For B2B companies, fund companies, and other businesses with websites in the EU (including Sweden), there are several important dates and events worth keeping track of in the coming months. Many of these are linked to legislation, regulations, and security requirements that affect digital platforms. Here are some of the key dates and events to note:
1. Digital Services Act (DSA) & Digital Markets Act (DMA)
- From February 17, 2024: Full implementation of the DSA begins, meaning that all websites and digital services within the EU must comply with strict rules to ensure transparency, content accountability, and user protection. This is especially relevant for larger B2B websites that handle user-generated content or facilitate digital services.
2. GDPR and Cookie Guidelines
- Continuous compliance checks during 2024: The EU has become stricter regarding compliance with GDPR and cookies. Several national supervisory authorities plan intensified inspections, and companies should be prepared for potential audits. This is especially true for fund companies handling customer information and other sensitive data.
3. MiFID II and MiCA (Markets in Crypto-assets Regulation)
- January 1, 2024: MiCA, regulating crypto-assets, comes into effect. For fund companies and other businesses managing investments and financial products, it is important to keep their websites updated with information on regulations for crypto-assets and how these products align with MiFID II and MiCA.
4. E-commerce and New Payment Standards
- September 2024: Deadline for implementing requirements related to SCA (Strong Customer Authentication) under PSD2. This affects e-commerce websites providing services to other businesses (B2B) where secure payment is critical.
5. NIS2 Directive
- Before October 2024: The EU's updated NIS2 directive comes fully into force, affecting all companies working with critical infrastructure, including digital services. NIS2 will require stricter cybersecurity measures for many B2B companies, especially those providing digital services or acting as suppliers of such services.
6. CSRD (Corporate Sustainability Reporting Directive)
- January 1, 2024: The requirement for larger companies to report sustainability data in accordance with CSRD. Companies' websites must be adapted to provide transparent and public information about environmental and social sustainability initiatives.
7. AI Act
- Expected implementation 2024: The new AI legislation imposes requirements on transparency and accountability when companies use AI. Companies offering AI-based services must adapt their web pages to clarify AI usage and any potential risks to users.
Other Important Events and Dates:
- January–March 2024: Planned supervision and evaluation rounds by the Data Inspection Authority regarding data protection officers and GDPR compliance in Sweden. Companies with digital platforms should be particularly careful to ensure their websites fully comply with GDPR.
- First quarter of 2024: Updates to the E-commerce Directive may affect companies selling digital products or services within the EU, where specific changes regarding consumer protection and information on websites may be relevant.