Recent regulatory developments underscore the growing scrutiny of professional uses of generative AI. On 13 January 2026, the Spanish Data Protection Authority issued a formal notice warning of the legal and privacy risks involved in uploading, transforming or generating images of individuals through AI tools. At the same time, the European Commission has published the first draft of its voluntary Code of Practice on Transparency of AI-Generated Content.

On 4 October 2022, the Council of the European Union definitively approved the Digital Services Act, maintaining unchanged the content proposed by the European Parliament. On 5 July 2022, the European Parliament also approved the articles of the Digital Market Act still pending a final vote in the Council. The Digital Market Act and the Digital Services Act regulate the legal status of providers of intermediary services (e.g., online platforms such as marketplaces, search engines, social networks, hosting services, etc.) and thus also affect other actors (users and businesses of all sizes) interacting through their services.