Week of 14 September 2026
The EU AI Board's ninth meeting covered AI Act enforcement, AI literacy recommendations, and cybersecurity-AI intersection.
Key points
- Transparency obligations under the AI Act became applicable on 2 August 2026, with supporting Code of Practice and guidelines published.
- Limited direct Australian operational impact; useful as a signal of EU AI Act implementation trajectory.
19 EU Member States have jointly designed and pre-notified the first AI-focused IPCEI, coordinated by Germany.
Key points
- The project covers the full AI stack, targeting decentralised AI services and European digital sovereignty.
- Limited direct APS relevance; signals EU's strategic industrial AI investment posture worth monitoring.
EU KIDS Act prohibits social media access for under-13s and sets a minimum account age of 15 across the EU.
Key points
- Burden of proof shifts to platforms, which must now demonstrate services are safe and age-appropriate by design.
- Limited direct relevance to APS AI governance work; primarily an EU children's online safety regulation.
Week of 31 August 2026
The EU Commission has designated ChatGPT as a VLOSE and Reddit and Roblox as VLOPs under the DSA.
Key points
- Designated services have until January 2027 to comply with systemic risk assessment and mitigation obligations.
- AI governance implications are secondary here - DSA is primarily a platform regulation, not an AI-specific instrument.
EU Executive Vice-President Virkkunen attended G20 Innovation Ministerial meetings in North Carolina to discuss AI and emerging technologies.
Key points
- EU stressed trust-and-innovation alignment and called for international AI regulatory interoperability to reduce fragmentation.
- Australia attends G20 ministerials; EU-US-Japan-India bilateral signals may shape multilateral AI governance Australia engages with.
EU's ECCC opens €96 million Digital Europe Programme call for AI-enabled cybersecurity proposals, closing 14 January 2027.
Key points
- Two streams explicitly fund AI-based cybersecurity tools — €15M for public authorities and €20M for SMEs — alongside Cyber Resilience Act and AI Act compliance support.
- Limited direct relevance to Australian agencies; useful context on EU AI-cybersecurity investment trends for comparative policy awareness.
Week of 17 August 2026
EU Digital Europe Programme funds projects enabling secure data sharing across business, government, and research sectors.
Key points
- Initiatives support Common European Data Spaces and open public-sector datasets to drive AI innovation across 14 domains.
- Limited direct relevance to APS - useful context for EU data governance approaches that may inform future Australian policy.
Week of 3 August 2026
The fourth GPAI Signatory Taskforce meeting addressed Safety and Security and Copyright chapters of the GPAI Code of Practice.
Key points
- Post-market monitoring via model usage analysis was highlighted as key to systemic risk assessment under EU AI Act obligations.
- Discussion of 'marginal-risk' clauses - where providers may match unsafe competitor deployments - raised significant AI safety governance concerns.
Week of 27 July 2026
EU AI Act enforcement begins 2 August 2026, led by the AI Office alongside national authorities.
Key points
- New transparency rules require AI systems to disclose AI identity and label deepfakes with machine-readable marks.
- Over 180 organisations have signed the Code of Practice on AI-generated content transparency ahead of enforcement.
The EU AI Omnibus entered into force on 27 July 2026, amending the AI Act's compliance timelines and administrative requirements.
Key points
- High-risk AI system obligations are now deferred: Annex III applies from December 2027, Annex I from August 2028.
- New prohibitions on non-consensual nudification AI and expanded AI Office enforcement powers are also introduced.
Around 190 organisations signed the EU Code of Practice on AI-generated content transparency ahead of the August 2026 AI Act deadline.
Key points
- Major AI providers including Google, Microsoft, OpenAI, Anthropic, and Meta are among Section 1 signatories.
- No direct Australian regulatory parallel exists yet, but this signals a global norm emerging around AI content labelling obligations.
EU launches tender for up to seven AI Gigafactories, backed by €10 billion in public funding and €20 billion in private investment.
Key points
- Initiative aims to give European start-ups, SMEs, academia, and public authorities access to frontier AI training and inference infrastructure.
- Limited direct relevance to Australian agencies, but signals the scale of sovereign AI infrastructure investment globally.
EU Commission published implementation guidance for the Cyber Resilience Act, ahead of the December 2027 compliance deadline.
Key points
- The Act sets mandatory cybersecurity requirements for digital products; reporting obligations apply from 11 September 2026.
- This is an EU regulatory item with no direct Australian compliance obligation - limited APS relevance.
KT and Samsung have launched a 5G wearable safety monitoring service for industrial workers in South Korea.
Key points
- The service uses biometric and environmental sensors to detect heat stress, falls, and abnormal heart rate.
- No direct relevance to Australian AI governance or APS policy work - industrial IoT context only.
TIM Brasil is deploying AI-controlled antennas to optimise 5G network coverage across Brazilian state capitals.
Key points
- The item covers a Brazilian telco's commercial infrastructure rollout - no Australian policy or governance angle.
- Limited direct relevance to APS readers; published on an EU Digital Strategy channel with no EU regulatory content.
Week of 20 July 2026
European Commission published guidelines on AI Act transparency obligations, applying from 2 August 2026.
Key points
- Guidelines cover disclosure requirements for interactive AI systems, AI-generated content labelling, deepfakes, and emotion recognition systems.
- Australian agencies procuring or deploying EU-market AI tools may encounter these obligations through vendor compliance requirements.
EU-funded EUNOMIA.AI project will develop and test trustworthy GenAI solutions for public administrations across 13 Member States and Norway.
Key points
- Project will produce reusable implementation blueprints, governance models, and good practices for public-sector GenAI adoption.
- Australian agencies may find the governance models and pilots informative, though no direct APS obligation or parallel exists.
EuropAI pools demand from Netherlands, Denmark, Belgium, and Luxembourg to jointly procure and deploy sovereign GenAI for public administrations.
Key points
- The initiative covers three use-case clusters: legal simplification, urban/spatial analysis, and citizen-facing digital assistants.
- A shared procurement and compliance framework with reusable blueprints offers a potential model for APS cross-agency AI approaches.
Three EU-funded GenAI pilot projects for public administrations launched on 1 July 2026 under the Digital Europe Programme.
Key points
- Pilots cover topics including floods and droughts, legal/regulatory AI, and broader public-service GenAI adoption.
- Procurement models, methodologies, and implementation frameworks are intended to be scalable across European administrations.
EU Digital Europe Programme funds a multi-country GenAI pilot for flood and drought risk management in public administrations.
Key points
- Project integrates environmental data and forecasts into GenAI tools for civil protection authorities and emergency managers.
- No direct Australian involvement; useful as an international case study for AI in emergency and environmental management.
EU-funded MOSAIC pilot delivered AI-powered transcription, translation, and subtitling across eight European languages over 18 months.
Key points
- Federated architecture allows media organisations to share content while retaining ownership - a governance model worth noting for cross-agency AI content sharing.
- Limited direct relevance for APS agencies; primarily an EU media and democracy initiative with no immediate Australian parallel.
European Commission issued preliminary findings that TikTok violates the DSA by allowing minors' accounts to be public by default.
Key points
- The item is about online platform safety regulation for minors - AI is not a mechanism or subject here.
- Limited direct relevance to Australian federal AI governance work - included for context only.
European Commission fined Google €890 million for Digital Markets Act breaches covering search self-preferencing and app store steering.
Key points
- DMA enforcement concerns platform competition law, not AI governance - limited direct relevance to APS AI work.
- No Australian regulatory parallel to the DMA exists currently; item is context only for those tracking EU digital regulation broadly.
EU Commission fined AliExpress €550 million for failing DSA obligations on illegal and counterfeit products.
Key points
- The DSA enforcement action concerns platform risk management and consumer safety - not AI systems.
- Limited direct relevance to Australian federal AI governance work; included for regulatory context only.
Week of 13 July 2026
The EU Commission issued binding DMA specifications requiring Google to give rival AI services equal Android access.
Key points
- A second measure requires Google Search to share search data with third-party search engines at scale.
- No immediate Australian regulatory parallel exists, but DMA interoperability precedents influence global platform regulation debates.