Skip to content
Regulations.
Jurisdiction · 16 regulations

European Union: data, AI and cyber laws

16 regulations in European Union that affect companies handling data: Cyber Resilience Act, DORA, Data Governance Act, Digital Markets Act, Digital Omnibus (data/GDPR), Digital Services Act, EU AI Act, EU Data Act, EU-US Data Privacy Framework, European Health Data Space (EHDS), GDPR, NIS2, Product Liability Directive, eIDAS 2 / EU Digital Identity Wallet, ePrivacy Directive (cookie law), eu-kids-act. Part of EU.

16 regulations

Add to calendar
Apple Calendar or OutlookGoogle Calendar Download .ics

Upcoming deadlines

DateRegulation
in 2moEU AI Act

New bans on sexual deepfakes and CSAM generation; Art 50(2) grace period ends

in 3moEU PLD

Transposition deadline; old PLD repealed

in 3moeIDAS 2

Member States must provide EU Digital Identity Wallets

in 4moEU Data Act

Cloud switching charges abolished

in 6moEU EHDS

EHDS general application date

in 6moGDPR

GDPR Procedural Regulation applies

in 7moNIS2

Next biennial entity notification

in 10moEU AI Act

Legacy GPAI models must comply; national AI sandboxes operational

in 12moEU Data Act

Unfair-terms rules extend to older long-term contracts

in 13moNIS2

Commission review of NIS2

in 14moEU AI Act

High-risk obligations apply to Annex III systems

in 15moEU CRA

CRA fully applies

in 15moeIDAS 2

Private relying parties must accept wallets

in 21moEU CRA

Legacy type-examination certificates expire

in 22moEU AI Act

High-risk obligations apply to Annex I product-embedded systems

in 24moEU CRA

Report on single reporting platform

in 24moEU Data Act

Commission evaluation

in 2.5yEU EHDS

Primary use for first data categories; secondary use framework applies

in 3.9yEU AI Act

Public-authority high-risk systems must comply

in 4.2yEU CRA

First CRA evaluation

in 4.3yEU AI Act

Large-scale EU IT systems must comply

in 4.5yEU EHDS

Primary use for second data categories; EHR systems in service; extra secondary-use categories

in 8.5yEU EHDS

Third-country participation in secondary use

Past deadlines

DateRegulation
12d agoEU Data Act

Access-by-design for new connected products

13d agoEU CRA

Vulnerability and incident reporting obligations apply

24d agoEU DSA

ChatGPT designated as VLOSE; Reddit and Roblox as VLOPs

53d agoEU AI Act

General application: transparency obligations, GPAI fines, most other rules

59d agoEU AI Act

Digital Omnibus on AI enters into force

3mo agoEU CRA

Conformity assessment body provisions apply

4mo agoeIDAS 2

Legacy qualified trust service providers conformity report

9mo agoGDPR

GDPR Procedural Regulation enters into force

10mo agoGDPR

GDPR Procedural Regulation adopted

10mo agoDORA

First critical ICT third-party providers designated

11mo agoEU-US DPF

Latombe appeal lodged at the Court of Justice

12mo agoEU DGA

Legacy data intermediaries must comply

12mo agoEU Data Act

Member States notify penalty rules

12mo agoEU Data Act

Data Act applies

13mo agoEU-US DPF

General Court upholds DPF (Latombe v Commission)

14mo agoEU AI Act

GPAI, governance, notified bodies and penalties apply

15mo agoDORA

TLPT regulatory technical standards enter into force

17mo agoDORA

First registers of information submitted to the ESAs

17mo agoNIS2

Member States establish entity lists

18mo agoEU EHDS

EHDS enters into force

20mo agoEU AI Act

Prohibited practices and AI literacy apply

20mo agoNIS2

Digital infrastructure entities submit registration data

20mo agoDORA

DORA applies

21mo agoeIDAS 2

First wallet implementing acts enter into force

21mo agoEU CRA

CRA enters into force

22mo agoEU PLD

New PLD enters into force

23mo agoNIS2

Implementing Regulation 2024/2690 enters into force

23mo agoNIS2

National NIS2 measures apply; NIS1 repealed

23mo agoNIS2

Transposition deadline

2.1y agoEU AI Act

AI Act enters into force

2.3y agoeIDAS 2

eIDAS 2 enters into force

2.5y agoEU DMA

Gatekeeper compliance deadline (first designations)

2.6y agoEU DSA

DSA applies to all intermediary services

2.7y agoEU Data Act

Reduced switching charges period begins

2.7y agoEU Data Act

Data Act enters into force

3y agoEU DGA

DGA applies

3y agoEU DMA

First six gatekeepers designated

3.2y agoEU-US DPF

DPF adequacy decision adopted and effective

3.4y agoEU DMA

DMA applies

3.4y agoEU DSA

First VLOP/VLOSE designations

Rule changes by email

The morning after a new data, privacy or AI law, or a deadline change; nothing in quiet weeks.

Double opt-in. Unsubscribe any time.