Industrial Policy & Trade Monitor· 2670 actions· ✨ 89 recent

On 23 April 2026, the Council of the European Union adopted the 20th package of restrictive measures against Russia, anchored by Council Regulation (EU) 2026/506 amending Regulation 833/2014 (sectoral sanctions) and Council Regulation (EU) 2026/511 amending Regulation 269/2014 (asset-freeze listings — 120 additional individuals and entities, the largest single tranche in two years). The package operationalises and extends the crypto-sanctions architecture introduced in the 19th package and constructs the legal scaffolding for a future full prohibition on maritime services to vessels carrying Russian crude/petroleum products. Headline measures: (i) full sectoral prohibition on transactions with crypto-asset service providers and exchange platforms established in Russia or Belarus, plus designation of the rouble-backed stablecoin RUBx and the digital rouble (CBDC) on Annex LIII — effective 24 May 2026, with EU support for the digital rouble's development banned outright; (ii) 36 new energy-sector listings spanning upstream extraction, refining and transportation; (iii) prohibition on providing technical, financial, brokering and insurance services to Russia-flagged, Russian-certified or Russian-managed LNG tankers and icebreakers effective 25 April 2026, extending to foreign-flagged vessels operating in Russian interests by January 2027 and culminating in a categorical ban on LNG terminal services to Russian-controlled entities on 1 January 2027; (iv) full transaction ban on 20 Russian banks plus four third-country banks listed for SPFS connectivity / sanctions circumvention; (v) 46 newly listed shadow-fleet vessels and new tanker sale-due-diligence obligations on EU shipping operators; (vi) 58 designations of companies and associated individuals in the Russian military-industrial complex including drone developers/manufacturers; (vii) further Annex IV third-country circumvention enabler listings (China, Hong Kong, Turkey, UAE); (viii) parallel measures against Belarus. Entry into force on 24 April 2026 (day following publication in OJ L_202600506), except for measures with explicit deferred application dates.

On 1 May 2026 the trade pillar of the EU-Mercosur Partnership Agreement (the "Interim Trade Agreement", iTA) entered provisional application between the European Union and the four Mercosur states — Argentina, Brazil, Paraguay and Uruguay — following its publication in the EU Official Journal on 27 February 2026 alongside the broader EU-Mercosur Partnership Agreement (EMPA). The iTA covers goods (eliminating duties on more than 90% of bilateral trade over a transition period including immediate cuts on cars, pharmaceuticals, wine and olive oil), services, government procurement at federal and state level, intellectual property (344 EU geographical indications protected), SPS/TBT disciplines, and a sustainability chapter. Mercosur receives tariff-rate quotas on agri-food exports (beef, poultry, sugar, ethanol, honey). Provisional application proceeds pending full ratification of EMPA by the Council, European Parliament and all EU national parliaments and a pending CJEU opinion; only the trade pillar applies provisionally.

Directive (EU) 2026/470 of 24 February 2026, published in the EU Official Journal on 26 February 2026 and entered into force on 18 March 2026, amends the Corporate Sustainability Reporting Directive (CSRD, Directive (EU) 2022/2464) and the Corporate Sustainability Due Diligence Directive (CSDDD, Directive (EU) 2024/1760). It raises CSRD scope thresholds to undertakings with more than 1,000 employees and more than EUR 450 million net turnover, raises CSDDD scope thresholds to entities with more than 5,000 employees and EUR 1.5 billion turnover (and non-EU entities with EUR 1.5 billion EU turnover), drops the requirement to adopt or put into effect a climate transition plan under CSDDD, and replaces reasonable-assurance with limited-assurance for CSRD reports. CSRD-related provisions must be transposed by 19 March 2027; CSDDD-related provisions by 26 July 2028.

On 3 February 2026 the European Commission opened an in-depth Phase II investigation under the Foreign Subsidies Regulation (FSR) — the second FSR ex officio case and the first targeting the renewable-energy wind-OEM sector — into whether Xinjiang Goldwind Science & Technology Co., Ltd. and its EU affiliates received Chinese foreign subsidies (grants, preferential tax treatment, and state-bank preferential financing) that distort competition for wind-turbine supply and services in the EU internal market. The case (FS.100143) follows the April 2024 preliminary-review opening and subjects Goldwind to an 18-month Phase II investigation with potential redressive-measures decision. The action structurally extends the FSR enforcement perimeter from security equipment (Nuctech, FS.100068) into the green-transition energy-equipment supply chain.

On 27 January 2026 the European Union and India announced the conclusion of negotiations on a comprehensive Free Trade Agreement at the EU-India summit hosted at Hyderabad House in New Delhi, attended by PM Narendra Modi, Commission President Ursula von der Leyen and Council President António Costa. The deal — described by both leaders as the "mother of all deals" — covers ~25% of world GDP and ~2 billion people. The EU eliminates duties on 91% of tariff lines (covering 99.3% of bilateral trade by value); India eliminates duties on 86% of lines (covering 96.6% by value). Headline cuts include Indian tariffs on EU wines (150% → 75% at entry into force, falling to 20%), olive oil (45% → 0% over five years) and processed agri-food (up to 50% eliminated); EU tariffs are reduced/eliminated on Indian textiles, leather/footwear, gems and jewelry, marine products, tea, coffee, spices and certain agricultural and steel products. The agreement still requires Council adoption, European Parliament consent and approval by India's Union Council of Ministers; entry into force is expected in early 2027. Companion instruments concluded at the same summit include an EU-India Security and Defence Partnership and a Mobility and Migration Agreement.

On 14 January 2026 the European Commission adopted Implementing Regulation (EU) 2026/124, amending Annex XXVIII to Council Regulation (EU) No 833/2014, lowering the price cap on seaborne Russian crude oil (CN code 2709 00) from USD 47.6 to USD 44.1 per barrel, effective 1 February 2026. This is the first application of the automatic dynamic-adjustment mechanism introduced by the 18th sanctions package (Council Regulation (EU) 2025/1494, July 2025), which re-indexes the cap every six months to 15% below the 22-week trailing average Urals market price. Contracts concluded before 31 January 2026 with cargo offloaded by 16 April 2026 remain subject to the prior USD 47.60/bbl cap. The UK aligned with an equivalent reduction the same day.

The Council of the European Union adopted Regulation (EU) 2025/2618 on 18 December 2025, amending Regulation (EU) No 833/2014, to add 41 vessels to Annex XLII of the Russia sanctions regime. Of these, 36 vessels are designated for transporting Russian crude oil and petroleum products while engaging in irregular and high-risk shipping practices characteristic of the "shadow fleet," 5 vessels are designated for transporting stolen Ukrainian grain and cultural property, and 1 vessel (GT HONOR) is designated for facilitating violation or circumvention of EU sanctions. Listed vessels are banned from access to EU member-state ports and locks and from a broad range of maritime-transport-related services, effective 19 December 2025. The measure is an incremental listing update between the 19th (Regulation 2025/2033, October 2025) and 20th (Regulation 2026/506, April 2026) numbered sanctions packages, rather than a new package itself.

On 11 December 2025 the Council of the EU presidency, the European Parliament, and the European Commission reached provisional political (trilogue) agreement on the revision of Regulation (EU) 2019/452 establishing a framework for the screening of foreign direct investments into the Union, concluding interinstitutional negotiations on the Commission's proposal of 24 January 2024. The revised regime upgrades the 2019 cooperation-mechanism-only framework into a hybrid harmonised/mandatory regime: all 27 Member States must establish FDI screening mechanisms (replacing the current patchwork in which some Member States have no mechanism at all); mandatory minimum sectoral scope is set EU-wide and covers dual-use items, military equipment, hyper-critical technologies (general-purpose AI with space/defence relevance, quantum technologies, semiconductors), critical raw materials, critical entities in energy/transport/digital infrastructure, electoral infrastructure, and certain financial-system entities; foreign investments routed through EU subsidiaries fall within the perimeter; a shared database prevents Member-State arbitrage; and an optional single electronic-filing portal becomes available if requested by at least nine Member States. Screening decisions remain the exclusive responsibility of the Member State in which the investment is made. Once the Regulation enters into force (after Council and Parliament formal adoption and OJ publication, both pending as of the political-agreement date), the new rules will apply after an 18-month transition period — implementation expected toward the end of 2027.

On 18 November 2025, the European Supervisory Authorities (EBA, ESMA, and EIOPA) jointly designated 19 Critical ICT Third-Party Providers (CTPPs) under DORA Article 31, with immediate effect — the first-ever exercise of direct EU financial-regulator supervision over hyperscale cloud and infrastructure providers. The designated entities include Amazon Web Services, Microsoft Azure, Google Cloud, Deutsche Telekom, Oracle, SAP, IBM, Bloomberg LP, London Stock Exchange Group (LSEG), Tata Consultancy Services, and Orange, among others. Designation triggers direct oversight by a lead ESA (EBA for banking-critical, ESMA for capital-markets-critical, EIOPA for insurance-critical) via Joint Examination Teams (JETs), with powers to conduct investigations, carry out on-site inspections, and impose fines of up to 1% of average daily worldwide turnover per day for non-compliance.

On 23 October 2025, the Council of the European Union adopted the 19th package of restrictive measures against Russia, anchored by Council Regulation (EU) 2025/2033 amending Regulation 833/2014 (sectoral sanctions), Council Implementing Regulation (EU) 2025/2035 amending Regulation 269/2014 (asset-freeze listings — 22 individuals + 42 entities, total 69 listings), and Council Regulation (EU) 2025/2041 (parallel Belarus measures). The package closes the Russian-LNG import loophole left open by the 18th package and establishes the architectural template for crypto-asset sanctions. Headline measures: (i) full prohibition on imports of Russian-origin LNG into the EU — short-term contracts banned six months from entry into force (effective 25 April 2026), long-term contracts (> 1 year, executed before 17 June 2025) phased out by 1 January 2027; (ii) full transaction ban on Rosneft and Gazprom Neft (tightening prior partial measures); (iii) five additional Russian banks added to Annex XIV transaction ban (Alfa-Bank, MTS Bank among them; effective 12 November 2025); (iv) full transaction bans on the Mir card payment system and the Faster Payments System (SBP), effective 25 January 2026; (v) first-ever EU sanctions on a stablecoin — the rouble-backed A7A5 (issuer + developer designated) — and a Paraguay-based cryptocurrency exchange used as a circumvention rail; (vi) prohibition on EU operators contracting with 11 listed Russian Special Economic Zones (Annex LII), with mandatory divestment from Alabuga (Tatarstan) and Technopolis Moscow effective 25 January 2026 — no five-year wind-down available; (vii) 45 entities added to Annex IV military end-user list (28 Russian + 17 third-country: 12 Chinese/Hong Kong, 3 Indian, 2 Thai); (viii) new export restrictions on electronic components, microelectronics, acyclic hydrocarbons, pneumatic rubber tires and propellant chemicals (~EUR 155 m of EU 2024 exports); (ix) prohibition on supply of AI, HPC, and quantum-computing services to Russian persons (effective 25 November 2025); (x) tourism-services ban (1 January 2026 wind-down); (xi) 117 additional shadow-fleet vessels listed (cumulative 557, exceeding the 18th package's 444); (xii) four Belarus + Kazakhstan banks listed for SPFS use (effective 2 December 2025); (xiii) binding ownership/control definitions added to Reg. 269/2014 (50 % proprietary-rights threshold + eight-criterion control test). Entry into force on 24 October 2025 (day following publication in OJ L_202502033), except for measures with explicit deferred application dates.

On 23 October 2025, the Council of the European Union adopted Council Regulation (EU) 2025/2041 (amending Regulation (EC) No 765/2006) and Council Decision (CFSP) 2025/2040 (amending Decision 2012/642/CFSP), widening the EU's Belarus restrictive-measures regime in lockstep with the 19th Russia sanctions package adopted the same day. The package widens the export ban to industrial goods (salts, ores, rubber articles, tyres, millstones, construction materials, electronic components, rangefinders, propellant chemicals, metals/oxides/alloys), extends the import ban to all acyclic hydrocarbons, introduces a new prior-licensing requirement for services supplied to Belarus, its government, or public bodies, and mirrors the Russia regime's space, AI, and high-performance/ quantum-computing service restrictions. A companion instrument, Council Implementing Regulation (EU) 2025/2039, adds 5 new asset-freeze listings (2 individuals + 3 entities, including JSC Holography Industry, Horizont Holding, and ICT Horizont). Entered into force 24 October 2025.

The European Commission adopted Commission Implementing Regulation (EU) 2026/1045 of 12 May 2026, imposing a provisional anti-dumping duty on imports of certain alkyl phosphonic acids and their sodium salts originating in the People's Republic of China — specifically 2-phosphonobutane-1,2,4- tricarboxylic acid (PBTC) and its sodium salt (Tetrasodium hydrogen 2-phosphonatobutane-1,2,4- tricarboxylate, PBTC-Na4), in solid form or aqueous solution, falling under CN code 2931 49 80. Provisional duties range from 182.9% to 219.4% depending on the exporting producer. The measure entered into force on 14 May 2026, the day after publication in the Official Journal, and follows an investigation initiated on 18 September 2025 pursuant to a complaint lodged on 7 August 2025 by LANXESS Deutschland GmbH. PBTC is a scale-inhibitor/chelating agent used in industrial water treatment, oilfield services and detergent formulation.

On 18 July 2025, the Council of the European Union adopted the 18th package of restrictive measures against Russia, anchored by Council Regulation (EU) 2025/1494 amending Regulation 833/2014 (sectoral measures), Council Implementing Regulation (EU) 2025/1476 implementing Regulation 269/2014 (asset-freeze listings), Council Decision (CFSP) 2025/1495 (vessel listings), and Council Regulation (EU) 2025/1472 (parallel Belarus measures). The package is the largest energy-sector escalation since 2022 and pivots from new-perimeter creation toward enforcement and circumvention closure. Headline measures: (i) the Russian-crude price cap is lowered from USD 60 to USD 47.6 per barrel with a new automatic dynamic mechanism re-indexing the cap to global oil prices every six months at a 15 % discount to the 22-week trailing average (effective 3 Sep 2025, with a transitional exemption to 18 Oct 2025 for pre-20 Jul 2025 contracts compliant with the prior cap); (ii) full transaction ban extended to 22 additional Russian banks, bringing the total cut off from the EU financial system to 45; transaction ban extended to third-country financial institutions and crypto-asset service providers facilitating circumvention; (iii) full transaction ban on Nord Stream 1 and Nord Stream 2 pipelines; (iv) import ban on refined oil products derived from Russian crude processed in third countries; (v) 105 additional vessels added to the shadow-fleet port-access ban (cumulative total 444); (vi) 26 new entities added to Annex IV military end-user list (15 Russian + 11 from China/Hong Kong/Turkey); (vii) Council Implementing Regulation 2025/1476 lists 14 individuals + 41 entities under asset-freeze, including a major Indian refinery (Nayara Energy, part-owned by Rosneft), three Chinese suppliers of battlefield goods, shadow-fleet operators, and entities involved in the deportation of Ukrainian children; (viii) parallel Belarus complementary measures via Regulation 2025/1472. Wind-down periods vary: 90 days for oil-price-cap contracts; banking-software wind-down to 30 Sep 2025; trade-goods wind-downs Oct 2025–Jan 2026 by category. Entry into force on 19 July 2025 (day following publication in the Official Journal), except for measures with explicit deferred application dates.

On 25 June 2025 the European Commission adopted COM(2025) 335 final, a proposed Regulation establishing a single market for space activities — the first EU-level framework harmonising the authorisation, registration and supervision of space activities across Member States, replacing 13 fragmented national regimes. The Act rests on three pillars: safety (mandatory tracking of space objects, space- debris mitigation rules, an EU registry of space objects), resilience (cybersecurity requirements scaled to company size and risk profile) and sustainability (environmental impact assessment and active debris-removal R&D). It applies to both EU and non-EU operators providing space services in Europe, giving it extraterritorial reach over SpaceX/Starlink, Amazon Kuiper, OneWeb, Chinese SatNet/G60 and ISRO. The proposal is being negotiated under the ordinary legislative procedure; the Competitiveness Council of 9 December 2025 broadly endorsed its objectives, and the public consultation closed on 7 November 2025.

On 20 May 2025, the Council of the European Union adopted the 17th package of restrictive measures against Russia, anchored by Council Regulation (EU) 2025/932 amending Regulation 833/2014 (sectoral measures) and Council Implementing Regulation (EU) 2025/933 implementing Regulation 269/2014 (asset-freeze listings). Sectoral measures include the largest single-package expansion of the shadow-fleet port-access ban (additional vessel listings layered on top of the 153 designations carried over from the 16th package), the addition of 31 entities — including third-country (Chinese, Turkish, UAE, Hong Kong) firms — to the Annex IV list of military end-users barred from receiving dual-use and critical industry goods (covering chemical precursors used in missile propellants and spare parts for high-precision machine tools), and reinforced anti-circumvention "no-Russia" clause obligations on EU exporters. Council Implementing Regulation (EU) 2025/933 imposes asset freezes on 17 additional individuals and 58 additional entities, including shadow-fleet vessels and operators, a major Russian oil company, Russian military/defence-sector firms, and persons involved in the looting of Ukrainian cultural heritage. Parallel hybrid-threat, human-rights, and chemical-weapons designations were adopted under separate horizontal regimes on the same day. The Council noted EU shadow-fleet and oil-price-cap measures had reduced Russian revenues by approximately EUR 38 billion since introduction. Entry into force on 21 May 2025 (day following publication in the Official Journal).

Commission Delegated Regulation (EU) 2025/532, adopted 24 March 2025 and published in the Official Journal on 2 July 2025, supplements DORA (Regulation (EU) 2022/2554) with binding Regulatory Technical Standards governing ICT subcontracting of critical or important functions. It requires all EU-regulated financial entities to establish a subcontracting policy, conduct due-diligence and concentration-risk assessments at each tier of the ICT supply chain (including nth-party providers), impose equivalent resilience standards on sub-ICT-providers, and maintain enforceable termination and information-access rights. The RTS entered into force on 22 July 2025, completing the second-batch DORA implementing acts on outsourcing chains.

On 24 February 2025, the third anniversary of Russia's full-scale invasion of Ukraine, the Council of the European Union adopted the 16th package of restrictive measures against Russia, anchored by Council Regulation (EU) 2025/395 amending Regulation 833/2014 and a cluster of associated regulations (2025/389, 2025/390, 2025/392, 2025/398, 2025/401). The package introduces the EU's first import ban on Russian primary aluminium (CN 7601) under a 275 kt transition quota (~80% of 2024 volumes), expels 13 additional Russian banks from the SWIFT financial-messaging system, adds 74 vessels (153 total) to the shadow-fleet port-access and services ban, prohibits any temporary storage of Russian crude and petroleum products in EU ports, bans transactions with major Russian airports (Moscow Vnukovo, Zhukovsky) and ports (Astrakhan, Makhachkala, Ust-Luga, Primorsk, Novorossiysk) used for sanctions circumvention, extends flight-ban coverage to 25 third-country airlines operating domestic Russian routes, and adds 83 asset-freeze listings (48 individuals, 35 entities) under Regulation 269/2014. Parallel measures cover Belarus and the non-government-controlled areas of Ukraine. Entry into force on 25 February 2025.

On 16 December 2024 the Council of the European Union adopted Council Regulation (EU) 2024/3192 amending Regulation (EU) 833/2014, the 15th package of restrictive measures against Russia. The package adds 84 asset-freeze listings (54 individuals and 30 entities) under Regulation 269/2014 — for the first time including fully-fledged designations of seven Chinese individuals and entities supplying drone components, machine tools, and dual-use goods to the Russian military-industrial complex. It expands the EU shadow-fleet vessel- ban list by 52 tankers (total 79), activates the standalone EU hybrid- threats sanctions regime with its first 16-individual / 3-entity designations, extends the wind-down derogation for divestment from Russian subsidiaries to 31 December 2025, and reinforces anti- circumvention contractual clauses on EU exporters of dual-use goods.

Regulation (EU) 2024/2747, adopted on 9 October 2024 and published in the Official Journal on 8 November 2024, establishes the EU's first dedicated framework to anticipate, prepare for and respond to crises affecting the internal market. IMERA creates a two-tier "vigilance" / "emergency" mode architecture, sets up the Internal Market Emergency and Resilience Board (IMERB) to coordinate Member States and advise the Commission, and equips the Commission with last-resort powers including mandatory information requests to economic operators, priority-rated orders for crisis-relevant goods, fast-track conformity-assessment procedures, and rules to safeguard free movement of goods, services and persons. The regulation amends Council Regulation (EC) No 2679/98 (the "Strawberries Regulation") and becomes applicable on 29 May 2026.

The European Union's Artificial Intelligence Act, Regulation (EU) 2024/1689, was published in the Official Journal on 12 July 2024 and entered into force on 1 August 2024. It establishes the world's first horizontal, risk-tiered legal framework for the development, market placement, and use of AI systems — covering prohibited practices, high-risk systems, general-purpose AI models, and minimal-risk applications — with extraterritorial reach over any provider placing an AI system on the EU market or whose output is used in the EU. Penalties reach up to EUR 35 million or 7% of global annual turnover. Application is staged: prohibitions from 2 February 2025, GPAI and governance from 2 August 2025, the bulk of high-risk obligations from 2 August 2026, and product-safety-embedded high-risk systems from 2 August 2027.

On 24 June 2024 the Council of the European Union adopted Council Regulation (EU) 2024/1745, the 14th package of restrictive measures against Russia, amending Regulation (EU) 833/2014. The package introduces the EU's first targeted measures against Russian LNG (a ban on EU-port transhipment to third countries after a 9-month transition, and a prohibition on EU investment and goods/services exports to Russian LNG projects under construction such as Arctic LNG 2 and Murmansk LNG), bans EU entities outside Russia from using the SPFS Russian financial-messaging system, designates 27 named "shadow-fleet" tankers under a new vessel-specific port-access ban, and imposes a "best-efforts" obligation on EU parents to ensure non-EU subsidiaries do not engage in sanctions circumvention. It adds 116 new listings (69 individuals, 47 entities), including third-country circumvention enablers, to the asset-freeze and travel-ban regime.

Three Commission Delegated Regulations (CDR 2024/1772, 1773, 1774) adopted 13 March 2024 and published in the EU Official Journal on 25 June 2024 constitute the first batch of binding Level 2 implementing rules under DORA (Regulation (EU) 2022/2554). CDR 2024/1772 sets ICT incident classification criteria and materiality thresholds for mandatory reporting; CDR 2024/1773 specifies the required content of contractual policies for ICT third-party services supporting critical or important functions; CDR 2024/1774 defines the ICT risk management tools, methods, processes, and policies — including a simplified framework for smaller in-scope entities. All three apply from 17 January 2025 alongside the parent DORA regulation, covering approximately 22,000 EU regulated financial entities.

Regulation (EU) 2023/2854 of the European Parliament and of the Council of 13 December 2023 on harmonised rules on fair access to and use of data — the "Data Act" — was published in the Official Journal on 22 December 2023, entered into force on 11 January 2024, and applies generally from 12 September 2025 (with longer transitional periods for IoT product-design obligations under Article 3(1), which apply to products placed on the market after 12 September 2026, and for the data-portability standardisation framework, applicable from 12 September 2027). The Data Act is the third pillar of the EU data-economy framework alongside the GDPR (personal data) and the Data Governance Act 2022/868 (data-intermediation services), and is the world's first horizontal statutory regime governing access to and portability of industrial / IoT / non-personal data — covering by-design data-availability obligations on connected-product manufacturers, a mandatory cloud- switching framework with progressive elimination of switching charges, B2G emergency data-sharing in exceptional needs, unfair-contract-terms protection for SMEs, and safeguards against unlawful international government access to non-personal data held in EU cloud.

Regulation (EU) 2023/2675 — the Anti-Coercion Instrument (ACI) — is the EU's first horizontal trade-defence framework explicitly empowering the Union to respond to economic coercion by third countries. Adopted by the European Parliament and Council on 22 November 2023, published in the Official Journal on 7 December 2023, and in force from 27 December 2023, it lets the European Commission (i) determine that a third country is applying economic coercion against the Union or a Member State, (ii) seek dialogue, cessation, and reparation, and (iii) impose Union response measures — including tariffs, services-trade restrictions, IP-rights restrictions, public-procurement restrictions, and FDI restrictions targeting nationals or controlled entities of the coercing state. It complements but does not duplicate the Foreign Subsidies Regulation (which addresses subsidies, not coercion).

Commission Implementing Decision (EU) 2023/97 of 5 January 2023 formally identified Cameroon as a non-cooperating third country under Article 31 of Regulation (EC) No 1005/2008 (IUU Regulation), issuing the EU's first "red card" to a West African flag state. The Commission found that Cameroon systematically registered fishing vessels — including vessels with documented prior IUU histories — without adequate monitoring or flag-state control over their activities outside Cameroonian territorial waters. Council Implementing Decision (EU) 2023/405, adopted 20 February 2023, confirmed the identification and triggered the operative trade consequences: a total prohibition on imports into the EU single market of wild-capture fishery products caught by Cameroon-flagged vessels, a bar on EU vessels chartering or operating under the Cameroonian flag, and a prohibition on EU operators purchasing from or transhipping with Cameroon-flagged vessels in any waters.

On 16 December 2022 the Council of the European Union adopted Council Regulation (EU) 2022/2474, the 9th package of restrictive measures against Russia, amending Regulation (EU) 833/2014. It entered into force on publication the following day (17 December 2022). The package extends the prohibition on new EU investment from the Russian energy sector to the Russian mining and quarrying sector, bans exports of aircraft and drone engines and their parts to Russia (and to any third country that could re-supply drones to Russia), adds 168 entities to the sectoral export- control annex covering chemicals, nerve agents, night-vision and radio- navigation equipment, electronics and IT components, and prohibits EU advertising, market-research, product-testing and technical-inspection services to Russia. A parallel Council Decision/Implementing Regulation designated a further 141 individuals and 49 entities to the EU asset-freeze and travel-ban list.

Directive (EU) 2022/2557 of the European Parliament and of the Council of 14 December 2022 on the resilience of critical entities, published OJ L 333, 27 December 2022, entered into force 16 January 2023, with Member State transposition deadline 17 October 2024 (rules applicable from 18 October 2024). The CER Directive repeals Council Directive 2008/114/EC on European Critical Infrastructures, extending the scope from two sectors (energy, transport) to eleven essential-service sectors: energy, transport, banking, financial market infrastructures, health, drinking water, wastewater, digital infrastructure, public administration, space, and food. Member States must adopt national resilience strategies, conduct risk assessments at least every four years, identify "critical entities" providing essential services whose disruption would have significant cross-border impacts, and ensure those entities implement technical, security, and organisational resilience measures, business-continuity plans, incident-reporting obligations, and personnel-security background checks. The CER Directive is the physical and hybrid resilience twin to the NIS2 Directive (2022/2555) — the two instruments form the binding EU critical-infrastructure-protection architecture replacing the 2008/114/EC regime.

Regulation (EU) 2022/2554 (Digital Operational Resilience Act, DORA) is the EU's first horizontal cyber- and ICT-resilience instrument for the financial sector. Adopted 14 December 2022 and published in the Official Journal on 27 December 2022, it entered into force on 16 January 2023 and applies from 17 January 2025. DORA covers approximately 22,000 EU regulated financial entities across ~20 entity types (credit institutions, insurers, investment firms, CCPs, trading venues, crypto-asset service providers, etc.) under five pillars: ICT risk management, ICT-incident reporting, digital operational resilience testing (including threat-led penetration testing for significant entities), ICT third-party risk management, and information sharing. Structurally novel, DORA establishes the Critical ICT Third-Party Provider (CTPP) oversight regime under which the European Supervisory Authorities (EBA, ESMA, EIOPA) acquire direct supervisory powers over hyperscale cloud providers (AWS, Azure, GCP, Oracle) servicing EU financial entities — the first EU mechanism for ESA direct oversight of non-financial cloud providers.

Regulation (EU) 2022/2065 on a Single Market For Digital Services (Digital Services Act, DSA) was adopted by the European Parliament and Council on 19 October 2022, published in OJ L 277 on 27 October 2022, entered into force on 16 November 2022, and applied in full from 17 February 2024 (with VLOP/VLOSE obligations applying from 25 August 2023 following the Commission's initial designation letters of February 2023). The DSA establishes a graduated intermediary-liability and platform-safety framework covering all online intermediaries serving EU users, with the heaviest obligations falling on designated Very Large Online Platforms (VLOPs, ≥45m monthly active EU users) and Very Large Online Search Engines (VLOSEs): systemic-risk assessments, annual independent audits, vetted-researcher data access, recommender-system transparency, online-advertising transparency, and crisis-response cooperation mechanisms under Commission coordination. The European Commission holds exclusive enforcement authority over VLOPs and VLOSEs, with fines up to 6% of global turnover. The DSA is the structural twin-pillar to the Digital Markets Act (Reg (EU) 2022/1925): the DMA governs ex-ante competition obligations on designated gatekeepers; the DSA governs ex-post intermediary-liability, content-moderation, and platform-safety obligations across all online intermediaries.

On 6 October 2022 the Council of the European Union adopted Council Regulation (EU) 2022/1904, amending Regulation (EU) No 833/2014, as the EU's eighth package of restrictive measures against Russia. It entered into force 7 October 2022. The regulation's headline measure creates the legal basis for an oil price-cap mechanism: a ban on maritime transport to third countries of Russian-origin crude oil and petroleum products, becoming operational once the Council sets an actual cap level by a separate decision (the G7/EU $60/bbl cap followed on 3 December 2022). The package also expands import bans on steel products (phased through 2024), firearms and ammunition, wood pulp and paper, and certain chemicals, cosmetics and jewellery materials; extends export bans on aviation-sector goods; bans the provision of architectural, engineering, IT-consultancy and legal advisory services to the Russian government and Russian companies; and imposes restrictions on Russian-flagged vessels at the Russian Maritime Register.

Regulation (EU) 2022/1925 of the European Parliament and of the Council of 14 September 2022 on contestable and fair markets in the digital sector (Digital Markets Act, DMA) was published in OJ L 265 on 12 October 2022, entered into force on 1 November 2022, and applied for the most part from 2 May 2023. The DMA establishes an ex-ante competition framework imposing binding obligations and prohibitions on designated "gatekeepers" operating Core Platform Services (CPS) in the EU — covering search engines, social-networking services, video-sharing platforms, number-independent interpersonal communications, operating systems, web browsers, virtual assistants, cloud computing, online intermediation services, and online advertising. The European Commission designated six gatekeepers on 6 September 2023 (Alphabet, Amazon, Apple, ByteDance, Meta, Microsoft); full compliance with all obligations was required by 7 March 2024. Subsequent designations added Booking.com (May 2024) and Apple iPadOS (April 2024). The DMA functions as the EU's structural anchor for ex-ante digital competition regulation, closing the enforcement gap left by ex-post competition law (Articles 101–102 TFEU) where market-tipping dynamics make remedies ineffective after the fact.

The Council of the EU adopted Council Implementing Regulation (EU) 2022/878 of 3 June 2022, implementing Regulation (EU) No 269/2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine. The regulation adds 65 individuals and 18 legal entities to Annex I, subjecting them to an EU-wide asset freeze and a prohibition on EU persons or entities making funds or economic resources available to them. The listed entities span Russia's defense-industrial base, military-linked vehicle and tyre manufacturing, and financial-market infrastructure.

On 3 June 2022 the Council of the European Union adopted Regulation (EU) 2022/879, the sixth package of sanctions against Russia over the invasion of Ukraine, further amending Regulation (EU) No 833/2014. It bans the seaborne import of Russian crude oil and refined petroleum products, covering roughly two-thirds of EU oil imports from Russia at adoption (pipeline deliveries via Druzhba were temporarily exempted). It removes Sberbank, Credit Bank of Moscow and Russian Agricultural Bank from SWIFT (Annex XIV), bans EU operators from providing accounting, auditing, bookkeeping, tax consulting, business/management consulting and public-relations services to persons in Russia (new Article 5n), and adds three more Russian broadcasters to the EU broadcasting-suspension list (Annex XV). It entered into force on 4 June 2022, the day after publication in the Official Journal.

Regulation (EU) 2022/868 of the European Parliament and of the Council of 30 May 2022 on European data governance — the Data Governance Act (DGA) — was published in the Official Journal on 3 June 2022, entered into force on 23 June 2022, and became fully applicable on 24 September 2023. The DGA is the second pillar of the EU data-economy framework (alongside GDPR for personal data and the Data Act 2023/2854 for industrial/IoT data) and establishes four structural mechanisms: (i) a harmonised public-sector data re-use regime for protected data held by public-sector bodies; (ii) a mandatory notification and structural-separation regime for data-intermediation service providers; (iii) a voluntary recognition framework for data-altruism organisations (RDAOs); and (iv) the European Data Innovation Board (EDIB) to co-ordinate national competent authorities and advise on common European data spaces and interoperability standards. The regulation is the foundational parent statute of the existing French SREN law filing (2024-05-21) and functions as enabling legislation for the EU's sectoral common-data-space programme (Health, Agriculture, Finance, Mobility, Green Deal, Energy, etc.).

On 15 March 2022 the Council of the European Union adopted Regulation (EU) 2022/428, amending Regulation (EU) No 833/2014 (the fourth package of measures against Russia). It bans imports, purchase and transport of the iron and steel products listed in a new Annex XVII that originate in or are exported from Russia, bans the sale or export of Annex XVIII luxury goods to Russia (above EUR 300 per item unless otherwise specified), and prohibits transactions with the Russian state-controlled entities listed in Annex XIX. The Regulation entered into force on the day after its publication in the Official Journal (OJ L 87 I, 15.3.2022), i.e. 16 March 2022.

On 25 February 2022, the day after Russia's full-scale invasion of Ukraine, the Council of the European Union adopted Regulation (EU) 2022/328, amending Regulation (EU) No 833/2014. It prohibits the sale, supply, transfer or export of dual-use goods and technology to any person, entity or body in Russia, or for military use or military end-users there, and extends to goods and technology suited for use in the oil refining industry and for the aviation and space industry, alongside a ban on related technical assistance, brokering, financing and insurance/maintenance services. The Regulation entered into force on the day after its Official Journal publication (OJ L 49, 25.2.2022), i.e. 26 February 2022.