All the attention goes to AI. But put the trend reports and European regulation side by side and a different picture appears: 2026 is the year compliance sets the digital agenda for SMEs. Not as an abstraction — with deadlines that have an actual date.
Four dates for your calendar
- Cybersecurity becomes law. The Dutch implementation of NIS2 is expected to take effect on 1 July 2026. Even firms outside its direct scope will get the requirements passed down by large customers in the chain. And the threat is real: where SMEs are breached, ransomware is involved in 88% of cases — against 39% at large organisations (Verizon DBIR 2025).
- E-invoicing is coming. Belgium has required structured B2B e-invoices since 1 January 2026; The Hague decides on the Dutch route this summer, and the EU mandate for cross-border trade lands on 1 July 2030. A PDF will no longer count as an e-invoice.
- Windows 10 runs dry. On 13 October 2026 the extended security updates stop too. In early 2026, over a quarter of Windows desktops still ran Windows 10 — unmanaged, that is an open door.
- Sustainability data gets one language. The CSRD obligation disappears for SMEs, but banks and large customers keep asking for CO₂ and ESG data. The voluntary VSME standard is becoming the way to answer that question well, once — with a legal cap on broader questionnaires.
And two opportunities
Digital sovereignty has moved from boardroom theme to procurement question: the sovereign cloud market grows to roughly 80 billion dollars this year (Gartner, 2026), and "EU-hosted" is becoming an award criterion — an opening for every SME supplier that can prove it. And low-code and automation make it possible to streamline processes without hiring developers; often it is already in the licences you pay for.
Our advice: treat this not as seven loose projects but as one agenda with dates. Plan the mandatory steps well, and you keep room for the opportunities.
Tags
- strategy
- technology
- sme
Related
- Advisory
Forecasting as a routine: technology forecasting in practice
Which technology deserves your investment — and when? Our action research combines text mining and scenario planning into an approach that is fast, deep, and repeatable.
1 min read
- Advisory
GenAI in 2026: between promise and risk
AI agents now work for hours on their own and costs keep falling — yet lawsuits over fabricated output keep stacking up. The state of play, without hype and without fear.
2 min read
- Education
GenAI in the lecture hall: rules students actually use
Banning fails, and so does a free-for-all. Our research at Leiden University shows what GenAI guidelines look like when students and teachers both accept them.
2 min read