AI & DIGITAL REGULATION

EU AI Act — Art. 6-51: High-Risk AI Systems fully applicable
reg_score: 47.9/100 — doc_type: REGULATION + legal_basis: 1 + deadline: 129 days
[source_id] eu_ai_office | EU AI Office — Shaping Europe's Digital Future | [url] https://eur-lex.europa.eu/eli/reg/2024/1689/oj#highrisk | doc_type: VERORDNUNG
legal_basis: ["(EU) 2024/1689"]
Article 113(1) of Regulation (EU) 2024/1689 mandates full application of high-risk AI system obligations by 2026-08-02 — 129 days from today.

German Draft Law for implementing Regulation (EU) 2024/1689 (AI Act)
reg_score: 40.1/100 — doc_type: REGULATION + legal_basis: 6
[source_id] brat_drs | Bundesrat Drucksachen | [url] https://www.bundesrat.de/SharedDocs/drucksachen/2026/0001-0100/97-1-26.html | doc_type: VERORDNUNG
legal_basis: ["(EU) 2016/797", "(EU) 2018/1139", "(EU) 2018/858", "(EU) 2019/2144", "(EU) 2020/1828", "(EU) 2024/1689"]
The German Bundesrat has received a draft law for the national implementation of the EU AI Act.

🔴 CRITICAL DEADLINE ALERT: 20 days — Consultation on draft guidelines on transparency obligations under the AI Act
reg_score: 39.4/100 — doc_type: CONSULTATION + legal_basis: 1 + deadline: 20 days
[source_id] eu_ai_office | EU AI Office — Shaping Europe's Digital Future | [url] https://digital-strategy.ec.europa.eu/en/consultations/consultation-draft-guidelines-transparency-obligations-under-ai-act | doc_type: KONSULTATION
legal_basis: ["AI Act"]
The EU AI Office has opened a consultation on draft guidelines concerning transparency obligations, with a submission deadline of 2026-06-03.

###

FINANCIAL REGULATION

⚠ ACTION REQUIRED: 85 days — EBA consults on RTS for risk weights on specialised lending exposures
reg_score: 50.5/100 — doc_type: REGULATION + legal_basis: 1 + deadline: 85 days
[source_id] eba | EBA News | [url] https://www.eba.europa.eu/publications-and-media/press-releases/eba-consults-amendments-rts-assignment-risk-weights-specialised-lending-exposures-under-supervisory | doc_type: VERORDNUNG
legal_basis: ["CRR 3"]
The EBA is consulting on amendments to the RTS on assigning risk weights to specialised lending exposures under the Supervisory Slotting Criteria Approach, with comments due by 2026-08-07.

🔴 CRITICAL DEADLINE ALERT: 15 days — ESMA consults on guidelines on endorsement under the ESG Ratings Regulation
reg_score: 47.2/100 — doc_type: REGULATION + legal_basis: 3 + deadline: 15 days
[source_id] esma | ESMA News | [url] https://www.esma.europa.eu/press-news/esma-news/esma-consults-guidelines-endorsement-under-esg-ratings-regulation | doc_type: VERORDNUNG
legal_basis: ["(EU) 2019/2088", "(EU) 2023/2859", "Regulation (EU) 2024/3005"]
ESMA has launched a public consultation on proposed guidelines for the endorsement of ESG ratings, with a deadline for feedback on 2026-05-29.

ESMA launches call for evidence on restricted subscription and private credit ratings
reg_score: 43.5/100 — doc_type: REGULATION + deadline: 17 days
[source_id] esma | ESMA News | [url] https://www.esma.europa.eu/press-news/esma-news/esma-launches-call-evidence-restricted-subscription-and-private-credit-ratings | doc_type: VERORDNUNG
ESMA is seeking evidence on the use of restricted subscription and private credit ratings in the EU, with a submission deadline of 2026-05-31.

###

DATA PROTECTION & PRIVACY

German Federal Administrative Court rules BfDI lawsuit for access to BND orders inadmissible
reg_score: 45.0/100 — doc_type: JUDGMENT
[source_id] crawl_bverwg | BVerwG Pressemitteilungen | [url] https://www.bverwg.de/de/pm/2026/15 | doc_type: URTEIL
The German Federal Administrative Court (BVerwG) has ruled that the lawsuit by the Federal Commissioner for Data Protection and Freedom of Information (BfDI) seeking access to orders from the President of the Federal Intelligence Service (BND) is inadmissible.

⚠ ACTION REQUIRED: 55 days — US Department of Justice offers Privacy Considerations Training
reg_score: 41.5/100 — doc_type: DECISION + deadline: 55 days
[source_id] doj | US DOJ Justice News | [url] https://www.justice.gov/oip/event/privacy-considerations-training-1 | doc_type: BESCHEID
The U.S. Department of Justice's Office of Information Policy has scheduled a "Privacy Considerations Training" event for 2026-07-08.

EDPB publishes 2025 annual report, highlighting guidance and dialogue
reg_score: 38.9/100 — doc_type: REGULATION + legal_basis: 5
[source_id] edpb | EDPB News | [url] https://www.edpb.europa.eu/news/news/2026/edpb-annual-report-2025-supporting-stakeholders-through-guidance-and-dialogue_en | doc_type: VERORDNUNG
legal_basis: ["AI act", "Art. 60 GDPR", "Art. 64(1) GDPR", "GDPR", "gdpr"]
The European Data Protection Board's 2025 annual report details its activities in supporting stakeholders through guidance, including interactions with the AI Act and GDPR.

###

CYBERSECURITY ALERTS

German BaFin imposes fine on Volksbank Senden eG
reg_score: 36.3/100 — doc_type: DECISION
[source_id] bafin_massn | BaFin Maßnahmen | [url] https://www.bafin.de/SharedDocs/Veroeffentlichungen/DE/Massnahmen/60b_KWG_84_WpIG_und_57_GwG/meldung_2026_05_11_volksbank_senden_eg.html?cms_expanded=true | doc_type: BESCHEID
The German Federal Financial Supervisory Authority (BaFin) has imposed an administrative fine on Volksbank Senden eG.

⚠ LOW REGULATORY WEIGHT — doc_type: WARNUNG — treat as signal only
[UPDATE] [medium] Vercel Next.js: Multiple vulnerabilities
reg_score: 32.1/100 — doc_type: WARNING
[source_id] bsi_cert | BSI CERT-Bund Sicherheitshinweise | [url] https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0748 | doc_type: WARNUNG
The German Federal Office for Information Security (BSI) has issued an updated warning regarding multiple vulnerabilities in Vercel Next.js.

⚠ LOW REGULATORY WEIGHT — doc_type: WARNUNG — treat as signal only
[NEW] [high] Apache HTTP Server: Multiple vulnerabilities
reg_score: 32.1/100 — doc_type: WARNING
[source_id] bsi_cert | BSI CERT-Bund Sicherheitshinweise | [url] https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1354 | doc_type: WARNUNG
The German Federal Office for Information Security (BSI) has issued a new high-risk warning concerning multiple vulnerabilities in the Apache HTTP Server.

###

HEALTH & ENERGY

⚠ ACTION REQUIRED: 48 days — German industry criticizes implementation of amended Industrial Emissions Directive (IED)
reg_score: 46.4/100 — doc_type: REGULATION + legal_basis: 1 + deadline: 48 days
[source_id] bt_aktuell | Bundestag Aktuelle Themen | [url] https://www.bundestag.de/dokumente/textarchiv/2026/kw16-pa-umwelt-industrieemission-1164710 | doc_type: VERORDNUNG
legal_basis: ["(EU) 2024/1785"]
Industry representatives have voiced criticism during a public hearing in the German Bundestag regarding the national implementation of the amended IED, with a deadline for transposition on 2026-07-01.

Proposal to amend EU regulations on medical devices and in-vitro diagnostics
reg_score: 44.3/100 — doc_type: REGULATION + legal_basis: 4
[source_id] brat_drs | Bundesrat Drucksachen | [url] https://www.bundesrat.de/SharedDocs/drucksachen/2026/0101-0200/152-26(B).html | doc_type: VERORDNUNG
legal_basis: ["(EU) 2017/745", "(EU) 2017/746", "(EU) 2022/123", "(EU) 2024/1689"]
A proposal has been submitted to the German Bundesrat to amend Regulations (EU) 2017/745 and (EU) 2017/746 to simplify rules for medical devices and IVDs.

Proposal for a European Biotech Regulation
reg_score: 43.0/100 — doc_type: REGULATION + legal_basis: 3
[source_id] brat_vg | Bundesrat Beratungsvorgänge | [url] https://www.bundesrat.de/SharedDocs/beratungsvorgaenge/2026/0201-0300/0283-26.html | doc_type: VERORDNUNG
legal_basis: ["(EU) 2019/6", "(EU) 2024/1938", "(EU) 2024/795"]
The German Bundesrat is reviewing a proposal for a Regulation to establish a framework for strengthening biotechnology and biomanufacturing in the Union, particularly in the health sector.

###

HEALTH & ENERGY

⚠ ACTION REQUIRED: 48 days — German industry criticizes implementation of amended Industrial Emissions Directive (IED)
reg_score: 46.4/100 — doc_type: REGULATION + legal_basis: 1 + deadline: 48 days
[source_id] bt_aktuell | Bundestag Aktuelle Themen | [url] https://www.bundestag.de/dokumente/textarchiv/2026/kw16-pa-umwelt-industrieemission-1164710 | doc_type: VERORDNUNG
legal_basis: ["(EU) 2024/1785"]
Industry representatives have voiced criticism during a public hearing in the German Bundestag regarding the national implementation of the amended IED, with a deadline for transposition on 2026-07-01.

Proposal to amend EU regulations on medical devices and in-vitro diagnostics
reg_score: 44.3/100 — doc_type: REGULATION + legal_basis: 4
[source_id] brat_drs | Bundesrat Drucksachen | [url] https://www.bundesrat.de/SharedDocs/drucksachen/2026/0101-0200/152-26(B).html | doc_type: VERORDNUNG
legal_basis: ["(EU) 2017/745", "(EU) 2017/746", "(EU) 2022/123", "(EU) 2024/1689"]
A proposal has been submitted to the German Bundesrat to amend Regulations (EU) 2017/745 and (EU) 2017/746 to simplify rules for medical devices and IVDs.

Proposal for a European Biotech Regulation
reg_score: 43.0/100 — doc_type: REGULATION + legal_basis: 3
[source_id] brat_vg | Bundesrat Beratungsvorgänge | [url] https://www.bundesrat.de/SharedDocs/beratungsvorgaenge/2026/0201-0300/0283-26.html | doc_type: VERORDNUNG
legal_basis: ["(EU) 2019/6", "(EU) 2024/1938", "(EU) 2024/795"]
The German Bundesrat is reviewing a proposal for a Regulation to establish a framework for strengthening biotechnology and biomanufacturing in the Union, particularly in the health sector.

###

SANCTIONS INTELLIGENCE

US OFAC publishes notice on Privacy Act of 1974; System of Records
reg_score: 41.0/100 — doc_type: SANCTION
[source_id] fr_ofac | FedReg — OFAC | [url] https://www.federalregister.gov/documents/2024/08/19/2024-18457/privacy-act-of-1974-system-of-records | doc_type: SANKTION
The Department of the Treasury's Office of Foreign Assets Control (OFAC) has issued a notice regarding its system of records under the Privacy Act of 1974.

US DOJ publishes notice on Certification Process for State Capital Counsel Systems
reg_score: 41.0/100 — doc_type: SANCTION
[source_id] fr_doj | FedReg — DOJ | [url] https://www.federalregister.gov/documents/2026/03/16/2026-05134/certification-process-for-state-capital-counsel-systems | doc_type: SANKTION
The Department of Justice has published a final rule regarding the process for certifying that state mechanisms for appointing and compensating counsel in capital cases comply with statutory and constitutional requirements.

Russian citizen sentenced for hacking U.S. companies
reg_score: 36.0/100 — doc_type: SANCTION
[source_id] doj | US DOJ Justice News | [url] https://www.justice.gov/opa/pr/russian-citizen-sentenced-prison-hacking-us-companies-and-enabling-major-cybercrime-groups | doc_type: SANKTION
A Russian national has been sentenced to prison for hacking into U.S. companies, which enabled cybercrime groups to conduct extortion activities.

###