The EU's AI Act compliance clock is being reset before it has even fully started. Trilogue negotiations on the Digital Omnibus AI package are scheduled for April 28, with Parliament and Council negotiators broadly aligned on delaying high-risk AI obligations from August 2026 to December 2027 or August 2028. If a political deal is struck next Monday, the provisions covering AI systems in healthcare, employment, law enforcement, and education will not be enforced for another two years; thousands of enterprises currently in compliance mode will need to recalibrate. (IAPP)
Policy & Regulation
DMA: Commission moves on Google search data. On April 16, the European Commission proposed measures requiring Google to share search engine data with third parties under the Digital Markets Act. The move follows the €500M and €200M fines handed to Apple and Meta respectively last year; total EU penalties on US tech companies have now crossed $7 billion over two years. The Trump administration has publicly framed this enforcement wave as economic warfare and is weighing retaliatory trade measures, putting the Commission's next steps under unusual geopolitical scrutiny. (CNBC)
Cloud sovereignty: Commission settles first EU-only procurement. On April 17, the Commission awarded a €180M, six-year sovereign cloud framework contract to four European providers: OVHCloud/CleverCloud (led by Post Telecom), STACKIT (Germany), Scaleway (France), and a Proximus-led consortium incorporating Mistral and S3NS. Eligibility required a minimum SEAL-2 rating under the new Cloud Sovereignty Framework, which sets measurable criteria across eight objectives including supply chain transparency and resilience against non-EU disruptions. The Commission intends the framework as a replicable model for public sector digital procurement across Europe. (European Commission)
GDPR: CNIL fine signals rising breach liability. France's CNIL fined Free Mobile €27 million for failing to protect subscriber data following a 2024 cyberattack that exposed approximately 24 million customer contracts. The action fits an accelerating pattern: total GDPR fines have now exceeded €7.1 billion across more than 2,800 decisions since 2018, and European data protection authorities are processing 443 breach notifications per day, up 22% year on year. (Kiteworks)
AI Act: GPAI guidance gap widens. With the August 2 enforcement date for general-purpose AI model obligations now under four months away, the European AI Office has not yet published the final Code of Practice on AI-generated content marking; publication is currently scheduled for June. For GPAI providers, that leaves a narrow window between guidance and compliance. The Commission's parallel push to delay high-risk AI rules makes the gap between the Act's ambitions and its operational readiness harder to ignore. (EU Artificial Intelligence Act)
Capital & Investment
EIF launches €15bn fund of funds. The European Investment Fund is raising ETCI 2, a €15 billion vehicle targeting 100 growth-stage VC firms across Europe; it would be the largest public fund of funds in European history. The EIB and EIF have committed €1.25 billion as anchor investors, with a first close expected this summer. The goal is to unlock €80 billion in scaleup financing. The first iteration (2023, €3.9bn) backed 14 mega-funds and supported 11 unicorns including DeepL and TravelPerk; the new fund will invest up to €200M per company, against a €60M average in the first wave. (Sifted)
Q1 2026: AI takes the majority. European venture reached $17.6 billion in Q1 2026, up 30% year on year and marking the second consecutive growth quarter. AI startups captured more than half of total funding ($9.2 billion) for the first time. The concentration, however, is stark: deal volume fell 40% annually, with seed rounds down 44% and early stage down 30%. Capital is consolidating into fewer, larger bets; the companies that will need late-stage rounds in 2027-2028 may find a thinner pipeline behind them. (Crunchbase)
Mega-rounds dominate Q1. The quarter's headline raises came from AI legaltech Legora (>$500M), data centre builder Nscale (>$1bn), autonomous driving company Wayve (>$1bn), and Advanced Machine Intelligence, a physical AI frontier lab that raised $1 billion in what it described as Europe's largest-ever seed round. UK startups led geographically with $7.4bn; France reached $2.9bn, consolidating its position as Europe's hub for frontier AI research and infrastructure. (Crunchbase)
New fund vehicles emerge. Spanish VC Seaya held the first close of a €1 billion Growth Tech Fund I focused on applied AI and deeptech. Deeptech growth firm Kembara reached a €750M first close toward a €1 billion target, putting it in contention as Europe's largest dedicated deeptech growth fund. The EIF also backed the Baltic Innovation Fund 3 (€225M), a five-year vehicle targeting 8–11 regional PE and VC funds. (Vestbee)
One to Watch
April 28 AI Omnibus trilogue. Parliament and Council negotiators enter the second trilogue on the Digital Omnibus AI package next Monday with positions broadly aligned on the key delay proposals. If a political agreement is reached, formal endorsement from both institutions would follow in May or June; the last major uncertainty over European AI compliance timelines would be resolved. The outcome will define whether the AI Act's August 2026 deadline remains nominally in force or is formally superseded. Watch for the Commission's readout after the session. (European Parliament Legislative Train)