Oh, me, me! I spent a few years being responsible for a significant bit of DMA review and CYA and responses to regulators.

I’ve read all of it, multiple times, and been grilled by EU regulators (vicariously, via corporate lawyers).

It still boils down to general guidelines that it’s impossible to know if you’re violating before the fact, and they will not even approve/reject proposals in advance. It’s basically “go read the act yourself, and ship what you think is compliant, and you’ll know whether we interpret the words the same way by whether or not we fine you.”

Good times.

> It still boils down to general guidelines that it’s impossible to know if you’re violating before the fact, and they will not even approve/reject proposals in advance. It’s basically “go read the act yourself, and ship what you think is compliant, and you’ll know whether we interpret the words the same way by whether or not we fine you.”

Companies want to know exactly where the line is so they can figure out how to comply with the letter of the law while doing as much as possible to get around the spirit of the law. This has been demonstrated over and over again. It isn't the job of the regulator to help companies with this process.