AmCham EU offers feedback on EU cybersecurity law
On Friday, 2 October, AmCham EU responded to a consultation on the directive of network and information systems (NIS). Find the consultation here and supporting paper here. AmCham EU supports the NIS Directive in its current form, with minor modifications. We advocate for:
Keeping reporting obligations as straightforward as possible, while respecting the clear distinction in function of operators and providers of services.
Clear guidance on how GDPR and the NIS directive apply in tandem.
Ensuring that operators of essential services are equally regarded as such in all MS.
Avoiding overdefining which sectors qualify as operators of essential services.
Exemptions for sectors where sector-specific legislation already provides for cybersecurity requirements, such as telecoms networks.
A voluntary, business-to-business information sharing facility in the field of cybersecurity.
Related items
Making web scraping rules work for AI
The European Data Protection Board’s draft guidelines on web scraping for generative AI are an opportunity to provide greater legal certainty and support Europe’s AI competitiveness. However, some proposed requirements risk creating disproportionate burdens for AI developers.
A pragmatic, risk-based approach is needed to ensure the rules reflect the technical realities of AI development. This includes proportionate transparency obligations, recognition of the need for diverse training datasets and greater alignment with the AI Act and Digital Omnibus. Clear, harmonised rules are essential to protect personal data while enabling innovation.
Read our consultation response to learn more about the recommendations.
:focal())
Digital Economy Conference 2026: in review
AmCham EU’s 13th Annual Transatlantic Digital Economy Conference took place on Thursday, 5 November, under the theme Cutting through complexity. The event brought together policymakers, regulators and industry leaders to discuss how clear, workable frameworks and closer EU-US cooperation can bring more coherence to the digital landscape and support economic growth.
:focal(4150x1482:4151x1483)){kind=spacer}
Making CADA’s sovereignty framework work for Europe
The success of the Cloud and AI Development Act (CADA) will depend on whether its sovereignty framework strengthens Europe’s resilience and competitiveness without restricting access to the technologies, providers and operating models needed to support the bloc’s digital transformation. As currently envisaged, several elements of CADA introduce origin-based restrictions that are not necessarily linked to genuine sovereignty, security or resilience risks. These measures could reduce competition, increase costs and slow cloud and AI adoption – ultimately working against CADA’s underlying objectives.
A sovereignty framework built on objective, risk-based criteria will better support Europe’s competitiveness, resilience and digital transformation than one based on origin, ownership or nationality.
Policy priorities
Insights and advocacy driving Europe’s policy agenda. Our priorities support growth, innovation and a stronger transatlantic economy.
Membership
Connecting business and policymakers to strengthen the voice of American companies in Europe.