Skip to main content

What’s New at Eris Law Advokatbyrå AB 

On 17 November 2025, Eris Law Advokatbyrå participated in the international Lexing Network AI Act Conference in London. The event brought together leading experts to discuss the EU AI Act’s phased enforcement, sector-specific implications, global reach, penalties, and how the Act aligns with other major EU digital regulations such as GDPR, DSA, DMA and NIS2.

Katarina Bohm Hallkvist Presented on Sector Impacts

Our colleague Katarina Bohm Hallkvist delivered a presentation on “How the AI Act Affects Different Sectors,” highlighting compliance expectations in:

  • Finance – including obligations for high-risk AI systems used in credit scoring and insurance.

  • Healthcare – focusing on AI for diagnostics and patient assessments and the associated transparency and governance requirements.

  • Automotive – covering high-risk AI in ADAS, autonomous driving and safety-critical vehicle systems.

Eris Law continues to support organizations in adapting to the new regulatory landscape and preparing for the AI Act’s upcoming enforcement milestones.

Fintech

Stronger consumer protection in online contracts for financial services: The Swedish Government has submitted a bill (Lagrådsremiss) proposing to strengthen consumer protection in distance contracts for financial services and instruments, including better rights of withdrawal and clearer information obligations. The proposals aim to align with the updated EU Consumer Rights Directive and include protections against misleading websites and apps, as well as ensuring consumers receive explanations that help determine whether a service fits their needs. The new rules are planned to take effect on 19 June 2026. 

Danish payments startup Flatpay hits unicorn status with €1.5 billion valuation: Flatpay, a Copenhagen-based fintech focused on card terminals and subscription-free point-of-sale solutions for small and medium-sized merchants, has become a unicorn after raising around €145-146 million and achieving a valuation of approximately €1.5 billion (about $1.7 billion). The company now serves around 60,000 merchants, reported annual recurring revenue of over €100 million as of October 2025 and plans aggressive growth across Europe including new markets beyond its current footprint. 

SiegPath crowned Most Innovative Fintech 2025 with new AI-driven trading platform: SiegPath has been awarded the title “Most Innovative Fintech 2025” at AI Expo Europe for its AI-powered trading ecosystem, SiegAI™, which integrates advisory tools, real-time risk management and advanced research capabilities. The company also introduced its new “Shark Plan,” a fast-track programme that allows traders to access funded accounts more quickly under strict risk guidelines. With these launches, SiegPath positions itself as a leading innovator in the AI-driven trading and fintech sector. 

GDPR

 EU Commission draft threatens to dismantle core GDPR protections: An internal draft by the European Commission under the so-called “Digital Omnibus” reform proposes sweeping changes to the General Data Protection Regulation (GDPR), including narrowing the definition of “personal data”, reducing protections for sensitive data, and granting broader access for AI firms to use personal data. The draft also suggests limiting key rights like access, correction and deletion to data-protection-specific purposes, thereby weakening enforcement and opening large regulatory gaps. Privacy advocates warn that if adopted, the reform would reverse two decades of case law and undermine fundamental rights enshrined in EU law. 

EU-US Data Privacy Framework heads back up for appeal as IAPP weighs in: Following the Philippe Latombe decision to appeal the EU‑US Data Privacy Framework ruling, the International Association of Privacy Professionals (IAPP) has flagged the case as a critical test for the future of trans-Atlantic data-flows. While the EU’s General Court upheld the framework’s adequacy, the IAPP warns that unresolved issues such as oversight of U.S. intelligence collection and the independence of the review body, may yet be subject to challenge. For companies relying on this framework, the ruling offers temporary respite but not definitive stability. 

Digital Omnibus reform risks deregulating GDPR, say privacy advocates: A coalition of privacy organisations, including NOYB, EDRi and Irish Council for Civil Liberties, has issued an open letter to the European Commission warning that its proposed “Digital Omnibus” reform goes far beyond mere simplification and instead threatens to dismantle core protections under the General Data Protection Regulation by altering definitions of personal data, reducing rights and giving AI-firms broad new access. The letter argues that the reform lacks proper evidence, impact assessments and public consultation, making the proposed changes potentially incompatible with fundamental rights enshrined in the European Charter of Fundamental Rights. Organisations now call on the Commission to halt the fast-track process and engage in meaningful dialogue before any amendments proceed.  

Telecom

EU advisory body backs mobile operators in upper 6 GHz spectrum battle: An advisory body to the Radio Spectrum Policy Group has recommended allocating approximately 540 MHz of the upper 6 GHz band to mobile operators, granting them a major portion of the spectrum key for future 6G deployment. The proposal counters strong demands from tech companies pushing for the entire band for Wi-Fi and other internet services, and leaves roughly 160 MHz in limbo until the 2027 World Radiocommunication Conference 2027 decides. The recommendation will be sent to the European Conference of Postal and Telecommunications Administrations (CEPT), which will set the detailed conditions for usage across 46 European countries. 

Sweden’s Plan for Faster Nationwide Broadband: The Swedish Government’s inquiry SOU 2025:110 recommends a range of regulatory and infrastructure adjustments to accelerate the roll-out of gigabit-class broadband across the country. The report highlights the need to amend current laws to align with EU rules on gigabit infrastructure, clarify processes for cross-border deployment and establish a national digital access point. It also sets out proposals for facilitating access to critical infrastructure while safeguarding state-security interests and ensuring effective planning and approvals for operators. 

Huawei Eyes Europe Despite Rising Geopolitical Pressure: Huawei is emphasizing its commitment to Europe, committing further investment in the enterprise segment and highlighting the continent as a key growth market amidst escalating tensions between the EU, U.S. and China. The company is leveraging its partner ecosystem and recent infrastructure innovations to reassure European stakeholders and navigate evolving regulatory and geopolitical headwinds. Its strategy marks a shift toward enterprise-services and away from consumer dependency, as it adapts to the changing international landscape. 

AI 

The Government of Sweden endorses the EU Strategy to Boost AI Adoption and Competitiveness: The European Commission has outlined a strategy to accelerate AI integration across key sectors, aiming to strengthen competitiveness for European industry and support small and medium-sized enterprises, including those in Sweden. The plan promotes an “AI-first” approach in areas where AI can transform problem-solving in both business and public services, and is structured around three pillars: sector-specific flagship initiatives, addressing cross-cutting challenges, and establishing a common governance mechanism. Flagship actions include AI-driven screening centers and expert networks in healthcare, advancing generative AI in robotics, supporting digital twins and sector-specific AI models in manufacturing, and deploying AI tools for defense, space, and cybersecurity, backed by approximately €1 billion in funding from existing EU programs. 

Introducing ChatGPT Atlas: A ChatGPT-Powered Browser: OpenAI has launched ChatGPT Atlas, a web browser built from the ground up with ChatGPT at its core, designed to provide context-aware assistance across all your web activities without requiring copying or switching between tabs. The browser features optional “Browser Memories” that let ChatGPT recall relevant context from visited pages to enhance future responses, fully controlled and deletable by users. Additionally, the integrated “Agent Mode,” now in preview for Plus, Pro, and Business users, enables ChatGPT to perform web-based tasks—such as booking appointments, navigating sites, and executing multi-step workflows—while adhering to strict safety safeguards and user authorizations.  

European Commission Launches Work on Code of Practice for AI-Generated Content Labelling: The European Commission has initiated efforts to develop a Code of Practice aimed at marking and labeling AI-generated content to enhance transparency and trust online. This initiative seeks to involve stakeholders from industry, civil society, and academia to establish practical guidelines for identifying synthetic media, including text, images, and audio. The Code will complement the EU’s broader AI governance framework under the AI Act, promoting accountability and reducing risks of misinformation and manipulation in digital environments. 

Cybersecurity

Regulatory Changes in Preparation for the Upcoming Cybersecurity Act: The Swedish Post and Telecom Authority (PTS) plans to repeal existing security regulations—PTSFS 2021:3 and PTSFS 2022:11—because their provisions will be incorporated into the new Cybersecurity Act (CSL), which takes effect on 15 January 2026. While PTS is drafting new rules on security measures, incident reporting, total defense, data retention, and privacy, these will not be finalized before the law’s commencement, so operators must comply with the core CSL requirements in the interim. Stakeholders can provide feedback on the repeal of current regulations by 7 November and on proposed replacement rules by 21 November, ahead of a final decision expected at the end of the year. 

Proposal for National Digital Health Infrastructure and Implementation of EHDS Primary Use: The Swedish government has released its fourth interim report under the national mission (S 2024:A), proposing the development of a national, API‑based digital infrastructure to enable secure sharing of health data within the healthcare system and to implement the European Health Data Space (EHDS) regulation for primary use. Key components of the proposal include a central patient data index (PDI) to locate patient records, a national service catalog (NTK) with standardized interfaces, and a centralized opt-out register, with healthcare providers required to maintain and update essential data. It also designates the National eHealth Agency to manage a national access service for healthcare professionals. 

European Supervisory Authorities Designate Critical ICT Third-Party Providers Under DORA: The European Supervisory Authorities (ESAs) have announced the first designations of critical ICT third-party service providers under the Digital Operational Resilience Act (DORA), marking a major step in strengthening financial sector resilience. These providers, which include major cloud and technology firms, will now be subject to direct oversight by the ESAs to ensure compliance with stringent risk management, security, and incident reporting requirements. The move aims to reduce systemic risks linked to digital dependencies and enhance operational continuity across EU financial institutions. The list includes Amazon web Services EMEA Sarl, Orange SA, SAP SE, Accenture plc and a few more tech companies.

Intellectual Property

Masimo Wins $634M Verdict Against Apple Over Watch Patent Dispute: Masimo has secured a $634 million jury award in its long-running patent battle with Apple, centered on blood oxygen monitoring technology used in Apple Watch models. The verdict underscores the growing tension between medical device innovators and consumer tech giants, as Masimo argued Apple misappropriated proprietary sensor designs after failed partnership talks. Apple faces mounting scrutiny over its wearable technology patents, with the latest ruling potentially influencing future licensing negotiations and product development strategies. 

European Innovation Act: Removing Barriers to Market for EU Innovators: The European Commission plans to adopt the European Innovation Act in 2026 to create a cross-sectoral legal framework that accelerates the commercialization of research and innovative solutions across the EU. The Act aims to address persistent challenges such as underutilization of intellectual property rights, fragmented regulations, and limited access to finance, talent, and infrastructure, while promoting collaboration between industry, academia, and public bodies. By fostering regulatory sandboxes, innovation-friendly procurement, and coordinated investment strategies, the initiative seeks to strengthen Europe’s competitiveness, close the innovation gap, and enable innovators—including those in Sweden—to scale within the Single Market and compete globally.  

EPO Launches New Digital Library for Innovation Knowledge: The European Patent Office (EPO) has introduced a new digital library designed to serve as a central hub for innovation-related resources, including patent information, research materials, and technology insights. This platform aims to make knowledge more accessible to innovators, businesses, and policymakers by offering curated content and advanced search capabilities. By improving access to intellectual property data and fostering collaboration, the initiative supports Europe’s efforts to strengthen innovation ecosystems and accelerate technological development. 

Tariffs &Trade War

US lifts tariffs on coffee, beef and tropical fruit amid inflation pressure: The US administration has announced the removal of tariffs on major staples such as coffee, beef and tropical fruit in response to rising grocery prices and voter backlash over inflation. The decision marks a sharp reversal of earlier trade policy and reflects increasing pressure on the government to ease cost-of-living burdens for consumers. The move is expected to ease import-cost pressures, though some analysts say structural issues in supply chains and domestic production still leave price risks in place. 

Trump Pledges Tariff-Funded Dividend Payments for Americans in 2026: Donald Trump announced that Americans could begin receiving dividend payments funded by tariff revenues as early as mid-2026, with checks of about $2,000 targeted at low and middle-income households. The plan relies on increased tariff collections from his trade policies and shifts the narrative toward using trade revenue as direct citizen benefit. While politically ambitious, the proposal faces significant hurdles including congressional approval, legal review of the tariffs themselves, and questions about the sufficiency of funds. 

Switzerland and U.S. on the verge of major trade deal lowering tariffs: The United States and Switzerland are close to finalizing a trade agreement that would reduce U.S. tariffs on Swiss exports from 39% to 15%, while Swiss firms commit to invest around $200 billion in the U.S. by 2028. Switzerland’s watchmaking, machinery and precision technology sectors stand to gain competitiveness by aligning tariffs with those enjoyed by EU producers. The deal also sets a precedent for shifting manufacturing and jobs to the U.S., as part of Switzerland’s effort to rebalance its trade surplus. 

Upcoming Events

  • AI Sweden – Blueprints for Data-Driven Success: Operationalizing AI in Practice

Date:  November 25, 2025

Time: 13:00–17:00 (CEST)

Location: Online

Registration: Link 

  • IMY Annual Conference of Data Protection Officers (DSOs) 

Date:  December 10, 2025 

Time: 9:00 am –12:00 pm (CEST) 

Location: Live webinar 

Registration: Link 

  • 10th Cybersecurity Standardisation Conference 

Date: Mar 12, 2026 

Time: 9:00am to 5:00pm (CEST) 

Location: Brussels Marriott Hotel Grand Place, Brussels, Belgium 

Registration: Link 

Meet The Team

Katarina Bohm Hallkvist

CEO & Advokat

Editor-in-Chief

Andres Alma

Senior Legal Advisor

Reporteur

Ariunzaya Munkhbat

Cybersecurity Legal Consultant

Reporteur

Leave a Reply