Key data
| Regulation | Commission Implementing Decision (EU) 2026/2308, of 6 October 2026 |
|---|---|
| Official reference | OJ:L_202602308 — notified with number C(2026) 7098 |
| Publication | 16 October 2026 |
| Entry into force | 6 October 2026 |
| Legal basis | Regulation (EU) 2019/788 of the European Parliament and of the Council |
| Affected parties | Technology companies, AI developers, public institutions and European citizens |
| Category | European Regulation |
| Signatures required | 1,000,000 signatures in at least 7 Member States |
| Collection period | 1 year from registration |
Technology companies and artificial intelligence developers have a new regulatory front to monitor. Commission Implementing Decision (EU) 2026/2308, adopted on 6 October 2026, authorizes the formal registration of the European citizen initiative entitled "Creation of the European Digital District (.IA) for Sovereign AI Governance". It is not yet law, but it is the first formal step that can become binding legislation if it reaches the required threshold of citizen support.
The mechanism is clear: promoters have one year to collect one million signatures in at least seven Member States. If they succeed, the European Commission cannot ignore it: it must respond with a legislative proposal or publicly justify why it does not act. In the context of the AI Regulation (AI Act) already in force, this initiative could add an additional institutional layer of supervision and European technological sovereignty.
What does this regulation establish?
Decision 2026/2308 does not by itself create any new obligations for companies. What it does is formally open the door to the citizen legislative process, supported by Regulation (EU) 2019/788 on the European citizen initiative.
The content of the initiative proposes the creation of a European Digital District (.IA), a specific institutional structure aimed at sovereign governance of artificial intelligence in Europe. The key elements that the initiative seeks to promote are:
- Specific institutional structures for AI supervision at European level.
- Frameworks for technological sovereignty that reduce dependence on third countries in critical AI systems.
- Possible new certification frameworks for AI systems developed or deployed in Europe.
- Regulatory development complementary to the AI Act already in force, not substitutive.
The procedure is as follows: once the initiative is registered, promoters have one year to collect the required million signatures. If the threshold is reached in at least seven Member States, the Commission is obliged to examine the initiative, meet with the promoters and publish a formal response indicating whether it will adopt a legislative proposal and, if not, the reasons.
Economic and operational impact
At this time, Decision 2026/2308 does not generate direct costs or immediate obligations for companies. However, the potential medium-term impact on the technology and AI sector is significant:
- New regulatory obligations: If the initiative succeeds, it could result in additional governance, audit or transparency requirements for AI systems, adding to those already established by the AI Act.
- Certification frameworks: The creation of a European Digital District could involve specific certification processes to operate in the European AI market, with associated adaptation and compliance costs.
- Enhanced institutional supervision: A new European AI supervision structure could increase reporting and audit burdens for companies that develop or deploy AI systems in the EU.
- Competitive opportunity: Companies that anticipate technological sovereignty frameworks and AI governance could position themselves better with institutional clients and European public contracts.
The relevant time horizon is the next year (signature collection period) plus the subsequent legislative processing time, which historically exceeds 18-24 months from when the Commission receives a citizen initiative with sufficient support.
Who does it affect?
- Technology companies that develop, market or deploy artificial intelligence systems in the European Union.
- AI developers, both startups and large corporations, operating under the AI Act framework.
- Public institutions that use or contract AI systems for citizen services.
- CFOs and executives of tech companies who must plan investments in AI regulatory compliance in the medium term.
- Legal advisors and consultants specialized in digital and technology regulation in Europe.
- European citizens who can participate directly in the process by signing the initiative.
Practical example
A Spanish software company that develops an AI system for human resources management is already adapting its product to the AI Act (classified as a high-risk system in the employment field). If the citizen initiative reaches one million signatures and the Commission adopts a legislative proposal for the European Digital District (.IA), this company could face:
- A new specific certification process before the institutional structure of the European Digital District, in addition to AI Act requirements.
- Obligations for periodic reporting to a newly created European supervisory body.
- Requirements for technological sovereignty that could limit the use of third-country cloud infrastructure for AI data processing.
In this scenario, the company should already begin documenting its technological architecture and its dependencies on external providers, to be able to respond quickly when the regulation becomes concrete.
What should companies do now?
- Monitor the progress of signature collection during the next year. If the initiative reaches the threshold of 1 million signatures in 7 Member States, the legislative process will be activated and action will need to be taken with more urgency.
- Review the AI Act compliance map already in force. Any new regulation derived from the European Digital District will be built on this foundation, so staying up to date with the AI Act is the first mandatory step.
- Identify external technological dependencies of your own AI systems (cloud providers, base models, training data). Technological sovereignty is the central axis of the initiative and will directly affect these decisions.
- Include this regulatory risk in strategic planning of regulatory compliance investments for 2027-2028, with a contingent allocation for possible new certification frameworks.
- Consult with advisors specialized in AI regulation to anticipate regulatory scenarios and not arrive late to required adaptations.
Frequently asked questions
How many signatures does the European Digital District initiative need for the Commission to act?
The initiative needs 1 million signatures collected in at least 7 Member States of the European Union. The period for collecting them is 1 year from the formal registration authorized by Decision 2026/2308. If that threshold is reached, the European Commission is obliged to respond formally with a legislative proposal or to publicly justify its inaction.
Does this regulation already create obligations for my technology company?
No. Commission Implementing Decision (EU) 2026/2308 only authorizes the formal registration of the citizen initiative, which allows promoters to begin collecting signatures. It does not establish any direct obligations for companies. Possible regulatory obligations would only arrive if the initiative reaches one million signatures and the Commission subsequently adopts a legislative proposal, a process that could take several years.
What is the relationship between the European Digital District (.IA) and the AI Act?
The citizen initiative seeks to create institutional structures complementary to the AI Act, not substitutive. The AI Act is already in force and establishes compliance requirements for AI systems. The European Digital District (.IA) would promote an additional layer of sovereign governance, with possible new certification frameworks and specific supervisory bodies for European technological sovereignty.
When could new legislation derived from this initiative be enacted?
The signature collection period is 1 year from registration (October 2026). If the threshold is reached, the Commission must examine the initiative and respond formally. Historically, the legislative process following a successful citizen initiative exceeds 18-24 months. At best, concrete legislation would not arrive before 2028-2029.
Which sectors should follow this initiative most closely?
Mainly technology companies and AI developers operating in the EU, especially those with systems classified as high-risk under the AI Act. Also public institutions that contract or use AI, and cloud infrastructure providers, given that technological sovereignty is the central axis of the proposal and could affect technology architecture and procurement decisions.
Official source
Consult complete regulation in official source
Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202602308
