EU’s AI Law Shake-Up

Plus: Should AI be insurable, how families fear AI work, Gmail opt-outs.

Here’s what’s on our plate today:

  • 🧪 The EU delays AI rules to help business… at what cost?

  • 🗞️ Insurers reject AI risk, Gmail opt-out, and AI workers speak out.

  • 🧠 Prompt: Design an AI that keeps up with shifting EU regulations.

  • 🗳️ Should the EU delay strict AI regulations to help businesses?

Let’s dive in. No floaties needed…

Presented by

Introducing the first AI-native CRM

Connect your email, and you’ll instantly get a CRM with enriched customer insights and a platform that grows with your business.

With AI at the core, Attio lets you:

  • Prospect and route leads with research agents

  • Get real-time insights during customer calls

  • Build powerful automations for your complex workflows

Join industry leaders like Granola, Taskrabbit, Flatfile and more.

*This is sponsored content

The Laboratory

Will the EU’s backtrack on AI regulations help businesses?

EU economy chief Valdis Dombrovskis says Europe has yet to ‘reap the full benefits of the digital revolution’. Photo Credit: Getty Images.

Modern civilizations are founded on the principles of universal justice, equality, and equal opportunity. These ideas have been a part of the human psyche for a long time. These ideals, however, require constant effort to ground them in reality.

Grounding ideas is not an easy job. Often, the need for rapid advancements in technology, ensuring social order, and managing global trade takes precedence over them.

A remarkable example of this can be seen in the modern regulatory bodies’ struggle to find the balance between regulating Big Tech and introducing laws to the extent that they stifle innovation.

At a time when regulators were not yet done with social media, they are now faced with an even bigger challenge with the emergence of artificial intelligence.

Since the release of OpenAI’s ChatGPT, much has been said about the technology’s ability to upend existing social and economic structures. However, it falls upon regulators to ensure that its impact does not end up destroying the ideals of equity and equality.

The EU’s early push to regulate AI

Taking up the challenge, the European Union was one of the first geographical and economic blocs to regulate AI.

The EU’s AI regulations were first introduced in 2024 and aimed to establish a comprehensive legal framework for the development, supply, and use of AI systems across EU member states.

The regulations came into force in August 2024 and dealt with important issues like impact on AI system operators, risk classification, and transparency obligations. The law was designed to have a staggered approach.

As per the regulations, from February 2025, certain prohibitions were introduced on AI systems and AI literacy.

Following this, in May 2025, the Commission was expected to release the code of practices, and by August 2026, the remainder of the regulations would apply. However, while the staggered approach looked good on paper, it did not translate well on the ground.

Why the digital Omnibus marks a major shift

As a result, in November 2025, the commission unveiled sweeping changes to its digital rulebook. The changes included delaying the imposition of strict AI regulations through late 2027, relaxing data-access rules to allow companies to use large datasets, including sensitive health and biometric information, for AI training without needing explicit consent. They also introduced steps to reduce bureaucratic hurdles for businesses.

The changes are now being viewed as the EU backtracking on its regulatory promises to allow Big Tech companies to continue scaling. All, due to fears of losing the edge in the AI race.

What are the regulatory delays?

According to a Reuters report, the Commission, explaining the delay, said that, "Simplification is not deregulation. Simplification means that we are taking a critical look at our regulatory landscape”.

The Commission introduced something called the Digital Omnibus, which is basically a plan to simplify and adjust several EU digital laws, including the AI Act.

A key aspect of this is the change it gives companies an additional year to comply with the strictest rules in the AI Act.

These included AI systems used in areas like biometric identification, road traffic applications, utilities supply, job applications and exams, health services, creditworthiness, and law enforcement. Consent for pop-up cookies would also be simplified.

Though the Digital Omnibus needs to be approved by the member nations,  it could have serious implications.

What the delay means for European businesses

According to the Commission, the digital package will make life easier for businesses in Europe.

The goal is to cut the time companies spend on paperwork so they can focus on developing new products and growing.

The Omnibus is designed to simplify rules on artificial intelligence, cybersecurity, and data. The Commission says that the AI Act will work better if companies have clear guidance and tools to help them follow the rules.

To ease compliance, it plans to extend simpler requirements for technical paperwork, allow more companies to use testing environments for AI tools, and give the EU’s AI Office stronger powers to supervise advanced AI models. It also wants to make reporting cybersecurity incidents simpler by creating one place where companies can report all incidents instead of filing multiple reports under different laws.

A key change is in how the Commission now views data. This strategy focuses on making more high-quality data available for AI while keeping European control over sensitive information. It includes new support services to help companies understand the Data Act and new tools to safeguard European data when it is used abroad.

The Commission has also proposed a European Business Wallet. This is a digital tool that companies can use across all EU countries.

It will let businesses sign and share documents securely online and communicate with public authorities in any Member State. The Commission says this will greatly reduce paperwork and could save businesses large amounts of money.

To make it easier for SMEs, the commission is also introducing exemptions to some Data Act's cloud-switching rules, offering new guidance on compliance with the Data Act, and unlocking access to high-quality and fresh datasets for AI.

According to the Commission, the measures could save businesses up to €5 billion in administrative costs by 2029. While the European Business Wallets could unlock another €150 billion in savings each year.

The delays pertaining to businesses are especially interesting as they were the most vocal critics of the regulations.

More than thirty founders and investors signed a letter warning that the AI Act could create an inconsistent and unpredictable regulatory system that harms innovation, scares off investment, and leaves Europe trailing behind.

Even major tech companies like Meta and Alphabet argued that the Act’s broad definition of high-risk AI might limit experimentation and make it harder for smaller developers to succeed.

Concerns were raised around high compliance costs that could stifle start-ups and small businesses.

With the U.S. and China able to move faster under looser regulations, European companies fear they will be put at a long-term competitive disadvantage.

Privacy and civil society push back

However, while the Commission and tech companies see eye-to-eye on the question of delaying regulations, not everyone feels the same.

Privacy groups say the Digital Omnibus breaks public trust.

They argue that it weakens Europe’s privacy rules by moving important protections from the ePrivacy framework into the GDPR, narrowing what counts as personal data, and allowing very sensitive data to be used to train AI without proper limits.

They also warn that the proposal reduces transparency and accountability, leaving people with fewer ways to challenge harmful or discriminatory AI decisions. Civil society organisations say the plan benefits large tech companies while offering no real help to smaller European businesses.

And despite assurances from the Commission, consumer groups share these concerns.

According to Euronews, BEUC’s Director General said the proposal looks like deregulation designed mainly for big technology companies.

A coalition of more than one hundred civil society organisations, including Amnesty International, said the changes would quietly dismantle some of Europe’s strongest digital protections. Privacy group noyb added that the reforms create new loopholes that large companies can exploit.

The way the Digital Omnibus was created has also drawn criticism. The process avoided the usual impact studies and public consultations, even though some of the laws being changed are very new and not fully in place.

Members of the European Parliament may resist rewriting laws they only recently approved. Civil society groups say the Commission used shortcuts that reduced democratic oversight and gave large companies more influence. This raises concerns about whether the reforms serve the public interest or mainly reflect pressure from powerful industry groups.

Short-term relief vs. long-term risks

The EU’s GDPR and subsequent AI Act laid the groundwork for regulators to have oversight not just over where AI tools were implemented but also how powerful AI systems are developed.

The delayed implementation of regulations has its merits. It can help smaller businesses gain the time needed to adapt to the new technological shift and reduce the burden of compliance. This could mean that the EU would be able to cement its footing in the tech market.

However, on the flipside, delayed regulations and the way in which they have been formulated have drawn criticism that needs to be addressed. Further, looking at the pace of AI’s development, delayed regulations could also mean that they are rendered toothless when the time comes for implementation.

In the short term, the delay likely helps businesses by reducing compliance pressure. In the long term, it may create legal uncertainty and weaken trust, which could harm Europe’s competitiveness.

All of this begs the question. Can the ideals of equity and equality be sustained at times of technological shifts, and will regulators find the right balance between regulation and overregulation?

Bite-Sized Brainsç

  • AI too risky to insure: Major insurers say AI’s unpredictability makes it nearly impossible to cover, even for the people whose job is pricing risk.

  • Gmail gives opt-out for training: Google now lets users opt out of sharing their Gmail data to train AI, but only via a hard-to-find settings page.

  • AI workers warn families off: Working in AI left them disillusioned, and some now advise their loved ones to avoid the industry altogether.

Goodies delivered straight into your inbox.

Get the chance to peek inside founders and leaders’ brains and see how they think about going from zero to 1 and beyond.

Join thousands of weekly readers at Google, OpenAI, Stripe, TikTok, Sequoia, and more.

Check all the tools and more here, and outperform the competition.

*This is sponsored content

Prompt Of The Day

You’re designing an AI assistant for a European tech startup. It must comply with EU laws… but they keep changing every few months.

What failsafes, override rules, or self-audit features would you build into keep your AI on the right side of regulations?

Tuesday Poll

🗳️ Should the EU delay strict AI regulations to help businesses compete globally?

Login or Subscribe to participate in polls.

Rate This Edition

What did you think of today's email?

Login or Subscribe to participate in polls.