According to Jon Ostrower (here:
Boeing's 737 Max software done, but regulators plot more changes after jet's return) EASA want further changes, either a third AoA sensor or a "synthetic airspeed or equivalent system".
It's not clear to me from the article whether this is a pre-condition to EASA certification of the 737 MAX, or a mandatory Service Bulletin for retrofit.