When we look at what Europe has achieved in terms of data and system protection, businesses have had to adapt to several new regulations, including:
GDPR, introduced a few years ago, which protects personal data and requires explicit consent for its collection and processing. But the European Union didn’t stop there.
The AI Act, designed to create an environment where AI technologies respect human rights, dignity, and trust.
The Data Act, which focuses on improving the EU’s data economy by making data—especially industrial data—more accessible and useful, fostering innovation and a competitive data market.
But What About the Rest of the World?
Europe is certainly not the only region implementing regulations:
These are just a few examples that show Europe is not alone in its regulatory push—it’s not necessarily better or worse than other regions, just different.
What Does This Mean for Innovation?
The answer is twofold.
From my own experience, in 2021, we started thinking about how to better protect our company against risks like hacking and data loss. After all, we handle a vast amount of sensitive data. Since then, we’ve obtained ISO 27001 certification, ensured GDPR compliance, and implemented all necessary regulations into our applications. This was a significant investment, especially for a smaller organization like Summ.link. But it also created opportunities, such as:
Some clients exclude you if you don’t comply with regulations like GDPR or the AI Act.
A more conscious approach to resource allocation—or even scaling down certain assets.
For example, why provide a company car for a consultant who only visits a client one or two days a week while the car sits idle the rest of the time?
Or take mobile devices like laptops and smartphones—everyone already owns one or more personal devices. Why should we supply additional devices when one employee prefers Windows, another prefers Mac, and yet another swears by a particular brand?
By obtaining certification early and adhering to industry standards, we’ve become much more aware of how and why we allocate resources. We want to operate sustainably, even in a throwaway culture. That’s why we’re now reinvesting the freed-up capital into knowledge and skills development!
So yes, regulation can be an opportunity to reinvent your company and differentiate yourself in the market. But it also comes with costs—especially challenging for startups in their early stages. Still, I don’t see it as a problem but rather as an opportunity. The earlier you start implementing regulations, the more scalable your business becomes—both internally and for potential investors. Investors look at how well a company is organized, and certifications can be a positive factor in their decision-making.
Want My Advice?
Start integrating regulations into your business foundation as early as possible. Yes, it may hurt financially in the short term, and you might prefer to allocate that money toward growth or product development. But a solid foundation is crucial—otherwise, you’ll face bigger problems later that will cost far more than the initial investment ever would.
I’m curious to hear how other companies—whether in Ghent or beyond—view this. From service-based businesses to SaaS companies seeking capital, many are dealing with investors who impose strict requirements.
How do you see it?
