EU Public Procurement & Tender Law: What Changed from 2022 to June 2025 (and What to Do Now)
- Thresholds & formats: New EU tender thresholds (from 1 Jan 2024) and mandatory eForms (from 25 Oct 2023) reshaped notice content and data—great for search and analytics, but stricter for buyers and suppliers. [1.][2.][3.]
- Market access controls: The Foreign Subsidies Regulation (FSR) now screens large tenders for foreign financial contributions; plus the EU has started using the IPI (International Procurement Instrument) to restrict access—first on Chinese medical devices. [4.][5.][8.][9.][10.]
- Sanctions & due diligence: The Russia procurement ban (Art. 5k) is still in force and clarified by fresh FAQs; national due-diligence rules (e.g., Germany’s LkSG) expanded scope in 2024. [6.][7.][25.][26.]
- Digital, security & sustainability rules: The AI Act, Data Act (applicable Sept 2025), NIS2 cybersecurity duties, Energy Efficiency Directive (2023 recast), CSRD reporting (first reports in 2025) and CSDDD due-diligence obligations all drive new award/contract clauses. [11.][12.][13.][14.][15.][16.]
- National reforms: The UK’s Procurement Act 2023 went live 24 Feb 2025; Italy’s new Code (Legislative Decree 36/2023) digitises the full contract lifecycle, with 2024 digital provisions and a 2024/2025 corrective decree. [17.][19.][20.][21.]
Who should read this
Sales leaders, CEOs/COOs, and bid teams targeting EU/UK public buyers who need a clear, up-to-date picture of material legal/procedural changes since 2022—and concrete next steps to keep bids compliant and competitive.
The big picture: 2022 → mid-2025
Public procurement law didn’t “stand still.” Instead, the EU layered market-access controls (FSR, IPI) over the 2014 Directives, upgraded data and transparency (eForms), tightened sanctions/due diligence, and accelerated digital/cyber/ESG duties that are increasingly written into tender specs and contracts. The result: more disclosure, more screening, and more data—plus notable national reforms (UK, Italy). [2.][3.][4.][8.][11.][15.]
1) Core EU changes you must account for
A. Thresholds (since 1 Jan 2024)
The EU revised the financial thresholds that trigger OJEU/TED publication. Know which threshold applies to your contract type (works, supplies/services, utilities, concessions). [1.]
Action: Re-check internal “bid or no bid” filters and long-standing boilerplates that cite pre-2024 figures. [1.]
B. eForms are mandatory for above-threshold notices (from 25 Oct 2023)
Contracting authorities must publish using eForms, expanding structured fields (e.g., on sustainability, procurement strategy). This improves findability and analytics—but increases formality and consistency checks. [2.][3.]
Action: Update your opportunity monitoring and data-capture—eForms expose rich fields that your capture team (or AI) can mine for competitive intelligence. [2.][3.]
C. Foreign Subsidies Regulation (FSR)
- Applies since 12 Jul 2023; notification duties for large tenders started 12 Oct 2023. [4.]
- Trigger (public procurement): Contract value ≥ €250m and foreign financial contributions ≥ €4m per third country in the last 3 years (for declaration/reporting). [5.]
Action: Map foreign financial contributions (grants, loans, tax reliefs from non-EU states) across your group; be ready for FS-PP filings and diligence requests in mega-tenders. [4.][5.]
D. International Procurement Instrument (IPI)
- Regulation adopted in 2022; the EU launched its first probe in Apr 2024 (Chinese medical devices). [8.][9.]
- June 2025: First restrictive measure—bar or cap Chinese content in most EU medical device tenders over €5m. Expect further IPI use in strategic sectors. [10.]
Action: For regulated categories (e.g., medtech), document origin/content and watch for IPI clauses in tender docs; consider supply-chain re-routing to maintain eligibility. [8.][9.][10.]
E. Sanctions & Russia procurement ban (Art. 5k)
- Since Apr 2022, EU buyers must not award to Russian entities/persons (and certain subcontractors), with specific exceptions; Commission FAQs for procurement were updated Jan 2024. [6.][7.]
Action: Embed supplier/ownership screening and declarations; cascade to subs/consortia and maintain audit trails. [6.][7.]
F. AI, data, cybersecurity & energy efficiency rules affecting tenders
- AI Act: In force 1 Aug 2024; obligations phase in (prohibitions/AI literacy from Feb 2025; GPAI governance Aug 2025; most high-risk rules Aug 2026). Expect procurement to reference conformity, risk management and transparency. [11.]
- Data Act (Reg. 2023/2854): Applicable 12 Sept 2025; public contracts for digital services (cloud/SaaS, IoT) will add portability, switching, interoperability and data-sharing terms. [12.]
- NIS2: Member States had to transpose by 17 Oct 2024; public buyers/operators in many sectors now require security measures, incident reporting, and vetted supply chains. [13.]
- Energy Efficiency Directive (recast 2023/1791): In force Oct 2023; strengthens the exemplary role of public bodies, with procurement levers (e.g., efficiency criteria, public-sector energy-reduction obligations). [14.]
- CSRD: First companies report in 2025 (FY2024). Tender criteria increasingly tie to ESG disclosures and ESRS data. [15.]
- CSDDD (Directive 2024/1760): In force 25 Jul 2024; will cascade supply-chain human rights/environmental due diligence into procurement. [16.]
Action: Pre-write compliance annexes (AI/InfoSec/NIS2, data portability/interoperability, energy efficiency, ESG/CSRD/CSDDD) your sales/legal can drop into bids. [11.][12.][13.][14.][15.][16.]
2) National spotlights you’ll actually feel
United Kingdom (Europe-wide sellers take note)
- Procurement Act 2023: Live from 24 Feb 2025 with a new notices regime, transparency, exclusion grounds, and SME-friendlier processes; official supplier guidance is available. [17.]
Action: Align your UK bid playbooks, pipeline stages, and exclusion checks to the new Act; update Find a Tender processes and supplier registration datasets. [17.]
Italy
- New Public Contracts Code (Legislative Decree 36/2023): Entered into force 1 Apr 2023, effective for new tenders 1 Jul 2023; full-lifecycle digitalisation via ANAC’s national database effective from 1 Jan 2024; Dec 2024 “Corrective Decree” adjusted >80 provisions. [19.][20.][21.]
Action: For Italian procedures, verify platform readiness (certified digital procurement platforms), data formats, and operator virtual file completeness to avoid formal pitfalls. [19.][20.][21.]
Germany (due-diligence lens)
- LkSG Supply Chain Act: Applies since 2023 (≥3,000 employees) and since 2024 to companies with ≥1,000 employees in Germany; breaches can lead to exclusion from public tenders. Guidance from BAFA explains practical expectations. [25.][26.]
Action: Integrate risk analysis, grievance channels, mitigation; provide evidence in ESPD and contract performance clauses. [25.][26.]
3) Case law & policy signals to watch
- CJEU “Kolin” trend (C-652/22, 2024): Signals stricter access for third-country bidders not covered by GPA/agreements—aligns with EU’s strategic procurement stance alongside IPI/FSR. [24.][23.]
- EU Court (2025) on Article 72 amendments: Fresh guidance on contract modifications and when changes alter the “overall nature,” risking illegality of in-term changes. (Keep an eye on 2025 jurisprudence.) [3.]
- ECA Special Report 28/2023: Found declining competition (fewer bids)—buyers may increase SME-friendly and innovation criteria; sellers should leverage this to differentiate. [22.]
Practical table — the changes that matter (2022–June 2025)
| Topic | What changed | Why it matters for bidders | Immediate action |
|---|
| Thresholds | New EU thresholds from 1 Jan 2024 | Impacts OJEU/TED triggers & strategy | Update boilerplates/eligibility checks [1.] |
| eForms | Mandatory from 25 Oct 2023 | Rich, structured fields; analytics-ready | Upgrade scouting & CRM fields; parse eForms data [2.][3.] |
| FSR | Notifications for mega-tenders since Oct 2023 | Disclosure on foreign support; risk of remedies | Map foreign contributions; prepare FS-PP packs [4.][5.] |
| IPI | First restrictions (med devices) Jun 2025 | Origin/content limits in EU tenders | Validate origin mix; adjust supply chain [8.][9.][10.] |
| Sanctions | Russia procurement ban + 2024 FAQs | Eligibility/exclusion & termination risk | Ownership screening; declarations & audit trail [6.][7.] |
| AI/Data | AI Act phased, Data Act 12 Sep 2025 | New clauses on safety, transparency, portability | Pre-draft AI/Data annexes for bids [11.][12.] |
| Cyber | NIS2 transposed by Oct 2024 | Higher InfoSec, incident, vendor-risk asks | Map NIS2 controls to tender Qs [13.] |
| Energy | EED 2023 recast | Energy-efficiency contract obligations grow | Offer quantified efficiency outcomes [14.] |
| ESG | CSRD reporting in 2025; CSDDD in force 2024 | More ESG evidence at selection/award & KPIs | Align ESG data to ESRS; due-diligence proofs [15.][16.] |
| UK | Procurement Act live 24 Feb 2025 | New notices/exclusions/transparency | Refresh UK playbooks & training [17.] |
| Italy | New Code Jul 2023; digital since Jan 2024 | Procedural formalism + platform use | Validate ANAC data & platform readiness [19.][20.][21.] |
Checklist (use now)
- Re-baseline thresholds and eForms fields in your bid templates. [1.][2.][3.]
- Build an FSR register of foreign financial contributions across your group (3-year lookback). [4.][5.]
- Add Article 5k sanctions and ownership attestations to prime + subs; keep evidence. [6.][7.]
- Maintain origin/BOM documentation for IPI-sensitive categories (e.g., medtech). [8.][9.][10.]
- Pre-write AI, Data, NIS2, EED, ESG annexes; align to CSRD/CSDDD wording buyers use. [11.][12.][13.][14.][15.][16.]
- Localise for the UK regime and Italy’s digital process; train sales & legal. [17.][19.][20.][21.]
- Track modification rules (Art. 72) and case law to manage in-term changes safely. [3.]
- Use eForms data to improve win-loss analytics and competitor tracking. [2.][3.]
How this impacts your go-to-market (solution angle)
- Qualification & eligibility now hinge on origin content, foreign subsidies registers, sanctions screening, and due-diligence documentation—not just technical spec fit. [4.][5.][6.][7.][8.][10.][16.]
- Technical proposals must address security (NIS2), AI safety/ethics, data portability (Data Act), and efficiency outcomes (EED) with measurable KPIs and governance. [11.][12.][13.][14.]
- Pricing & delivery should account for FSR/IPI compliance costs, data-migration/SaaS switching, and ESG reporting overhead. [4.][10.][12.][15.]
Where masernet helps
- AI-assisted tender discovery: Analyzing and suggesting tenders based on your portfolio
- Document filtering & Q&A (coming): Point masernet at tender packs to extract FSR triggers, sanctions clauses, origin/content asks, AI/NIS2/Data Act requirements—then get the answers to your team’s questions in context.
- Risk & eligibility signals: Possible automatic checks for Article 5k, FSR thresholds, NIS2/ESG clauses; filter when a bid looks non-compliant and see the exact document passages.
→ Outcome: Fewer wasted pursuits, stronger compliance narratives, and faster “green-light” decisions.
→ Try masernet now - Find. more information here
FAQ
Do the 2024 thresholds apply to frameworks started in 2023?
No—thresholds apply at procedure start; but subsequent call-offs follow the framework’s terms. Always cite the correct period’s thresholds. [1.]
Are SMEs caught by FSR?
Only when bidding in very large tenders meeting the thresholds with foreign financial contributions. Many SMEs won’t trigger notification but still must submit FSR declarations when required. [4.][5.]
How do the AI Act and Data Act show up in RFPs?
Expect clauses on risk classification, transparency, logging, and user rights/portability, plus commitments on interoperability and switching away from your service. [11.][12.]
Can a subcontractor’s Russian links sink our bid?
Yes—Article 5k covers key subcontracting and entities providing supplies; buyers can exclude or terminate if you breach. Use strict flow-downs and due diligence. [6.][7.]
We sell in the UK too—what changed?
New notices/timelines, updated exclusions, transparency duties, and SME-friendly features under the Procurement Act 2023 (live 24 Feb 2025). Update processes and training. [17.]
Glossary
- eForms: Standardised EU notice schema, mandatory since 25 Oct 2023 for above-threshold tenders. [2.][3.]
- FSR: Foreign Subsidies Regulation—EU scrutiny of non-EU state support in large M&A and public tenders. [4.][5.]
- IPI: International Procurement Instrument—EU tool to restrict third-country bidders where reciprocity is lacking. [8.][10.]
- Art. 5k: EU sanctions ban on procurement with Russian entities. [6.][7.]
- NIS2 / EED / CSRD / CSDDD / Data Act / AI Act: Core digital-security, energy-efficiency, ESG and data/AI laws increasingly referenced in tenders. [11.][12.][13.][14.][15.][16.]
Sources
[1.] European Commission — “Thresholds.” (Binnenmarkt. und Industrie)
[2.] Commission Implementing Regulation (EU) 2019/1780 (eForms). (EUR.-Lex)
[3.] Publications Office (TED) — “Standard forms… eForms mandatory 25 Oct 2023.” (TED)
[4.] European Commission — FSR legislation & applicability dates. (Competition. Policy)
[5.] European Commission — FSR Q&A (tender thresholds & declarations). (Binnenmarkt. und Industrie)
[6.] Council Regulation (EU) 2022/576 (procurement ban linked to Russia). (EUR.-Lex)
[7.] European Commission — Public procurement FAQs on Russia sanctions (26 Jan 2024). (Finance)
[8.] Regulation (EU) 2022/1031 (International Procurement Instrument). (EUR.-Lex)
[9.] Reuters — EU opens IPI investigation into Chinese med-device procurement (Apr 24, 2024). (Reuters)
[10.] Reuters — EU bars Chinese firms from most EU med-device tenders (Jun 20, 2025). (Reuters)
[11.] European Commission — AI Act enters into force; application timeline. (Digitale. Strategie Europa)
[12.] European Commission — Data Act explained (applicable 12 Sept 2025). (Digitale. Strategie Europa)
[13.] European Commission — NIS2 overview & transposition deadline. (Digitale. Strategie Europa)
[14.] European Commission — Energy Efficiency Directive (recast 2023/1791). (Energy)
[15.] European Commission — Corporate Sustainability Reporting (CSRD) timing. (Finance)
[16.] EUR-Lex — Directive (EU) 2024/1760 (CSDDD). (EUR.-Lex)
[17.] GOV.UK — Procurement Act 2023: short guide for suppliers (live 24 Feb 2025). (GOV..UK)
[19.] DLA Piper — The new Italian Public Contracts Code (Decree 36/2023). (DLA. Piper)
[20.] ICLG 2025 — Italy public procurement overview (Code effective dates & digitalisation). (ICLG. International Business Reports)
[21.] Bird & Bird — 2024 Corrective Decree to the Italian Code. (Bird. & Bird)
[22.] European Court of Auditors — Special Report 28/2023 (competition trends). (European. Court of Auditors)
[23.] Sánchez-Graells (How to Crack a Nut) — Commentary on Kolin and third-country access trend. (How. to Crack a Nut)
[24.] Dentons — CJEU restricts access for third-country contractors (context around Kolin). (Dentons.)
