Morrison Foerster is an international law firm with lawyers practicing throughout the United States, Asia, and Europe. Click to discover more.

mofo_share_image.jpg

Morrison Foerster

common-default.jpeg

Terms / Notices

Cookies

Privacy Policy

Reporting Hotline

Attorney Advertising

Alumni

  Linkedin

MoFo LinkedIN

  Facebook

MoFo Facebook

YouTube

MoFo Youtube

Morrison Foerster - Footer

Europe’s Technological Sovereignty Package: Cloud, Chips, and the New Market-Access Test for Tech Providers

You have not solved the recaptcha challenge yet or session expired, try again.

Email Disclaimer

Disclaimer

Unsolicited e-mails and information sent to Morrison Foerster will not be considered confidential, may be disclosed to others pursuant to our <a href="https://www.mofo.com/about/privacy-policy.html">Privacy Policy</a>, may not receive a response, and do not create an attorney-client relationship with Morrison Foerster. If you are not already a client of Morrison Foerster, do not include any confidential information in this message. Also, please note that our attorneys do not seek to practice law in any jurisdiction in which they are not properly authorized to do so.

Feedback

mofo-logo-2022.svg

People

Capabilities

Resources

About

Community

Offices

Careers

Stay Connected

Europe’s Technological Sovereignty Package (the “Package”) is not simply another digital policy package. It is the European...

<h3>Sorry, we weren’t able to find the terms you entered.</h3>Please try a different term or keyword.

People

Capabilities

Resources

Not Found Cards

We are Morrison Foerster — a global firm of exceptional credentials. Our clients include some of the largest financial institutions, investment banks, and Fortune 100, technology, and life sciences companies. Our lawyers are committed to achieving innovative and business-minded results for our clients, while preserving the differences that make us stronger.Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations. Prior results do not guarantee a similar outcome.

About Morrison Foerster

people-default-header-desktop.jpg

people-default-header-mobile.jpg

Default Meta Data

Europe’s Technological Sovereignty Package (the “Package”) is not simply another digital policy package. It is the European Commission’s 2026 bundle to reduce Europe’s dependence on non-EU technology suppliers and build more EU-controlled capacity across chips, cloud, AI, open source, and energy-related digital infrastructure. The Package’s overarching goal is twofold: stimulating homegrown capacity through industrial policy while at the same time setting sovereignty thresholds for non-EU suppliers. Read our <a href="https://datadecoded.mofo.com/topics/europe-s-technological-sovereignty-package-cloud-chips-and-the-new-market-access-test-for-tech-providers" target="_blank">analysis</a>.

Europe’s Technological Sovereignty Package: Cloud, Chips, and the New Market-Access Test for Tech Providers

Sign Up

<div class="videoWrapper">Alex van der Wolk, managing partner of the firm’s Amsterdam office and chair of Morrison Foerster’s European Data, Cyber + Privacy practice, employs his nearly 20 years of experience to advise global companies on their most complex data strategies and compliance programs governing all aspects of information management. Alex’s clients benefit from his practical approach and global perspective, saying: “he quickly gets to the heart of the issue and provides solid, pragmatic advice based on the experience he has gained,” “in addition to having very strong legal knowledge, he has a commercial understanding and provides great insight in global matters,” and  “Alex is a true privacy expert with the ability to offer practical guidance on complex problems” (Chambers EU).</div>Alex helps clients develop privacy and data strategies at the forefront of their digital and data-driven endeavors, especially those involving new technologies, such as artificial intelligence and the metaverse. He has particular experience assisting clients with structuring their approach to data in specialized areas, such as health-tech, Agtech, and Adtech. Alex is an experienced litigator, representing clients in privacy litigation in Europe, including successfully representing clients in the first class action cases in the Netherlands and the UK. Additionally, Alex is often called upon to head crisis management teams for clients facing investigations by data protection authorities or responding to cybersecurity incidents. He counsels clients on their incident and cyber preparedness and has done significant work advising clients on EU cyber and data regulatory frameworks, such as NIS2, DORA, the Cyber Resilience Act, and the EU Data Act.Notably, Alex was one of the first practitioners in Europe to help companies set up Binding Corporate Rules (BCRs), and since that time has used this deep knowledge to develop a longstanding and unparalleled track record in obtaining regulatory approval for BCRs, both in the EU and in the UK.Alex is a frequent speaker at high-profile international conferences, including IAPP and South by Southwest (SXSW), and is a guest lecturer at the Tilburg Institute for Law, Technology, and Society. He is a Dutch-qualified lawyer and a member of the Amsterdam and Brussels Bars. He speaks fluent English and Dutch.

Alex van der Wolk

Managing Partner, Amsterdam

Christoph Nuessing advises leading international and German companies on complex digital regulatory matters, with a particular focus on the technology, media, and telecommunications sectors. He is a trusted advisor on regulatory strategies, enforcement risks, and public policy developments under EU and Germany law affecting highly regulated digital business models.Christoph’s practice centers on regulated industries. He regularly advises operators of online platforms—including social networks, online marketplaces, media platforms, and video-sharing services—on their regulatory obligations and engagement with authorities. He also counsels providers of electronic communications and web-based or OTT services on EU telecommunications regulations and related consumer and enforcement issues, as well as audiovisual service providers across both linear broadcasting and on-demand models.Christoph’s experience spans high-profile regulatory areas, including online safety and hate speech, gambling regulation, youth protection, media platform access, broadcasting licensing, and cooperation with law enforcement authorities. In addition to advising on day-to-day compliance, he has significant public policy experience, supporting clients in assessing the business impacts of forthcoming legislation and shaping internal and external positioning with regard to regulators, policymakers, and other stakeholders.Christoph has significant experience advising on EU cyber and digital resilience regulation, including the NIS2 Directive, the Cyber Resilience Act, and the Data Act. He supports clients in designing and implementing governance, risk management, and compliance frameworks, assessing regulatory exposure, and preparing for supervisory scrutiny and enforcement under the evolving EU cyber and data regulatory landscape. His work frequently sits at the intersection of cybersecurity, product regulation, and digital operations.Christoph is a partner in Morrison Foerster’s German office in Berlin and a member of the firm’s Antitrust practice group, where his work focuses on regulatory strategy, government enforcement, and public policy engagement.<h4>Representative Experience</h4><ul><li>Served as lead regulatory advisor to an international video-sharing platform on compliance with EU and German platform regulation, including online safety, youth protection, and media intermediary obligations, and on implementation and enforcement exposure under the EU Digital Services Act.</li><li>Represented German and international media companies in their engagement and disputes with German media authorities concerning the application of broadcasting licensing requirements to web-based audiovisual formats, the interpretation of media platform regulations, and advertising compliance under the German Media State Treaty, addressing fundamental questions of regulatory classification and supervisory competence.</li><li>Advised an international technology company on EU and German public policy and regulatory strategy in connection with major legislative initiatives, including the Sec. 19a Act Against Restraints of Competition (ARC), the German Postal Act, the EU Machinery Regulation, and the proposed EU Child Sexual Abuse Material (CSAM) Regulation, with a focus on impact assessment and strategic positioning with regard to policymakers and regulators.</li><li>Advised multinational companies on their compliance with the NIS2 Directive, including scope assessments, governance and risk management requirements, and preparation for supervisory oversight and enforcement under national implementation regimes.</li><li>Advised international cloud services providers in reaching compliance with the EU Data Act, with a particular focus on cloud switching, interoperability obligations, and contractual and operational implications for their EU customers.</li><li>Counseled an international technology company on the regulatory compliance of its web-based communications services under EU electronic communications law, including consumer protection obligations and supervisory exposure.</li><li>Advised a major German broadband network operator on all regulatory and commercial issues relating to its distribution of audiovisual content over cable and IP networks, including carriage arrangements and engagement with German media authorities.</li><li>Advised international technology companies in the EU rollout of home entertainment devices, consumer products, and connected car features, with a particular focus on compliance with EU product regulation, eco-design requirements, and cybersecurity rules.</li></ul>

Christoph Nüßing berät führende internationale und deutsche Unternehmen zu komplexen Fragen des digitalen Regulierungsrechts mit besonderem Schwerpunkt auf den Sektoren Technologie, Medien und Telekommunikation. Er ist ein anerkannter Ansprechpartner für regulatorische Strategien, Durchsetzungs- und Haftungsrisiken sowie für rechtspolitische Entwicklungen auf europäischer und nationaler Ebene, die hochregulierte digitale Geschäftsmodelle betreffen.Der Schwerpunkt seiner Tätigkeit liegt in regulierten digitalen Industrien. Christoph Nüßing berät regelmäßig Betreiber von Online-Plattformen – darunter soziale Netzwerke, Online-Marktplätze, Medienplattformen und Video-Sharing-Dienste – zu ihren regulatorischen Pflichten sowie zur Interaktion mit Aufsichts- und Regulierungsbehörden. Darüber hinaus berät er Anbieter elektronischer Kommunikationsdienste sowie webbasierter oder OTT-Dienste zu Fragen des europäischen Telekommunikationsrechts, einschließlich verbraucherrechtlicher Anforderungen und aufsichtsrechtlicher Durchsetzung. Ein weiterer Fokus liegt auf der Beratung von Anbietern audiovisueller Dienste, sowohl im linearen Rundfunk als auch im On-Demand-Bereich.Die regulatorische Erfahrung von Christoph Nüßing umfasst eine Vielzahl besonders sensibler Themenfelder, darunter Online-Sicherheit und Hate Speech, Glücksspielregulierung, Jugend- und Minderjährigenschutz, Zugang zu Medienplattformen, Rundfunklizenzierung sowie die Zusammenarbeit mit Strafverfolgungs- und Sicherheitsbehörden. Neben der laufenden Compliance-Beratung verfügt er über ausgeprägte Erfahrung im Bereich Public Policy und Regulierungsstrategie. Er unterstützt Mandanten bei der Bewertung der wirtschaftlichen Auswirkungen neuer und geplanter Gesetzgebung und begleitet die interne wie externe Positionierung gegenüber Gesetzgebern, Aufsichtsbehörden und weiteren Stakeholdern.Ein weiterer Schwerpunkt seiner Praxis liegt im Bereich Cyber- und Digital-Resilienz-Regulierung auf EU-Ebene. Christoph Nüßing berät umfassend zu den Anforderungen der NIS-2-Richtlinie, des Cyber Resilience Act und des Data Act. Er begleitet Mandanten bei der Ausgestaltung von Governance-, Risiko- und Compliance-Strukturen, bei der Bewertung regulatorischer Risiken sowie bei der Vorbereitung auf aufsichtsrechtliche Prüfungen und Durchsetzungsmaßnahmen im sich dynamisch entwickelnden europäischen Cyber- und Datenregulierungsrahmen. Seine Tätigkeit bewegt sich dabei häufig an der Schnittstelle von Cybersicherheit, Produktregulierung und digitalen Betriebsmodellen.Christoph Nüßing ist Partner des deutschen Büros von Morrison Foerster in Berlin und Mitglied der Antitrust-Praxisgruppe der Kanzlei, innerhalb derer sich seine Tätigkeit auf Regulierungsstrategie, behördlicher Durchsetzung und Public-Policy-Begleitung konzentriert.<h4>Repräsentative Mandate</h4><ul><li>Leitende regulatorische Beratung einer internationalen Video-Sharing-Plattform zu Anforderungen des europäischen und deutschen Plattform- und Medienrechts, einschließlich Online-Sicherheit, Jugendmedienschutz, Medienintermediärsregulierung sowie zur Umsetzung und zu Durchsetzungsrisiken nach dem Digital Services Act.</li><li>Vertretung deutscher und internationaler Medienunternehmen gegenüber deutschen Landesmedienanstalten sowie in behördlichen Streitverfahren zu Fragen der Rundfunklizenzierung webbasierter audiovisueller Angebote, zur Auslegung der Medienplattformregulierung und zu Werbevorgaben nach dem Medienstaatsvertrag, einschließlich grundlegender Fragen der regulatorischen Einordnung und behördlichen Zuständigkeit.</li><li>Beratung eines internationalen Technologieunternehmens zu europäischer und deutscher Public-Policy- und Regulierungsstrategie im Zusammenhang mit zentralen Gesetzgebungsvorhaben, darunter § 19a GWB, das deutsche Postgesetz, die EU-Maschinenverordnung sowie der vorgeschlagene EU-CSAM-Rechtsrahmen, mit Schwerpunkt auf Impact-Analysen und strategischer Positionierung gegenüber Politik und Verwaltung.</li><li>Beratung multinationaler Unternehmen zur Umsetzung der NIS-2-Richtlinie, einschließlich der Prüfung des Anwendungsbereichs, der Ausgestaltung von Governance- und Risikomanagementstrukturen sowie der Vorbereitung auf aufsichtsrechtliche Kontrolle und Durchsetzung im Rahmen der nationalen Umsetzung.</li><li>Beratung internationaler Cloud-Dienstleister zur Einhaltung des EU Data Act, insbesondere zu Anforderungen des Cloud-Switching, zu Interoperabilitätspflichten sowie zu vertraglichen und operativen Auswirkungen für europäische Kunden.</li><li>Beratung eines internationalen Technologieunternehmens zur regulatorischen Einordnung und Compliance webbasierter Kommunikationsdienste nach dem europäischen Telekommunikationsrecht, einschließlich verbraucherrechtlicher Anforderungen und aufsichtsrechtlicher Risiken.</li><li>Beratung eines großen deutschen Breitbandnetzbetreibers zu sämtlichen regulatorischen und kommerziellen Fragestellungen im Zusammenhang mit der Verbreitung audiovisueller Inhalte über Kabel- und IP-Netze, einschließlich Einspeisevereinbarungen und der Kommunikation mit den zuständigen Landesmedienanstalten.</li><li>Beratung internationaler Technologieunternehmen beim Markteintritt und Roll-out von Home-Entertainment-Geräten, Verbraucherprodukten und Connected-Car-Funktionen in der EU, mit besonderem Fokus auf Produktregulierung, Ökodesign-Vorgaben und Cybersicherheitsanforderungen.</li></ul>

Christoph Nüßing

Partner

Arthur Focquet is an associate in the Brussels and Amsterdam offices of Morrison Foerster and a member of the Global Data, Cyber + Privacy practice and the Cybersecurity Group.Arthur advises clients on privacy and data protection compliance matters, ranging from comprehensive compliance programs to complex technical issues. His practice focuses on EU data protection requirements under the General Data Protection Regulation (GDPR), the Digital Services Act (DSA), the Artificial Intelligence Act (AI Act), and related legislation.Arthur provides strategic counsel on evolving regulatory developments at both the EU and member-state levels.Arthur has designed and implemented GDPR compliance projects for clients, including:<ul><li>Developing strategies for international data transfers;</li><li>Drafting and negotiating data processing agreements and other contractual arrangements;</li><li>Preparing internal data handling policies and privacy notices;</li><li>Establishing processes to address data subject rights;</li><li>Conducting data protection impact assessments; and</li><li>Implementing privacy-by-design and privacy-by-default measures.</li></ul>In addition to compliance matters, Arthur has represented clients in privacy litigation before the Belgian Data Protection Authority and the Belgian Market Court (the appellate court for DPA decisions), including a matter referred to the Court of Justice of the European Union for a preliminary ruling. His litigation and regulatory experience spans data subject claims, DPO requirement investigations, and large-scale cookie compliance matters involving major Belgian media companies across various industry sectors.Arthur also advises clients on NIS2 and DORA requirements and manages cybersecurity incident response matters, including before competent authorities.Prior to joining Morrison Foerster, Arthur practiced at a large U.S.-based law firm.He is a member of the Brussels Bar and is fluent in French, Dutch, and English, with proficiency in Spanish.

Arthur Focquet

Associate

Andreas Ebert advises clients on German and European data privacy and AI law, as well as on other digital and IT regulatory compliance matters.Andreas studied law at Heidelberg University, where he specialized in public international law. Prior to joining Morrison Foerster, Andreas worked as a research fellow at the Karlsruhe Institute of Technology and the University of Frankfurt, where he was involved in several interdisciplinary research projects covering data privacy, cybersecurity, and AI law. A research project on comparative data privacy law led him to study at the University of New South Wales in Sydney, Australia. Prior to joining Morrison Foerster, Andreas worked as a research assistant in the data privacy practice group of another international law firm. He is currently pursuing a doctorate in data privacy law at the University of Frankfurt.During his legal clerkship in the Higher Regional Court of Berlin, Andreas completed stages in the AI and data economy department of the German Federal Ministry of the Economy, the data privacy and AI practice group of an international law firm, and the Embassy of the Federal Republic of Germany in Washington, D.C. He publishes regularly on German and European data privacy law matters, the European AI Act, and other regulatory topics.Andreas is an associate in Morrison Foerster’s German office in Berlin and a member of the global Data, Cyber + Privacy Group.

Andreas Ebert berät Mandanten zum deutschen und europäischen Datenschutzrecht sowie zum KI-Recht und zu weiteren regulatorischen Fragestellungen im Bereich Digitalisierung und IT-Compliance.Andreas studierte Rechtswissenschaften an der Universität Heidelberg mit dem Schwerpunkt Völkerrecht. Vor seinem Eintritt bei Morrison Foerster war er als wissenschaftlicher Mitarbeiter am Karlsruher Institut für Technologie sowie an der Universität Frankfurt tätig, wo er an mehreren interdisziplinären Forschungsprojekten zu Datenschutz, Cybersicherheit und KI-Recht mitwirkte. Ein Forschungsprojekt zum vergleichenden Datenschutzrecht führte ihn an die University of New South Wales (Sydney, Australien). Vor seinem Eintritt bei Morrison Foerster war Andreas zudem als wissenschaftlicher Mitarbeiter in der Datenschutzpraxis einer anderen internationalen Wirtschaftskanzlei tätig. Derzeit promoviert er im Datenschutzrecht an der Universität Frankfurt.Im Rahmen seines Referendariats am Kammergericht Berlin absolvierte Andreas Stationen im Referat für Künstliche Intelligenz und Datenökonomie des Bundesministeriums für Wirtschaft, in der Datenschutz- und KI-Praxis einer internationalen Wirtschaftskanzlei sowie an der Botschaft der Bundesrepublik Deutschland in Washington, D.C.Er publiziert regelmäßig zu Themen des deutschen und europäischen Datenschutzrechts, zum europäischen AI Act sowie zu weiteren regulatorischen Fragestellungen.﻿Andreas ist Associate des deutschen Büros von Morrison Foerster in Berlin und Mitglied der globalen Data, Cyber + Privacy Praxisgruppe.