EU
AI Act
The three EU institutions reached a provisional political agreement on the Digital Omnibus on AI. Annex III high-risk obligations are postponed to December 2027, Annex I to August 2028, a ban on "nudification" AI tools is added, and the AI Office's enforcement powers are strengthened. GPAI rules and prohibited practices remain unchanged and in force.
DSA
Commission services (DG CONNECT) signed a formal cooperation arrangement with Japan's Ministry of Internal Affairs and Communications to coordinate enforcement of the DSA and Japan's equivalent platform law. The arrangement covers transparency, notice-and-action mechanisms, joint studies and training, making Japan the third international DSA enforcement partner after the UK and Australia.
Swedish Level
GDPR
IMY launched a formal supervision of Region Gävleborgover its use of AI-based transcription in primary care. IMY will carry out an on-site inspection to verify whether the region has sufficient technical and organisational security measures under GDPR, including safeguards against unintended changes to the AI model over time. This is the first IMY supervision of AI transcription in healthcare and directly reflects IMY's declared 2026 priority of AI in the public sector.
AI Act
The Swedish government's spring amending budget proposes an additional SEK 1 millionfor IMY in 2026 to prepare for its new market surveillance duties under the AI Act — specifically oversight of AI systems used in law enforcement. IMY's declared 2026 supervision priorities — crime prevention, children and young people, and AI in the public sector — frame all current inspections and guidance.
%20(A2%20(Landscape))%20(11).png)