Welcome to Carver's European Union Regulatory Updates for June 21, 2026.

Starting with environmental regulation, European Commissioner Roswall announced plans for a future universal restriction on per- and polyfluoroalkyl substances, known as PFAS, following a scientific assessment scheduled after 2026. The proposal aims to ban PFAS in consumer goods while permitting critical industrial uses only under strict conditions. Additionally, innovation hubs and a monitoring framework will be launched to support this initiative. Businesses and regulators within the European Union should prepare to adopt policies phasing out PFAS and comply with forthcoming restrictions.

In monetary policy, the European Central Bank has integrated financial stability considerations into its framework. A new discussion paper series, number 30, outlines the use of four quantitative models—time series, balance sheet, credit risk, and dynamic stochastic general equilibrium models—to assess the interaction between monetary policy and financial stability. This approach supports regular integrated assessments to balance price stability with financial system resilience, especially during periods of financial stress.

Turning to corporate developments, KfW, the German state-owned development bank, will acquire 40 percent of KNDS share capital from Wegmann & Co. GmbH. This transaction results in joint control of KNDS by KfW and GIAT, replacing Wegmann & Co. GmbH as a controlling party. The merger notification has been submitted to the European Commission under Council Regulation 139/2004. Compliance with merger control procedures, including decision deadlines and transparency through publication of concentration descriptions and press communications, is required.

On security legislation, the German Senate has approved a Bundesrat initiative to tighten firearms laws. The illegal handling of semi-automatic pistols will be reclassified from a misdemeanor to a crime. Furthermore, law enforcement authorities will be authorized to order telecommunications surveillance upon suspicion of illegal possession of such firearms. Relevant agencies must update internal policies to reflect the reclassification and new enforcement powers.

In France, multiple cybersecurity vulnerabilities have been identified in Drupal versions prior to specified patch levels. These include remote code execution, SQL injection, server-side request forgery, and cross-site scripting vulnerabilities. Users of affected Drupal versions must apply security patches as detailed in Drupal security bulletins SA-CORE-2026-006 through SA-CORE-2026-009 to mitigate risks of unauthorized code execution and data breaches.

Similarly, several security vulnerabilities have been disclosed affecting various versions of Spring Boot and Spring for GraphQL. These include risks of remote code execution that could lead to system compromise. French users and organizations are advised to refer to official Spring security bulletins and apply patches promptly.

In France’s housing sector, a briefing scheduled for June 23, 2026, will present the draft law titled "Relance logement." The proposed legislation focuses on accelerating the construction of new housing units, renovating and re-renting existing housing, and decentralizing housing policy. Government agencies and stakeholders involved in housing development should prepare for the implementation of these new regulatory measures.

That wraps up today's regulatory updates. Visit carveragents.ai for more information.