The European Commission (“Commission”) recently launched two stakeholder consultations under the EU AI Act. The first (see here), closing on 9 January 2026, relates to the copyright-related obligations for General Purpose AI (“GPAI”) providers under the AI Act and GPAI Code of Practice. The second (see here), closing on 6 January 2026, seeks feedback on a draft implementing act to establish AI regulatory sandboxes under the AI Act. We summarise key points below.  

Consultation on protocols for reserving rights from text and data mining under the AI Act and the GPAI Code of Practice

On 1 December 2025, the Commission launched a stakeholder consultation on technical protocols for expressing reservations of rights against text and data mining (“TDM”). The consultation is intended to support the AI Act’s obligation for providers of general-purpose AI models to put in place a policy to comply with EU law, including to identify and comply with reservations of rights expressed pursuant to Article 4(3) of Directive (EU) 2019/790. This is in line with the GPAI Code of Practice, which commits signatories to follow appropriate machine-readable protocols for expressing such reservations, as well as robots.txt and subsequent IETF standards.

Rightsholders, providers of general-purpose AI models, civil society organizations, standardization bodies, and other interested parties are invited to share their views on the technical feasibility and potential uptake of different TDM reservation-of-rights solutions, as identified in the EUIPO study on “Development of Generative Artificial Intelligence from a Copyright Perspective”. The consultation seeks to identify machine-readable, standardised protocols that can be implemented consistently and interoperably across different media, languages, and sectors. By establishing a common technical approach, the Commission aims to ensure that providers of GPAI models can reliably detect and respect rights reservations in a consistent and technically feasible way.

Stakeholders have until the 9January 2026 to respond and can also express interest in participating in workshops organized by the Commission. Signatories to the GPAI Code of Practice (CoP) will be invited by default to these meetings. Following its consultation period, the Commission will publish the list of generally agreed machine-readable reservation-of-rights solutions, which will then be reviewed regularly—at least every two years—in line with updates to the GPAI Code of Practice.

Consultation on draft implementing act to establish AI regulatory sandboxes under the AI Act

On 2 December 2025, the Commission launched a stakeholder consultation on its draft implementing act for the establishment, development, implementation, operation, and supervision of AI regulatory sandboxes. The draft sets out common rules for the establishment and operation of the sandboxes including, among other things, the terms and conditions for participating in the AI sandbox and the application and selection process.

The sandboxes are designed to provide a controlled environment where businesses can test innovative AI systems under regulatory supervision. The sandboxes will support compliance with the AI Act, consistent with Article 57, which requires Member States to establish at least one national AI regulatory sandbox by 2 August, 2026, and will support the objective of the Act to foster AI innovation and support compliance.

Stakeholders have until 6 January 2026, to share their views on the proposed framework, including the criteria for participation, the scope of activities permitted within the sandbox, and the obligations that apply after participation.


The Covington team regularly advises the world’s top companies on their most challenging technology regulatory, compliance, and public policy issues in the EU and other major markets. Please reach out to a member of the team if you need any assistance.

Print:
Email this postTweet this postLike this postShare this post on LinkedIn
Photo of Marianna Drake Marianna Drake

Marianna Drake counsels leading multinational companies on some of their most complex regulatory, policy and compliance-related issues, including data privacy and AI regulation. She focuses her practice on compliance with UK, EU and global privacy frameworks, and new policy proposals and regulations relating…

Marianna Drake counsels leading multinational companies on some of their most complex regulatory, policy and compliance-related issues, including data privacy and AI regulation. She focuses her practice on compliance with UK, EU and global privacy frameworks, and new policy proposals and regulations relating to AI and data. She also advises clients on matters relating to children’s privacy, online safety and consumer protection and product safety laws.

Her practice includes defending organizations in cross-border, contentious investigations and regulatory enforcement in the UK and EU Member States. Marianna also routinely partners with clients on the design of new products and services, drafting and negotiating privacy terms, developing privacy notices and consent forms, and helping clients design governance programs for the development and deployment of AI technologies.

Marianna’s pro bono work includes providing data protection advice to UK-based human rights charities, and supporting a non-profit organization in conducting legal research for strategic litigation.

Photo of Marty Hansen Marty Hansen

Martin Hansen has over two decades of experience representing some of the world’s leading innovative companies in the internet, IT, e-commerce, and life sciences sectors on a broad range of regulatory, intellectual property, and competition issues, including related to artificial intelligence. Martin has…

Martin Hansen has over two decades of experience representing some of the world’s leading innovative companies in the internet, IT, e-commerce, and life sciences sectors on a broad range of regulatory, intellectual property, and competition issues, including related to artificial intelligence. Martin has extensive experience in advising clients on matters arising under EU and U.S. law, UK law, the World Trade Organization agreements, and other trade agreements.

Photo of Fredericka Argent Fredericka Argent

Fredericka Argent is a special counsel in Covington’s technology regulatory group in London. She advises leading multinationals on some of their most complex regulatory, policy and compliance-related issues, including data protection, copyright and the moderation of online content.

Fredericka regularly provides strategic advice…

Fredericka Argent is a special counsel in Covington’s technology regulatory group in London. She advises leading multinationals on some of their most complex regulatory, policy and compliance-related issues, including data protection, copyright and the moderation of online content.

Fredericka regularly provides strategic advice to companies on complying with data protection laws in the UK and Europe, as well as defending organizations in cross-border, contentious investigations and regulatory enforcement in the UK and EU Member States. She advises global technology and software companies on EU copyright and database rights rules, including the implications of legislative developments on their business. She also counsels clients on a range of policy initiatives and legislation that affect the technology sector, such as the moderation of harmful or illegal content online, rules affecting the audiovisual media sector and EU accessibility laws.

Fredericka represents right owners in the publishing, software and life sciences industries on online IP enforcement matters, and helps coordinate an in-house internet investigations team who conduct global monitoring, reporting, notice and takedown programs to combat Internet piracy.

Photo of Lisa Peets Lisa Peets

Lisa Peets is co-chair of the firm’s Technology and Communications Regulation Practice Group and a member of the firm’s global Management Committee. Lisa divides her time between London and Brussels, and her practice encompasses regulatory compliance and investigations alongside legislative advocacy. For more…

Lisa Peets is co-chair of the firm’s Technology and Communications Regulation Practice Group and a member of the firm’s global Management Committee. Lisa divides her time between London and Brussels, and her practice encompasses regulatory compliance and investigations alongside legislative advocacy. For more than two decades, she has worked closely with many of the world’s best-known technology companies.

Lisa counsels clients on a range of EU and UK legal frameworks affecting technology providers, including data protection, content moderation, artificial intelligence, platform regulation, copyright, e-commerce and consumer protection, and the rapidly expanding universe of additional rules applicable to technology, data and online services.

Lisa also supports Covington’s disputes team in litigation involving technology providers.

According to Chambers UK (2024 edition), “Lisa provides an excellent service and familiarity with client needs.”