Legal prism · 2026-09-01

Legal prism — 2026-09-01

Archive
Updated: 2026-09-01 16:25
The day's news through a legal prism — grounded in our database of EU legislation.
Original — verbatim from the source Analysis — our legal insight (not a source)

Today's news through the legal prism (3)

Selected for a legal angle. For each: original → fact-check and legal basis → substantive analysis.
Filter by area of law:
Original — Pharmaphorum
Navigating Europe's AI Regulations in Pharma Copy link
Artificial intelligence is reshaping pharmaceutical research, with the global AI-in-pharma market projected to grow by over 40% annually through 2030. However, US drug developers face steep regulatory hurdles when bringing these tools to…
Analysis

Legal assessment

7. Regulation (EU) 2016/679 and Regulation (EU) 2024/1689 are directly applicable in all Member States. 8. By contrast, Directive 2001/83/EC is binding through national transposition. 9. Pursuant to Article 3(2) of Regulation (EU) 2016/679, US-based controllers must comply when monitoring the behaviour of data subjects within the Union. 10. To deploy high-risk AI systems, sponsors must satisfy several cumulative conditions:

  • establishing a comprehensive quality management system and conducting a conformity assessment.
Legal basis (3)
Regulation (EU) 2016/679 - General Data Protection Regulation (GDPR) Article 9 (statute)
and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to…
and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy; (j) processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) based on Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject.
Regulation (EU) 2016/679 - General Data Protection Regulation (GDPR) Article 21 (statute)
2002/58/EC, the data subject may exercise his or her right to object by automated means using technical specifications. 6. Where personal data are processed for…
2002/58/EC, the data subject may exercise his or her right to object by automated means using technical specifications. 6. Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1), the data subject, on grounds relating to his or her particular situation, shall have the right to object to processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
Council Directive 2011/16/EU on administrative cooperation in the field of taxation (DAC) Article 25 (statute)
the extent required in order to safeguard the interests referred to in point (e) of Article 23(1) of that Regulation. 2. Regulation (EU) 2018/1725 of the European…
the extent required in order to safeguard the interests referred to in point (e) of Article 23(1) of that Regulation. 2. Regulation (EU) 2018/1725 of the European Parliament and of the Council shall apply to any processing of personal data under this Directive by the Union institutions, bodies, offices and agencies. However, for the purposes of the correct application of this Directive, the scope of the obligations and rights provided for in Article 15, Article 16(1), and Articles 17 to 21, of Regulation (EU) 2018/1725, shall be restricted to the extent required in order to safeguard the interests referred to in point (c) of Article 25(1) of that Regulation.
Original — Notebookcheck
European Commission Places ChatGPT, Reddit, and Roblox Under Digital Services Act Rules Copy link
The European Commission has brought ChatGPT, Reddit, and Roblox under the stricter regulations of the Digital Services Act (DSA), the EU's primary tool for holding major tech companies accountable for content moderation and user safety…
Analysis

Core issue

The regulatory designation of ChatGPT, Reddit, and Roblox under the European Union's Digital Services Act (DSA) based on their active monthly user thresholds.

Legal assessment

Pursuant to Article 33 of the Digital Services Act (DSA), the European Commission designates online platforms and search engines with an average of 45 million or more monthly active users in the EU as Very Large Online Platforms (VLOPs) or Very Large Online Search Engines (VLOSEs). An analysis of the user metrics reveals the following classifications:

PlatformEU Monthly Users (Millions)Designation
ChatGPT159.1Very Large Online Search
Legal basis (3)
Council Directive 2011/16/EU on administrative cooperation in the field of taxation (DAC) Article 31 (statute)
in it. SECTION I DEFINED TERMS The following terms have the meaning set forth below: A. Reporting Platform Operators 1. ‘Platform’ means any software, including a…
in it. SECTION I DEFINED TERMS The following terms have the meaning set forth below: A. Reporting Platform Operators 1. ‘Platform’ means any software, including a website or a part thereof and applications, including mobile applications, accessible by users and allowing Sellers to be connected to other users for the purpose of carrying out a Relevant Activity, directly or indirectly, to such users. It also includes any arrangement for the collection and payment of a Consideration in respect of Relevant Activity. The term ‘Platform’ does not include software that without any further intervention in carrying out a Relevant Activity exclusively allows any of the following: (a) processing of payments in relation to Relevant Activity; (b) users to list or advertise a Relevant Activity; (c) redirecting or transferring of users to a Platform.
Regulation (EU) 2016/679 - General Data Protection Regulation (GDPR) Article 4 (statute)
Union but which substantially affects or is likely to substantially affect data subjects in more than one Member State. (24) ‘relevant and reasoned objection’ means an…
Union but which substantially affects or is likely to substantially affect data subjects in more than one Member State. (24) ‘relevant and reasoned objection’ means an objection to a draft decision as to whether there is an infringement of this Regulation, or whether envisaged action in relation to the controller or processor complies with this Regulation, which clearly demonstrates the significance of the risks posed by the draft decision as regards the fundamental rights and freedoms of data subjects and, where applicable, the free flow of personal data within the Union; (25) ‘information society service’ means a service as defined in point (b) of Article 1(1) of Directive (EU) 2015/1535 of the European Parliament and of the Council; (26) ‘international organisation’ means an organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries. law, or any other body which is set up by, or on the basis of, an agreement between two or more countries. CHAPTER II Principles
Regulation (EU) 2016/679 - General Data Protection Regulation (GDPR) Article 35 (statute)
behaviour in several Member States, or may substantially affect the free movement of personal data within the Union. 7. The assessment shall contain at least: (a) a…
behaviour in several Member States, or may substantially affect the free movement of personal data within the Union. 7. The assessment shall contain at least: (a) a systematic description of the envisaged processing operations and the purposes of the processing, including, where applicable, the legitimate interest pursued by the controller; (b) an assessment of the necessity and proportionality of the processing operations in relation to the purposes; (c) an assessment of the risks to the rights and freedoms of data subjects referred to in paragraph 1; and (d) the measures envisaged to address the risks, including safeguards, security measures and mechanisms to ensure the protection of personal data and to demonstrate compliance with this Regulation taking into account the rights and legitimate interests of data subjects and other persons concerned.
Original — heraldonline.co.zw
EU gives Zimbabwean coffee a clean bill of health Copy link
An extensive European Union due diligence assessment has cleared Zimbabwe's coffee sector, revealing that over 99 percent of mapped farms show zero deforestation. This ensures compliance with the EU Deforestation Regulation (EUDR), which…
Analysis

Core issue

This matter requires coffee operators and traders exporting to the European Union to establish rigorous traceability systems to prevent immediate market bans. While Zimbabwe's recent due diligence results indicate high compliance, the legal burden remains on individual operators to continuously prove that their supply chains are entirely deforestation-free. The core legal issue is whether Zimbabwean coffee exporters can lawfully place their products on the EU market under Regulation (EU) 2023/1115. Pursuant to this Regulation, coffee cannot be placed on the EU market unless it is deforestation-free, having been produced on land that has not been subject to deforestation after December 31, 2020. Additionally, exporters must comply with the packaging requirements under Regulation (EU) 2025/40 for any coffee products entering the EU market.

Legal assessment

Regulation (EU) 2023/1

Legal basis (3)
Regulation (EU) 2025/40 of the European Parliament and of the Council on packaging and packaging waste (PPWR) Article 71 (statute)
intended to come into contact with foods, and repealing Regulation (EC) No 282/2008 (OJ L 243, 20.9.2022, p. 3). (27) Regulation (EU) No 1025/2012 of the European…
intended to come into contact with foods, and repealing Regulation (EC) No 282/2008 (OJ L 243, 20.9.2022, p. 3). (27) Regulation (EU) No 1025/2012 of the European Parliament and of the Council of 25 October 2012 on European standardisation, amending Council Directives 89/686/EEC and 93/15/EEC and Directives 94/9/EC, 94/25/EC, 95/16/EC, 97/23/EC, 98/34/EC, 2004/22/EC, 2007/23/EC, 2009/23/EC and 2009/105/EC of the European Parliament and of the Council and repealing Council Decision 87/95/EEC and Decision No 1673/2006/EC of the European Parliament and of the Council (OJ L 316, 14.11.2012, p. 12).
Regulation (EU) 2025/40 of the European Parliament and of the Council on packaging and packaging waste (PPWR) Article 54 (statute)
average share of reusable sales packaging shall be taken into account for the calculation of the adjusted target level. 2. A Member State may take into account the…
average share of reusable sales packaging shall be taken into account for the calculation of the adjusted target level. 2. A Member State may take into account the quantity of wooden packaging that is repaired for re-use in the calculation of the targets laid down in Article 52(1), point (a), Article 52(1), point (b)(ii), Article 52(1), point (c), and Article 52(1), point (d)(ii). Section 7 Information and reporting
Packaging and packaging waste, amending Regulation (EU) 2019/1020 and Directive (EU) 2019/904, and repealing Directive 94/62/EC (committee_report)
expected benefits and contribution to achieving the Union’s climate, energy and circularity objectives are achieved. Therefore, a minimum number of checks of economic…
expected benefits and contribution to achieving the Union’s climate, energy and circularity objectives are achieved. Therefore, a minimum number of checks of economic operators placing packaging on the Union market should be established, and Regulation (EU) 2019/1020 of the European Parliament and of the Council73setting out a horizontal framework for market surveillance and control of products entering the Union market should apply to packaging for which sustainability requirements are set pursuant to this Regulation. __________________ __________________ 73 Regulation (EU) 2019/1020 of the European Parliament and of the Council of 20 June 2019 on market surveillance and compliance of products and amending Directive 2004/42/EC and Regulations (EC) No 765/2008 and (EU) No 305/2011 (OJ L 169, 25.6.2019, p. 1).