Industrial Policy & Trade Monitor· 2662 actions· ✨ 89 recent

On 16 December 2022 the Council of the European Union adopted Council Regulation (EU) 2022/2474, the 9th package of restrictive measures against Russia, amending Regulation (EU) 833/2014. It entered into force on publication the following day (17 December 2022). The package extends the prohibition on new EU investment from the Russian energy sector to the Russian mining and quarrying sector, bans exports of aircraft and drone engines and their parts to Russia (and to any third country that could re-supply drones to Russia), adds 168 entities to the sectoral export- control annex covering chemicals, nerve agents, night-vision and radio- navigation equipment, electronics and IT components, and prohibits EU advertising, market-research, product-testing and technical-inspection services to Russia. A parallel Council Decision/Implementing Regulation designated a further 141 individuals and 49 entities to the EU asset-freeze and travel-ban list.

Council Regulation (EU) 2022/2372, adopted 24 October 2022, establishes a binding framework empowering HERA (Health Emergency Preparedness and Response Authority) to activate emergency supply measures for crisis-relevant medical countermeasures — vaccines, therapeutics, PPE, medical devices, and in-vitro diagnostics — when a public health emergency at Union level is declared under Regulation (EU) 2022/2371. Emergency-mode powers include joint procurement on behalf of Member States, mandatory information requests to manufacturers on stockpiles and production capacity, accelerated R&D funding under the Emergency Research and Innovation Plan, and Union-level stockpile authority. This is the foundational binding instrument for the EU's post-COVID medical supply-chain resilience architecture; it is referenced by every subsequent EU pharma-resilience initiative including the Critical Medicines Act proposal (2025) and the 2025 MCM Strategy.

Regulation (EU) 2022/2065 on a Single Market For Digital Services (Digital Services Act, DSA) was adopted by the European Parliament and Council on 19 October 2022, published in OJ L 277 on 27 October 2022, entered into force on 16 November 2022, and applied in full from 17 February 2024 (with VLOP/VLOSE obligations applying from 25 August 2023 following the Commission's initial designation letters of February 2023). The DSA establishes a graduated intermediary-liability and platform-safety framework covering all online intermediaries serving EU users, with the heaviest obligations falling on designated Very Large Online Platforms (VLOPs, ≥45m monthly active EU users) and Very Large Online Search Engines (VLOSEs): systemic-risk assessments, annual independent audits, vetted-researcher data access, recommender-system transparency, online-advertising transparency, and crisis-response cooperation mechanisms under Commission coordination. The European Commission holds exclusive enforcement authority over VLOPs and VLOSEs, with fines up to 6% of global turnover. The DSA is the structural twin-pillar to the Digital Markets Act (Reg (EU) 2022/1925): the DMA governs ex-ante competition obligations on designated gatekeepers; the DSA governs ex-post intermediary-liability, content-moderation, and platform-safety obligations across all online intermediaries.

The Bureau of Industry and Security added 57 entities under 57 entries to the Entity List, effective September 30, 2022, in direct response to Russia's ongoing invasion of Ukraine and its illegal annexation of Ukrainian regions. Of the 57 entities, 56 are listed under Russia and one (Subsidiary Sevastopol Naval Plant of Zvezdochka Shipyard) under the Crimea Region of Ukraine. The additions span aviation repair and overhaul facilities, aerospace R&D institutes, naval propulsion, ballistic-missile producers, advanced-materials and quantum science institutes, and the federal metrology agency; 50 of the 57 receive footnote 3 designations as Russian military end users, subjecting them to the Russia/Belarus-Military End User Foreign Direct Product Rule. All are added with a license review policy of denial for all EAR-subject items except food and medicine designated EAR99.

Regulation (EU) 2022/1925 of the European Parliament and of the Council of 14 September 2022 on contestable and fair markets in the digital sector (Digital Markets Act, DMA) was published in OJ L 265 on 12 October 2022, entered into force on 1 November 2022, and applied for the most part from 2 May 2023. The DMA establishes an ex-ante competition framework imposing binding obligations and prohibitions on designated "gatekeepers" operating Core Platform Services (CPS) in the EU — covering search engines, social-networking services, video-sharing platforms, number-independent interpersonal communications, operating systems, web browsers, virtual assistants, cloud computing, online intermediation services, and online advertising. The European Commission designated six gatekeepers on 6 September 2023 (Alphabet, Amazon, Apple, ByteDance, Meta, Microsoft); full compliance with all obligations was required by 7 March 2024. Subsequent designations added Booking.com (May 2024) and Apple iPadOS (April 2024). The DMA functions as the EU's structural anchor for ex-ante digital competition regulation, closing the enforcement gap left by ex-post competition law (Articles 101–102 TFEU) where market-tipping dynamics make remedies ineffective after the fact.

The U.S. Bureau of Industry and Security (BIS) added seven Chinese entities — under seven entries — to the Entity List, effective August 24, 2022, for acquiring or attempting to acquire U.S.-origin items in support of China's military modernization efforts. The entities span China's state-owned aerospace, space-technology, electronics, and control-systems research institutes. All seven entries carry a license requirement covering all items subject to the EAR, with a presumption-of-denial review policy.

Regulation (EU) 2022/868 of the European Parliament and of the Council of 30 May 2022 on European data governance — the Data Governance Act (DGA) — was published in the Official Journal on 3 June 2022, entered into force on 23 June 2022, and became fully applicable on 24 September 2023. The DGA is the second pillar of the EU data-economy framework (alongside GDPR for personal data and the Data Act 2023/2854 for industrial/IoT data) and establishes four structural mechanisms: (i) a harmonised public-sector data re-use regime for protected data held by public-sector bodies; (ii) a mandatory notification and structural-separation regime for data-intermediation service providers; (iii) a voluntary recognition framework for data-altruism organisations (RDAOs); and (iv) the European Data Innovation Board (EDIB) to co-ordinate national competent authorities and advise on common European data spaces and interoperability standards. The regulation is the foundational parent statute of the existing French SREN law filing (2024-05-21) and functions as enabling legislation for the EU's sectoral common-data-space programme (Health, Agriculture, Finance, Mobility, Green Deal, Energy, etc.).

The Department of Commerce Bureau of Industry and Security (BIS) added 91 entities (across 96 entries) to the Entity List under 15 CFR Part 744, in direct response to Russia's further invasion of Ukraine on 24 February 2022. The listed entities span ten destinations — Belize, Estonia, Kazakhstan, Latvia, Malta, Russia, Singapore, Slovakia, Spain, and the United Kingdom — and include Russian military research institutes, shipbuilding facilities, aerospace and electronics manufacturers, and suspected front companies in third countries used to circumvent EAR controls. A license is required for all items subject to the EAR; the review policy is denial for 86 entities and case-by-case (for US Government-supported space programs) for five.