CEE Legal Matters
In-depth coverage of the news and newsmakers that shape Europe's emerging markets
Hungary was one of the quickest in the EU to begin implementing Directive (EU) 2022/2555 (NIS2) and one of those few EU member states that met the deadline for implementation. Nevertheless, the Hungarian NIS2 implementation is still incomplete, and the current implementing laws have caused some practical and interpretational issues for various companies.
On August 1, 2024, the Artificial Intelligence Act (Regulation (EU) 2024/1689, AI Act) came into effect, establishing several regulations concerning artificial intelligence systems within the European Union. Although the regulation is already in force, its requirements will gradually come into effect: the first deadlines are set for February and August 2025, while most of the requirements will apply starting August 2, 2026.
Text and data mining (TDM) has emerged as a powerful technique for extracting valuable insights from large datasets, particularly in fields such as research, healthcare, and marketing. However, as the capabilities of TDM continue to expand, it is essential to consider the legal frameworks that govern its application. In Poland, this involves a complex interplay of national legislation and European Union directives, particularly regarding intellectual property rights, data protection, and exceptions for research.
Recent court decisions in the technology, media, and telecommunications sector are expected to influence the way in which businesses manage, protect, and enforce their intellectual property rights and trade secrets in Bulgaria.
Austria’s data strategy is derived from the European data strategy. It aims to improve the framework conditions for the data economy and to promote the secure exchange and broad use of data.
Lithuania has updated its national legislation, with the revised Cybersecurity Law aligning with Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (NIS2 Directive). The new Cybersecurity Law took effect on October 18, 2024. The implementing legislation was adopted on November 6, 2024.
The NIS2 Directive is the EU-wide legislation on cybersecurity. It provides legal measures to increase the overall level of cybersecurity in the EU by modernizing the existing legal framework, broadening the scope of covered entities, and specifying high fines (2% or EUR 10 million for essential entities, or 1.4% of global annual turnover or EUR 7 million for important entities), directly involving the board members of covered organizations and holding them accountable for any breach of the legal framework established by the new Directive.
