This week's EU Regulatory Updates

Covers six developments across AI governance, data protection, climate finance, water risk, clinical trials, and merger control.

• The European Commission issued draft guidelines helping AI providers and deployers assess whether their systems qualify as high-risk under the EU AI Act — stakeholder feedback open until June 23, 2026. This directly affects all organisations deploying AI in health, safety, or fundamental rights contexts across the European Union.
• In France, CNIL published its 2025 annual report recording €487 million in fines, a surge in data breach notifications, and confirmed progressive AI Act application from 2025 with cybersecurity as the top enforcement priority for 2026. All organisations processing personal data in France must treat GDPR and AI Act compliance as a combined obligation.
• The European Commission proposed €144 million from the EU Solidarity Fund for Spain, Romania, and Cyprus to recover from wildfires and floods — covering water, telecommunications, transport, energy, and healthcare infrastructure. Disbursement requires European Parliament and Council approval.
• The 13th Roundtable on Financing Water established supervisory expectations for integrating water-related risks into financial stability frameworks — recognising water risk as macro-critical to financial and price stability across EU and partner countries.
• The EU is tracking 2030 clinical trial targets including 500 additional multinational trials and 66 percent of trials recruiting within 200 days via the FAST-EU pilot. Organisations must submit an Expression of Interest before applying to participate.
• In merger control, Octopus Energy Group acquires joint control of Uplight alongside Schneider Electric under Council Regulation 139/2004 — with mandatory public disclosure of notification information.

Essential listening for CCOs, data protection officers, heads of AI governance, legal counsel, sustainability leads, and compliance officers across EU-regulated financial services, MedTech, and technology sectors.

Carver RegWatch delivers weekly regulatory intelligence across jurisdictions. Published May 24, 2026.
For more information, visit the Carver Agents website.

Also from Carver RegWatch this week:

• This Week in AI Regulations — EU AI Act high-risk classification, CNIL €487M fines, Basel ICT risk framework, China AI deepfake enforcement
• ASEAN RegWatch — Bank Indonesia 50bps rate hike to 5.25%, MAS revokes Bsquared payment licence, Singapore insider trading convictions
• USA Regulatory Updates — SEC novel ETF regulatory review, California Hermes Bitcoin kiosk enforcement, IOSCO AI supervisory toolkit
• Middle East RegWatch — OFAC Adani $275M Iran sanctions settlement, OFAC Amin Exchange designation, UAE Drupal CVE-2026-8495 cybersecurity alert
• India Regulatory Updates — RBI restricts Nagar Sahakari Bank, RBI cancels Yashwant Co-operative Bank licence, SEBI Investor Onboarding Regulatory Sandbox
• Global Regulatory Briefing — Bank of England CCP resolution paper, Malta tokenisation consultation, ASIC sustainability reporting focus 2026-27

Find all series at The Carver Agents Podcast 

Articles mentioned:

1. Central counterparty resolution execution and resolvability outcomes
2. Annual report: CNIL's achievements and key actions in 2025
3. Maritime and Coastguard Agency launches Yacht Unlimited Certificate of Competency
4. G7 Finance Ministers' and Central Bank Governors’ communiqué, 19 May 2026
5. Commission seeks feedback on the draft guidelines for the classification of high-risk artificial intelligence systems
6. EU tracks progress towards 2030 clinical trial targets
7. Commission proposes €144 million from the European Union Solidarity Fund to help Spain, Romania, and Cyprus recover from climate disasters
8. Water and financial stability: 13th Meeting of the Roundtable on Financing Water - 21-22 May 2026
9. CDC Provides Update on Hantavirus Outbreak Linked to M/V Hondius Cruise Ship
10. OCTOPUS ENERGY GROUP / SCHNEIDER ELECTRIC / UPLIGHT