European Union

H&M Fined for GDPR Marketing Violations

The Swedish Agency for Privacy Protection (IMY) has fined H&M SEK 350,000 for violating GDPR. The company failed to properly handle requests from individuals wishing to opt out of direct marketing, making it unnecessarily difficult for them to exercise their rights.

ESMA Consults on CCP Collateral and Investment Policy

The European Securities and Markets Authority (ESMA) has launched a public consultation on proposed changes to central counterparty (CCP) collateral and investment policies, stemming from EMIR 3. The consultation seeks feedback on the acceptance of various guarantees as collateral and the eligibility of debt instruments for CCP investment policies, with a deadline for responses on April 30, 2026.

ESMA Withdraws MiFID II/MiFIR Market Data Guidelines

The European Securities and Markets Authority (ESMA) has withdrawn its guidelines on MiFID II/MiFIR obligations concerning market data. This action aligns the regulatory framework with new technical standards that entered into force in November 2025, aiming to simplify rules for market participants.

AEPD Resolution on Rights Procedure and Labor Dispute

The Spanish Data Protection Agency (AEPD) has issued a resolution regarding a data rights procedure initiated on June 2, 2025. The case involves a former employee's claims against FENG SHENG SUSHI, S.L. concerning alleged falsification of a labor contract, denial of access to personal data, and improper use of banking information.

EU Legislation and Notices - February 23, 2026

The EU published several legislative acts and decisions on February 23, 2026. These include implementing regulations concerning restrictive measures in Russia, amendments to active substance approvals for biocidal products, and a decision on Iceland's participation in the Union Space Programme.

European AI Innovation Month Announced

The European Commission and the Irish Presidency of the Council have announced the European AI Innovation Month, a series of events scheduled from mid-October to mid-November 2026. The initiative aims to discuss and showcase AI development and deployment in Europe, culminating in the European Apply AI Summit.

ESMA Supervisory Briefing on CCP AAR Representativeness Obligation

The European Securities and Markets Authority (ESMA) has issued a supervisory briefing clarifying the representativeness obligation for Central Counterparties (CCPs) regarding their Approved Alternative Arrangements (AARs). This guidance aims to ensure consistent application of the obligation across the EU.

ESMA Supervisory Briefing on AAR Representativeness Obligation

The European Securities and Markets Authority (ESMA) has published a supervisory briefing clarifying expectations for counterparties regarding the active account requirement (AAR) representativeness obligation. The briefing provides guidance on identifying relevant subcategories, reporting trades, and includes an example of compliance.

Garante Privacy Sanctions eCampus, Rejects Pescara Body Cams

The Italian Data Protection Authority (Garante Privacy) has sanctioned the University eCampus with a €50,000 fine for unlawfully processing biometric data using facial recognition for online course attendance verification. Additionally, the Garante has prohibited the municipality of Pescara from using body cameras for local police due to risks of data transfer to non-EU countries.

EU Official Journal L Series Daily View - February 20, 2026

The EU Official Journal L series published several regulations on February 20, 2026. These include amendments to regulations concerning statistical information collection by the European Central Bank, emissions type-approval for heavy-duty vehicles, and import registration for sodium benzoate from China.