Navigating new EU regulations: A roadmap to governance and business innovation in retail

Navigating new EU regulations: A roadmap to compliance and business innovation in retail
  • Case Study

We supported an international retailer in structuring AI, data, and cybersecurity initiatives to help them navigate new EU requirements and keep innovation moving across markets.

Client

An international retailer

Our role

We conducted an impact assessment, a capability evaluation and developed a roadmap to strengthen governance and support consistent decision‑making across AI, data, and cybersecurity initiatives.

Countries

Sweden/the Netherlands

Setting the scene

Our client operates under a complex international franchise structure within the European Union and beyond. They faced a significant shift in expectations across data and tech, driven by multiple new EU requirements affecting how digital initiatives are governed and delivered.

Regulatory scope

AI Act
Accessibility Directive
AI Liability Directive
Cyber Resilience Act
NIS 2 Directive
Data Act
Data Governance Act
Digital Platform Workers Directive
Digital Services Act
Digital Markets Act
Machinery Regulation
Radio Equipment Directive

Our client had a decentralised, bottom-up approach to innovation. This meant the organisation had limited overall visibility over its ongoing and planned data and AI and cybersecurity projects. There was also a significant disconnect in data governance awareness. This raised concerns over potential reputational and legal liabilities. 

Despite these challenges, our client was keenly interested in exploring new technologies and understanding how to navigate this legal framework. They wanted to strengthen governance to seize new business opportunities. Our client engaged our extensive industry knowledge, tech expertise and a deep understanding of their business challenges to gain competitive advantage.    

How we helped

We approached the project methodically over three phases:

We connected new requirements to our client’s existing and planned initiatives and teams, creating a shared view of priorities and business opportunities.

We appraised our client’s current competencies and readiness. We also identified critical gaps in visibility, ownership, governance awareness and decision‑making needed for consistent execution and growth.

This roadmap prioritised actions based on potential business value, risk exposure and implementation effort, with clear timeframes and ownership.

“Faced with new EU requirements, we worked with our client to turn complexity into clearer decisions and coordinated execution. By creating a practical roadmap with strong governance at its core, we helped them strengthen oversight while continuing to innovate and adopt new technologies with confidence.”

Tomáš Fiala, Partner, Digital Transformation, PwC Czech Republic

Impact and potential

Our interventions strengthened governance awareness and clarified priorities across the organisation. These reduced exposure to reputational and legal risk through clearer ownership and decision‑making. The capability roadmap also provided a clear path to compliance, enabling our client to focus on new business opportunities. 

Data from the capability assessment indicated a remarkable improvement in governance awareness, substantially reducing our client’s liability risks. Long-term, this project positioned the client to maintain control amidst rising expectations for transparency and accountability. Our client is now equipped to adopt new technological advancements at speed. 

Contact us

Tomáš Fiala

Tomáš Fiala

Partner, AI trust leader, PwC Czech Republic

Tel: +420 724 326 846

Patrik Meliš-Čuga

Patrik Meliš-Čuga

Data & AI Governance, PwC Czech Republic

Tel: +420 734 692 573

Follow us on social media