The GDPR gives individuals strong rights to access their personal data. But those rights are not absolute: organisations may refuse data subject access requests that are manifestly unfounded or excessive. On 19 March 2026, the Court of Justice of the…

The AI literacy obligation under Article 4 of the EU AI Act applies to all providers and deployers of AI systems commercialized or used in the EU — including where those entities are based outside the EU. It is a fundamental obligation to ensure staff and other individuals involved in AI deployment and/or development are educated and trained on risks, benefits and safeguards, ultimately supporting more informed human decision-making.

The rules on voluntary overtime are changing substantially. A new act, amending Article 25bis of the Labour Act of 1971, was recently adopted by the Chamber of Representatives and still awaits publication in the Belgian Official Gazette. The Act significantly broadens the existing framework by increasing the annual overtime limit. The draft provides for entry into force on 1 April 2026, with retroactive effect.

“We hébben daar toch een policy voor?” Het is een verzuchting die veel bedrijfsjuristen en compliance officers bekend in de oren klinkt. Een dataprotectiebeleid? Check. Een draaiboek dat uitlegt wat te doen bij datalekken? Check. Afspraken over privégebruik van kantoor-IT. Check. Gedragscode? Check. En toch: medewerkers sturen persoonsgegevens via hun privémail, melden een incident te laat of klikken zonder nadenken op een phishinglink. Hoe kan dat, als de regels duidelijk zijn?

In a fragile geopolitical context, where reliance on fossil fuels has become increasingly unstable and costly, Europe faces a dual imperative: safeguarding its economic resilience while accelerating decarbonisation.

In its decision of 27 January 2026 (No. 10/2026), the Belgian Data Protection Authority (DPA) issued a decision following a complaint by a student worker whose supervisor had shared private WhatsApp messages in a work-related WhatsApp group with other colleagues.

Lors de la conclusion d’un contrat informatique, les parties pensent rarement à sa résiliation. L’attention se concentre sur le périmètre, le prix, le calendrier et les plans de mise en œuvre. Anticiper la fin de la collaboration avant même qu’elle ait commencé paraît contre-intuitif.

On 27 November 2025 the European Parliament and the Council of the EU announced that they’d reached a provisional political agreement on the texts of the proposed Directive on payment services and electronic money services (PSD3)1 and the Regulation on payment services in the EU (PSR),2 originally published by the European Commission in June 2023.

The BCA 2026 Priorities Papersets out the sectors in which the authority will exercise particular vigilance, and outlines its strategic policy priorities for the year, including the development and deployment of its enforcement instruments. For in-house counsel, the document is an important roadmap: it signals where investigations are most likely to originate, what new tools the BCA is acquiring, and which compliance initiatives deserve immediate attention. The most prominent change in the 2026 paper is the replacement of the construction sector, considered a priority sector in 2025, with sport, media and entertainment.

Artificial intelligence (AI) is no longer a futuristic concept, it is increasingly a practical tool in corporate legal departments. For in-house counsel, the pressure to deliver faster while managing risk has never been higher. AI-assisted drafting presents a significant opportunity to streamline work, yet it also raises valid concerns about accuracy, compliance, and strategic judgment.

On 23 February, the government introduced a new legislative proposal amending the statutory notice periods. While not the first initiative in a broader wave of labour market reforms, and likely not the last, this proposal has already sparked considerable debate.

On 16 December 2025, the European Commission published its proposal to amend the rules governing medical devices and in vitro diagnostic medical devices in the European Union — the MDR and IVDR — under the formal reference COM(2025)1023. The label attached to the exercise is "simplification." The substance is more ambitious than that.

Since the Court of Justice’s September judgment in EDPS v Single Resolution Board (C-413/23 P, ‘SRB Case’), the discussion on the notion of personal data has hardly slowed, and practitioners keep adding fresh voices on the likely consequences of the verdict. The discussion has also been enriched by proposed amendments to the GDPR and the Regulation 2018/1725 resulting from the latest Digital Omnibus proposal.

The European capital markets are fragmented across Member States, burdened by high access costs, and governed by a framework that places EU markets at a disadvantage compared with the United States and the United Kingdom, particularly for smaller and growth companies. The EU Listing Act was developed as part of the Capital Markets Union to address these issues.

In one of the first cases in which the PIA was applicable, the Antwerp Labour Court of Appeal was called upon to rule on the findings of observations carried out by a private investigator in the context of proceedings seeking recognition of a dismissal for serious cause of a protected employee.