ZeroGravity Weekly Brief | January 12, 2026

EU Level

DMA review goes public : The Commission published the consultation summary + all submissions (450+) for the first DMA review. Themes: stronger interoperability, data access/portability, SME support, and possible scope expansion into AI and cloud. Gatekeepers argue proportionality and UX impact. The final report is due by 3 May.

AI Act quality standards incoming : A draft European standard on AI quality management is circulating, with a vote/public comment window until 22 Jan. Harmonised standards will be key for compliance under the AI Act.

EDPS supports targeted VAT data access, with safeguards : The EDPS backs limited EPPO and OLAF access to EU-level VAT data to fight fraud, while warning against blurring administrative and criminal law boundaries and calling for strict safeguards.

Sweden Level

Sweden publishes Omnibus VII fact memo : Sweden’s FPM45 summarises the Commission’s Digital Omnibus proposals, covering the AI Act, GDPR, Data Act, NIS2 and DORA, with a focus on cutting administrative burden, clarifying overlaps, and moving toward a single incident-reporting entry point.

Sweden outlines NIS2 implementation under the Cybersecurity Act : The Swedish Energy Agency clarifies which energy-sector operators fall under NIS2 from 15 January 2026 and summarises core obligations on cybersecurity measures, incident reporting, and penalties.

National threat sharing launches : CERT-SE rolled out MISP-SE, a national cyber threat sharing platform, building structured collaboration across sectors. Private-sector access will expand as legal clarity improves.