Our Scans · EU Exit Data Flow · Weekly Summary

• [New] The EU Customs Data Hub is planned to be fully operational around 2028, at which point the €3 transitional duty will be replaced by a full duty regime applying standard EU tariff rates to sub-€150 goods. Carra Globe
• [New] The permanent CSA Regulation will shape EU communications privacy for years; in July 2026 vote is a placeholder next to it. Hive Security
• [New] The pattern across every privacy regime-EU, UK, U.S. states, Brazil, India, Southeast Asia, the Middle East - is consistent: regulators expect evidence of implemented technical and organizational measures, documented data flows, complete audit trails, and demonstrable access controls. Kiteworks
• [New] As digital technology has made it easier to work with organizations worldwide, the opportunity to export British expertise has grown significantly. BusinessMole
• [New] Apple says draft measures proposed by the EU - which would force Google to give competing AI services more access to Android - would create profound risks for user privacy, security, device integrity, and performance. The Verge
• [New] If no actions are taken, the EU might soon awaken to a world divided by a digital Iron Curtain which could undermine European security, unity, and ambitions in the digital realm. chinaobservers
• [New] EU lawmakers aim to finalize the digital euro's legal framework by late 2026, enabling a pilot starting in the second half of 2027. SQ Magazine
• [New] Under the EU's Digital Services Act, a platform with more than 45 million monthly active users in the EU is designated a Very Large Online Platform and subjected to the strictest transparency, risk-assessment, and audit obligations, per the European Commission's DSA framework. shattered.io
• [New] Telecom AI touches GDPR (call records, location, billing data), the EU AI Act (progressive application through 2026, with some profiling and decision systems classified as higher risk), and sector-specific rules such as NIS2, lawful intercept, data retention, and emergency-services obligations. Tommaso Maria Ricci
• Centralized platforms with data-loss prevention enforcement are the minimum standard that 55% of surveyed CISOs and CTOs now expect, and regulators in Australia, the EU, and the UK are all positioned to treat uncontrolled contractor AI use as an organizational failure, not an individual one. AI Governance Institute
• The EU Erasmus + - funded MAPPING project, coordinated by Italian non-profit Deafal ETS, will develop a free, open platform for gathering and comparing agroforestry data and best practices across regions. Agroforestry
• GS1 Sunrise 2027 is moving retail point of sale systems toward 2 D barcodes, primarily QR codes, by the end of 2027, and the EU Digital Product Passport is beginning to require structured product data on goods sold in Europe. QRCodeKIT
• Over 35 million buildings in the EU require deep energy renovation by 2030 to meet Fit for 55 emissions goals with digital tools essential for audit prioritization and performance monitoring. Market Data Forecast
• Low-value parcels entering the EU now pay a flat €3 customs duty per tariff line as an interim measure, ahead of the EU Customs Data Hub planned for 2028. Fudge
• Pharmaceuticals already operate under firm serialization mandates, and retail brands selling into the EU face the combined pressure of GS1 Sunrise 2027 and Digital Product Passports. QRCodeKIT

Last updated: 03 August 2026