EU digital strategy: Setting new standards for the digital age

Following on from the success of the General Data Protection Regulation (GDPR), the new European Union digital strategy includes a portfolio of acts that will shape how cyber risk and opportunity exist within the bloc.

The articles on this page will give you the key information your organisation needs to understand in order to operate effectively and in compliance with the evolving legislation. Many of these acts are currently in the process of being adopted by the EU but this is not a straight line between the idea and implementation — the information included here is up to date at the time of writing and will be refreshed when there is official information on changes.

On this page you can find insights related to acts including the Data Governance Act, Digital Markets Act (DMA), Digital Services Act (DSA), Data Act, and the Artificial Intelligence Act, as well as our comprehensive guide to the GDPR.

How will end users benefit from the EU digital strategy?

The EU suggests that the new regulations, specifically the DMA and DSA, will “create a safer and more open digital space for all users, where their fundamental rights are protected and where they have access to quality digital services at lower prices”.

These new regulations have been designed to improve the online experience for users inside the EU following surveys that discovered 65% of respondents felt the internet was not safe to use and 60% of respondents said that consumers don’t have sufficient choices and alternatives regarding online platforms.

The DSA will make it easier to report illegal content, goods, or services on online platforms, while the DMA should make it easier for consumers to switch platforms, if they wish to do so.

How should organisations respond to the EU digital strategy?

Organisations will need to assess the impact of the EU digital strategy on their business and business model, identifying where changes are needed and where further attention needs to be paid to current processes. This applies in particular to the four acts concerning data governance, digital services, AI, and data.

Trusted advisers can help organisations understand how these acts can be applied within their existing framework. As the EU's digital strategy continues to evolve, organisations can further collaborate with governing bodies on the interpretation of the regulations, particularly in the case of AI, where organisations could find it very difficult to continue to work with their current model under the proposed regulations.

The Digital Services Act

The Digital Services Act (DSA), which came into force in November 2022, regulates the obligations of digital services that act as intermediaries in their role of connecting consumers with goods, services, and content.

The Data Governance Act

A key pillar of the European digital strategy — the Data Governance Act (DGA) — aims to increase trust in data sharing, strengthen mechanisms to increase data availability, and overcome technical barriers to data re-use.

The Digital Markets Act

The Digital Markets Act (DMA) aims to prevent gatekeepers from imposing unfair conditions on companies and end users by ensuring the openness of important digital services. The DMA became applicable on 2 May 2023.

Data act

Currently, the Data Act (DA) is in the process of being adopted by the European Union parliament. The latest version aims to give users of objects or devices full access to the data — both personal and non-personal — they generate.

The European Union’s proposed artificial intelligence act

The regulation, which is currently being debated and amended, is based on various levels of risk involved in the use of artificial intelligence (AI). The European Commission and member states have decided to promote excellence in AI by joining forces on policy and investment.