections with the AI Act.

* Draft Law for the Implementation of Regulation (EU) 2024/1689 (AI Act)
reg_score: 40.1/100 — doc_type: VERORDNUNG (2.0x) + legal_basis: 6
[brat_drs] | Bundesrat Drucksachen | https://www.bundesrat.de/SharedDocs/drucksachen/2026/0001-0100/97-1-26.html | doc_type: VERORDNUNG
legal_basis: ["(EU) 2016/797", "(EU) 2018/1139", "(EU) 2018/858", "(EU) 2019/2144", "(EU) 2020/1828", "(EU) 2024/1689"]
The German Bundesrat has received a draft law dated March 16, 2026, for the national implementation of the EU AI Act.

###

FINANCIAL REGULATION

* 🔴 CRITICAL DEADLINE ALERT: 21 days — ESMA Consultation, ESG Ratings Regulation
ESMA consults on guidelines on endorsement under the ESG Ratings Regulation
reg_score: 47.2/100 — doc_type: VERORDNUNG (2.0x) + legal_basis: 3 + deadline_proximity: 21 days
[esma] | ESMA News | https://www.esma.europa.eu/press-news/esma-news/esma-consults-guidelines-endorsement-under-esg-ratings-regulation | doc_type: VERORDNUNG
legal_basis: ["(EU) 2019/2088", "(EU) 2023/2859", "Regulation (EU) 2024/3005"]
ESMA has launched a public consultation on draft guidelines concerning the endorsement of ESG ratings; the consultation period closes on May 29, 2026.

* ⚠ DEADLINE ALERT: 40 days — EBA Consultation, Capital Requirements Regulation
The EBA consults on revised Guidelines on limits on exposures to shadow banking entities under the CRR
reg_score: 45.1/100 — doc_type: VERORDNUNG (2.0x) + deadline_proximity: 40 days
[eba] | EBA News | https://www.eba.europa.eu/publications-and-media/press-releases/eba-consults-revised-guidelines-limits-exposures-shadow-banking-entities-under-capital-requirements | doc_type: VERORDNUNG
legal_basis: []
The European Banking Authority is consulting on revised guidelines for exposure limits to shadow banking entities; the deadline for comments is June 17, 2026.

* Proposal for a Regulation Amending Multiple Financial Market Regulations for Capital Market Integration
reg_score: 43.9/100 — doc_type: VERORDNUNG (2.0x) + legal_basis: 9
[brat_drs] | Bundesrat Drucksachen | https://www.bundesrat.de/SharedDocs/drucksachen/2025/0701-0800/754-25(B).html | doc_type: VERORDNUNG
legal_basis: ["(EU) 2015/2365", "(EU) 2016/1011", "(EU) 2017/2402", "(EU) 2019/1156", "(EU) 2021/23", "(EU) 2022/858", "(EU) 2023/1114", "(EU) 2023/2631", "(EU) 2024/3005"]
The German Bundesrat published a proposal on March 6, 2026, for a regulation to amend multiple existing EU financial regulations to advance capital market integration and supervision.

###

DATA PROTECTION & PRIVACY

* German Federal Administrative Court: Data Protection Commissioner's Lawsuit for Access to BND Orders Inadmissible
reg_score: 45.0/100 — doc_type: URTEIL (1.8x)
[crawl_bverwg] | BVerwG Pressemitteilungen | https://www.bverwg.de/de/pm/2026/15 | doc_type: URTEIL
legal_basis: []
The German Federal Administrative Court (BVerwG) ruled that the lawsuit by the Federal Commissioner for Data Protection and Freedom of Information seeking access to orders from the President of the Federal Intelligence Service (BND) is inadmissible.

* ⚠ DEADLINE ALERT: 61 days — US DOJ Training Event
Privacy Considerations Training
reg_score: 41.5/100 — doc_type: BESCHEID (1.6x) + deadline_proximity: 61 days
[doj] | US DOJ Justice News | https://www.justice.gov/oip/event/privacy-considerations-training-1 | doc_type: BESCHEID
legal_basis: []
The U.S. Department of Justice's Office of Information Policy will hold a training session on privacy considerations on July 8, 2026.

* EDPB Annual Report 2025: Supporting Stakeholders Through Guidance and Dialogue
reg_score: 41.4/100 — doc_type: VERORDNUNG (2.0x) + legal_basis: 5
[edpb] | EDPB News | https://www.edpb.europa.eu/news/news/2026/edpb-annual-report-2025-supporting-stakeholders-through-guidance-and-dialogue_en | doc_type: VERORDNUNG
legal_basis: ["AI act", "Art. 60 GDPR", "Art. 64(1) GDPR", "GDPR", "gdpr"]
The EDPB's 2025 report outlines its role in issuing guidance and opinions under the GDPR, including cooperation on emerging technologies like AI.

###

CYBERSECURITY ALERTS

* [NEW] [high] Xen and Citrix Systems XenServer: Multiple Vulnerabilities
reg_score: 32.1/100 — doc_type: WARNUNG (1.1x)
[bsi_cert] | BSI CERT-Bund Sicherheitshinweise | https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1306 | doc_type: WARNUNG
legal_basis: []
The German Federal Office for Information Security (BSI) has issued a high-risk warning regarding multiple vulnerabilities in Xen and Citrix Systems XenServer.

* [UPDATE] [critical] ConnectWise ScreenConnect: Multiple Vulnerabilities
reg_score: 32.1/100 — doc_type: WARNUNG (1.1x)
[bsi_cert] | BSI CERT-Bund Sicherheitshinweise | https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0468 | doc_type: WARNUNG
legal_basis: []
The BSI has updated its critical-risk warning concerning multiple vulnerabilities in ConnectWise ScreenConnect remote access software.

* Two Americans Sentenced for ALPHV/BlackCat Ransomware Attacks
reg_score: 33.1/100 — doc_type: BESCHEID (1.6x)
[doj] | US DOJ Justice News | https://www.justice.gov/opa/pr/two-americans-who-attacked-multiple-us-victims-using-alphv-blackcat-ransomware-sentenced | doc_type: BESCHEID
legal_basis: []
The U.S. Department of Justice announced the sentencing of two individuals for their roles in deploying ALPHV/BlackCat ransomware against multiple U.S. victims.

###

HEALTH & ENERGY

* ⚠ DEADLINE ALERT: 54 days — Industrial Emissions Directive
Industry criticizes implementation of the amended IED Directive
reg_score: 46.4/100 — doc_type: VERORDNUNG (2.0x) + legal_basis: 1 + deadline_proximity: 54 days
[bt_aktuell] | Bundestag Aktuelle Themen | https://www.bundestag.de/dokumente/textarchiv/2026/kw16-pa-umwelt-industrieemission-1164710 | doc_type: VERORDNUNG
legal_basis: ["(EU) 2024/1785"]
The German Bundestag reports on industry criticism regarding the national implementation of the amended Industrial Emissions Directive (IED), which has an effective date of July 1, 2026.

* Proposal to Amend Regulations on Medical Devices and In Vitro Diagnostics
reg_score: 40.1/100 — doc_type: VERORDNUNG (2.0x) + legal_basis: 4
[brat_drs] | Bundesrat Drucksachen | https://www.bundesrat.de/SharedDocs/drucksachen/2026/0101-0200/152-1-26.html | doc_type: VERORDNUNG
legal_basis: ["(EU) 2017/745", "(EU) 2017/746", "(EU) 2022/123", "(EU) 2024/1689"]
The German Bundesrat is reviewing a proposal to amend Regulations (EU) 2017/745 (MDR) and (EU) 2017/746 (IVDR) to simplify rules and reduce administrative burden.

* Implementation of the European Gas and Hydrogen Internal Market Package
reg_score: 37.6/100 — doc_type: VERORDNUNG (2.0x) + legal_basis: 2
[bt_aktuell] | Bundestag Aktuelle Themen | https://www.bundestag.de/dokumente/textarchiv/2026/kw17-de-energiewirtschaftsgesetz-1165924 | doc_type: VERORDNUNG
legal_basis: ["(EU) 2024/1788", "(EU) 2024/1789"]
The German Bundestag has passed legislation to implement the EU's gas and hydrogen package, amending the German Energy Industry Act (Energiewirtschaftsgesetz).

###

HEALTH & ENERGY

* ⚠ DEADLINE ALERT: 54 days — Industrial Emissions Directive
Industry criticizes implementation of the amended IED Directive
reg_score: 46.4/100 — doc_type: VERORDNUNG (2.0x) + legal_basis: 1 + deadline_proximity: 54 days
[bt_aktuell] | Bundestag Aktuelle Themen | https://www.bundestag.de/dokumente/textarchiv/2026/kw16-pa-umwelt-industrieemission-1164710 | doc_type: VERORDNUNG
legal_basis: ["(EU) 2024/1785"]
The German Bundestag reports on industry criticism regarding the national implementation of the amended Industrial Emissions Directive (IED), which has an effective date of July 1, 2026.

* Proposal to Amend Regulations on Medical Devices and In Vitro Diagnostics
reg_score: 40.1/100 — doc_type: VERORDNUNG (2.0x) + legal_basis: 4
[brat_drs] | Bundesrat Drucksachen | https://www.bundesrat.de/SharedDocs/drucksachen/2026/0101-0200/152-1-26.html | doc_type: VERORDNUNG
legal_basis: ["(EU) 2017/745", "(EU) 2017/746", "(EU) 2022/123", "(EU) 2024/1689"]
The German Bundesrat is reviewing a proposal to amend Regulations (EU) 2017/745 (MDR) and (EU) 2017/746 (IVDR) to simplify rules and reduce administrative burden.

* Implementation of the European Gas and Hydrogen Internal Market Package
reg_score: 37.6/100 — doc_type: VERORDNUNG (2.0x) + legal_basis: 2
[bt_aktuell] | Bundestag Aktuelle Themen | https://www.bundestag.de/dokumente/textarchiv/2026/kw17-de-energiewirtschaftsgesetz-1165924 | doc_type: VERORDNUNG
legal_basis: ["(EU) 2024/1788", "(EU) 2024/1789"]
The German Bundestag has passed legislation to implement the EU's gas and hydrogen package, amending the German Energy Industry Act (Energiewirtschaftsgesetz).

###

SANCTIONS INTELLIGENCE

* Privacy Act of 1974; System of Records
reg_score: 41.0/100 — doc_type: SANKTION (1.5x)
[fr_ofac] | FedReg — OFAC | https://www.federalregister.gov/documents/2024/08/19/2024-18457/privacy-act-of-1974-system-of-records | doc_type: SANKTION
legal_basis: []
The U.S. Department of the Treasury published a notice of a modified system of records related to the Office of Foreign Assets Control (OFAC).

* Certification Process for State Capital Counsel Systems
reg_score: 41.0/100 — doc_type: SANKTION (1.5x)
[fr_doj] | FedReg — DOJ | https://www.federalregister.gov/documents/2026/03/16/2026-05134/certification-process-for-state-capital-counsel-systems | doc_type: SANKTION
legal_basis: []
The U.S. Department of Justice issued a final rule establishing procedures for the certification of state mechanisms for appointing and compensating counsel in state capital cases.

* Russian Citizen Sentenced for Hacking U.S. Companies
reg_score: 36.0/100 — doc_type: SANKTION (1.5x)
[doj] | US DOJ Justice News | https://www.justice.gov/opa/pr/russian-citizen-sentenced-prison-hacking-us-companies-and-enabling-major-cybercrime-groups | doc_type: SANKTION
legal_basis: []
The U.S. Department of Justice announced the prison sentence for a Russian national convicted of hacking into U.S. corporate networks and facilitating extortion schemes.

###