A cascade of regulatory changes across Europe and beyond is forcing companies to overhaul their compliance operations in 2026. The new rules span everything from digital product security and AI transparency to cross-border personnel moves and carbon border adjustments.
Vietnam Tightens Labor Rules for Foreign Assignments
Companies sending workers to Vietnam face stricter penalties starting September 10. The government issued Decree No. 283/2026/ND-CP on July 15, 2026, introducing new administrative sanctions covering labor law, social insurance, and regulations for Vietnamese citizens abroad. Any business with staff deployed in Vietnam must review its compliance protocols before the autumn deadline.
Keeping up with international labour rules is one thing — but managing safety compliance at home is another daily challenge. A free toolkit with 41 ready-to-use templates helps you document risks, from fire safety to lone working, and stay on top of your legal duties. Download the free Risk Assessment Toolkit
Digital Products Face Dual Deadlines
The EU’s Cyber Resilience Act (CRA) is moving from planning to enforcement. The European Commission published implementation guidelines in July 2026. Starting September 11, manufacturers must report exploited vulnerabilities within 24 hours. Full compliance for all digital products becomes mandatory by December 2027.
Simultaneously, the EU AI Act takes effect in August 2026. Any AI-generated content — images, text, or audio recordings — must carry clear labeling. The obligation applies to both providers and professional users, with non-compliance carrying significant penalties.
Swiss Police Open Doors to German Recruits
Basel-Stadt canton is breaking new ground to address acute staffing shortages. For the first time, German citizens can participate in police training. Four applicants holding a B residence permit will begin the program in autumn 2026. Previously, only those with a C settlement permit were eligible.
Military Service Rules Create Confusion
Since January 1, 2026, men aged 17 to 45 who are subject to military service have needed official approval for overseas stays exceeding three months. The Military Service Act (§ 3 Paragraph 2 WDG) mandates this requirement. However, the Defense Ministry acknowledged that administrative processes are not yet operational. Members of the Bundestag confirmed the obligation is effectively suspended, with a blanket exception intended to preserve freedom of travel for now.
Critical Infrastructure Background Checks Expand
The EU’s CER Directive (2022/2557) now requires operators in 11 sectors — including energy, healthcare, and finance — to conduct systematic background checks. The rules cover all employees in sensitive positions, plus external contractors with access to critical systems.
Customs and Trade Thresholds Shift
The €150 duty-free threshold for shipments from non-EU countries ended July 1, 2026. A flat €3 import fee per product category now applies instead.
For intra-EU e-commerce, the One-Stop-Shop (OSS) procedure remains essential. Businesses must apply the destination country’s VAT rate — ranging from 17 to 25 percent — once their annual EU-wide turnover exceeds €10,000. Quarterly reports go to the Federal Central Tax Office.
Carbon Border Costs Set to Surge
The Carbon Border Adjustment Mechanism (CBAM) entered its definitive phase in early 2026. Importers of steel, aluminum, or cement face retroactive payments starting in 2027. Analysts project carbon certificate prices will climb from the current €60-70 per ton to over €200 by 2035.
The EU’s Omnibus Directive (SME Cap), issued February 2026, aims to ease the burden on small and medium enterprises by limiting the scope of permissible information requests in supply chains.
Crypto and Digital Euro Developments
Since January 2026, the DAC8 directive has imposed new reporting obligations on crypto service providers. The digital euro is advancing: the European Parliament cleared the path for trilogue negotiations on July 9, 2026. The draft legislation mandates acceptance by most retailers, excluding micro-enterprises. The European Central Bank targets a pilot operation for 2027.
