Question: Is Europe at risk of regulatory fragmentation — or can shared literacy frameworks, like those promoted through Lean Entries, help harmonize understanding across borders?

Regulatory fragmentation is a real challenge in Europe. While EU regulations aim for harmonization, many directives—such as NIS2 or the Machinery Directive—allow national deviations and interpretations. This means innovators often face 27 different variations layered on top of the core rules. Beyond safety, privacy and security regulations, there are additional administrative requirements like taxation, IP, and other compliance obligations, making cross-border expansion complex and costly. In my point of view, the European Commission should push for deeper harmonization, learning from best practices within EU Member States and aligning with global frameworks, including the U.S. and other regions. 

Question: How do you see AI sandboxes and EDIHs contributing to regulatory readiness? What should be done to make them more effective in supporting innovators?

AI regulatory sandboxes are a promising initiative, heavily supported by EU funding, to be launched by national competent authorities in August 2026. The assumed sandbox operators, such as EDIHs, already serve as key resources for innovators in the digital and AI space. They provide a strong foundation, but being still young, they need best practices, knowledge sharing and harmonisation of services across Europe. For EDIHs, we propose integrating regulatory literacy at the gateway of each hub. This means offering innovators clear, structured guidance on essential regulations as part of their onboarding process. Our platform Entries can act as a regulatory due diligence tool. Innovators entering an AI sandbox would first complete a basic compliance check through Entries, ensuring they know the most critical requirements, followed by local coaching, training or workshops to confirm their findings. This approach would also feed valuable data back to EDIHs, improving their support services. National competent authorities, Notified Bodies and service providers would experience more straightforward, value-adding transactions with innovators.We suggest starting with a pilot program, which could operate at minimal cost per EDIH to maintain and scale the system. This approach would not only strengthen regulatory readiness but also create feedback loops and analytics to improve support for innovators over time.

Question: You’ve called for a “shared literacy baseline.” What would that look like in practice? Who should lead it – the EU, national authorities, or innovation networks?

All stakeholders need to be involved—the EU, national authorities, and innovation networks. While much of what I’ve explained applies here, I believe the Entries tooling could be the key element to establish a regulatory literacy baseline. At the same time, I’d like to emphasise that training, coaching, and advice remain essential. These should continue through local regulatory experts in workshops where I recommend the innovators pitch their regulatory strategies and learn from peers. Existing elements, such as those offered by EDIHs, universities and incubators, should stay in place. The digital learning component simply creates the wake-up call, possibility to boost efficiency and provide a stable and harmonised learning curve. Activities carried out nationally or by EDIHs, Testing and Experimentation Facilities (TEFs) or AI factories would then become more effective. The European Commission should be strongly involved, endorsing or branding the initiative to show its support. Open-source APIs from Entries should be expected to make this most effective. Unfortunately, the topic of regulatory clarity, as foundational as it has become for European competitiveness, mostly dissolves under other priorities like funding and regulatory simplification. It’s time to make it a visible, actionable and measurable goal for the sake of our innovation!

Question: Can European projects like EVOLVE2CARE or organisations such as the European Network of Living Labs play a role in testing and scaling such literacy tools?

Absolutely. The health sector is an ideal environment for piloting regulatory literacy tools. Entries was originally developed for health tech, and our existing tools already cover key regulations such as MDR, IVDR, AI Act, Data Act, and EHDS. Future tools—like those for the Cyber Resilience Act and GDPR—will also impact healthcare systems. Projects like EVOLVE2CARE could provide the perfect environment to test and scale these tools in real-world settings.

Question: Looking ahead to 2030, what does a “regulation-smart Europe” look like to you?

By 2030, regulatory literacy should be a true baseline for innovators across Europe, supported by AI and data-driven tools. It will be assumed that innovators know what regulations mean for them. If they cannot show their regulatory data—such as classification, applicable regulations, and their compliance pathway—they cannot expect to receive funding or services from EDIHs and other parties. This will become a basic requirement, easily achievable through tools like Entries. By then, the digital and health tech sectors will have strong regulatory sandboxes. Universities and EDIHs will be able to perform due diligence on regulatory basics, ensuring innovators start from a shared understanding of compliance. From there, everyone remains free to compete and innovate, but with shared clarity on compliance. This common understanding will benefit innovators, investors, universities, and authorities alike. Five years is enough to establish this baseline for health tech and digital sectors, measure the results and continue expanding it to other industries.

Question: What message would you share with young innovators or startups who see regulation as a burden rather than a guide?

I think the baseline is that innovators need to understand that safety and security are the baselines for business when it comes to regulated sectors. If an innovator is developing a medical device, safety is the baseline for business. Many startups try to avoid regulatory work or costly clinical investigations. My advice is to integrate regulatory strategy into their business plans and budgets early—and use clinical investigations not only for compliance but also to collect valuable business data, engage early adopters, and strengthen market entry.

Start with what I call the eight early principles. The first four apply broadly:

1. Qualification – Determine which regulations apply to the product.
2. Classification – Understand the risk class and the workload ahead.
3. List your standards – Recognise the best practices instead of re-inventing the wheel
4. Regulatory Strategy – Make it part of the business plan.

The next four are health tech-specific but can be adjusted to other sectors:

1. Literature reviews reveal existing clinical practices, competitors and benchmarks and are a natural first step into clinical evaluation and investigations.
2. Whenever a team member speaks of risks, start writing them down, and collect a good bunch of more from the regulations and standards. Then let a risk management professional help you expand it into a full-blown risk management system.
3. Study the feasibility of your product with good knowledge of the eventual safety and documentation requirements (i.e., design controls) in mind.
4. Assess your most critical suppliers for their regulatory competence and include compliance in quality agreements. You should only work with suppliers that make your path to market easier, not harder.

Ignoring these principles creates a high risk of failure. Starting early saves months in the process and ensures your compliance aligns with business goals and market success.

Question: In such a complex regulatory landscape, do innovators need to develop multitasking skills to balance compliance, product development, and business growth?

Yes, absolutely. And innovators need to include early regulatory advice in their budget. If they cannot hire an experienced regulatory professional right away, consider combining a young expert with a consultant who can mentor them. This way, their team builds internal expertise over time to own their compliance, a key business enabler. This also means the leadership team should understand the basics of regulation, and their regulatory people should speak the language of business. Bridging that gap is essential. We’ve seen this challenge in MedTech for years, and now it’s hitting digital health and AI sectors, which face high-risk classifications and complex systems. The sooner innovators build this capability, the stronger their foundation for growth!

As Europe races to build a digital single market grounded in trust and transparency, voices like Heikki Pitkänen’s remind us that innovation and regulation aren’t opposites — they are partners in progress.