Jeroen van Woezik shares his insights into the role of new EU data legislation on M&A.

This session focuses on healthcare organizations, health platforms, and medtech. We will discuss when medical AI applications, such as "high-risk AI," fall under the AI ​​Act, how the Data Act and Data Governance Act impact the sharing of patient and device data, and where NIS2 impacts healthcare institutions as essential entities. The goal is to clarify which EU data laws apply to each type of healthcare provider (hospital, mental healthcare provider, e-health platform, device vendor), what additional requirements they entail, and how to incorporate these into contracts and transactions.

The energy transition revolves around data: smart meters, charging stations, flexibility services, and energy platforms. We demonstrate how NIS2 classifies energy companies and energy data platforms as essential/important entities, when the Data Act mandates access to and sharing of data from IoT and industrial systems, and what role AI Act regulations play in AI-driven grid optimization and forecasting. This provides a clear picture of which EU regulations apply and the associated risks and opportunities for each type of player (grid operator, supplier, EMS provider, platform).

This Lunch & Learn focuses on B2C companies such as e-commerce platforms and apps that work directly with consumers. We'll discuss when online platforms or marketplaces fall under the DSA, how the AI ​​Act impacts personalized recommendations and profiling, and in which cases the Data Act grants consumers new rights to data from connected products and services. We'll also briefly explore situations in which the DMA can play a role with major gatekeepers. The goal: to clarify which EU data legislation applies to each B2C model and what that means for product design, contracts, and M&A processes.