EU Digital and Data Legislation Tracker
Below you’ll find the overview of the most important EU laws that regulate the digital realm. Such as the AI Act, Cybersecurity Act and Data Act. A handy legislation tracker for each modern-day legal data & AI professional.
Powered by Digibeetle
The table below is a limited view of what Digibeetle offers. Don’t miss the opportunity to save time on research and supercharge your decision-making process with Digibeetle. Unlock the full potential of our intuitive search, referenced and curated documents.
EU Digital and Data Legislation Tracker (Updated)
Last update: 26 March 2026
Powered by
| Abbreviation | Title | Stage | Type | Object(s) | Addressees | Entry into force | Application/transposition |
|---|---|---|---|---|---|---|---|
| GreenData4All | GreenData4All Directive |
2 Council stage |
Data | geospatial environmental data and access to environmental information | public sector bodies holding environmental spatial data | 0Unknown | 0Unknown |
| EBW | European Business Wallet Regulation |
3 EP stage |
Data | digital identity, secure data exchange, data protection | Businesses, public sector bodies | 0Unknown | 0Unknown |
| EU Space Act | EU Space Act |
3 EP stage |
Space technology | Rules for safe, resilient and sustainable space activities | Launch operators, spacecraft operators, space service providers | 0Unknown | 0Unknown |
| CSAM | Child Sexual Abuse Material Regulation |
4 Trilogue / Negotations |
Online services | Prevention and detection of child sexual abuse material | hosting service providers, interpersonal communication services | 0Unknown | 0Unknown |
| PSR | Payment Services Regulation |
4 Trilogue / Negotations |
Payments & e-money | Compliance and operations rules for payment and e-money services | Payment services, e-money services | 0Unknown | 0Unknown |
| PSD3 | Third Payment Services Directive |
4 Trilogue / Negotations |
Payments & e-money | authorisation, prudential oversight, and supervision of payment and e-money institutions | Payment services, e-money services | 0Unknown | 0Unknown |
| EBA | European Biotech Act |
1 Commission proposal |
Product | Health biotechnology | Providers of health biotechnology products and services | 0Unknown | 0Unknown |
| DNA | Digital Networks Act |
1 Commission proposal |
Electronic communications | Electronic communications networks and services | Providers of electronic communications networks and services | 0Unknown | 0Unknown |
| NIS2 simplification | NIS2 Simplification Directive |
1 Commission proposal |
Cybersecurity | Simplification of NIS2 and alignment with Cybersecurity Act 2 | NIS2 addressees, European Digital Identity Wallets, European Business Wallets, small mid-cap enterprises | 0Unknown | 0Unknown |
| CSA2 | Cybersecurity Act 2 |
2 Council stage |
Cybersecurity | ENISA, ICT products, ICT services, ICT processes, European cybersecurity certification schemes | ENISA, operators of essential services, digital service providers | 0Unknown | 0Unknown |
| MDR/IVDR reform | MDR/IVDR simplification Regulation |
1 Commission proposal |
Product | Medical devices, in vitro diagnostic devices, clinical/non-clinical data | Manufacturers | 0Unknown | 0Unknown |
| FiDA Regulation | Financial Data Access Regulation |
4 Trilogue / Negotations |
Data | Personal data, customer data | Financial institutions, financial information service providers | 0Unknown | 0Unknown |
| Omnibus IV | Small Mid-Caps Regulation (Omnibus IV) |
4 Trilogue / Negotations |
Data, anti-dumping, anti-subsidy, prospectus, batteries, f-gas | Extending regulatory simplification to SMCs | Small mid-cap enterprises (SMC) | 0Unknown | 0Unknown |
| Digital Omnibus on AI | Digital Omnibus on AI |
4 Trilogue / Negotations |
Product | AI systems | AI Act addressees, micro, small and medium-sized enterprises (SME), small mid-cap enterprises (SMC) | 0Unknown | 0Unknown |
| Digital Omnibus (data rules) | Digital Omnibus (Data rules) |
3 EP stage |
Data | Personal data, Data | Controllers, processors, data subjects | 0Unknown | 0Unknown |
| AI Act | Artificial Intelligence Act |
6 Published |
Product | AI systems, General-Purpose AI models, General-Purpose AI systems, | Providers, downstream providers, deployers, importers, distributors, affected persons | 2024-8-1 | 2024-8-2 |
| EHDSR | European Health Data Space Regulation |
6 Published |
Data | Personal data, data, health data | Patients, data holders | 2025-3-26 | 2027-3-26 |
| AILD | AI Liability Directive |
7 Withdrawn |
Product, liability | AI systems | Providers, users, claimants, defendants | 0Unknown | 0Unknown |
| PLD | Product Liability Directive 2024/2853 |
6 Published |
Product, liability | Products | Member States, manufacturer, importers, distributors, economic operators, online platforms | 2024-12-9 | 2026-12-9 |
| PWD | Platform Work Directive |
6 Published |
Data | Platform workers’ data | Platforms, platform workers | 2024-12-1 | 2026-12-2 |
| Combating Gender-Based Violence Directive | Directive on Combating Violence Against Women and Domestic Violence |
6 Published |
Anti-cyber violence | Online cybercrimes, cyber stalking, cyber harassment, deepfakes, non-consensual sharing of materials | Member States, victims | 2024-6-13 | 2027-6-14 |
| GDPREPR | GDPR Enforcement Procedural Rules Regulation |
6 Published |
Enforcement | GDPR enforcement | Supervisory authorities, EDPB | 0Unknown | 0Unknown |
| CRA | Cyber Resilience Act |
6 Published |
Cybersecurity | Products with digital elements | Economic operators, manufacturers, importers, distributors, consumers | 2024-12-10 | 2027-12-11 |
| TTPAR | Transparency and Targeting of Political Advertising Regulation |
6 Published |
Advertising | Political advertising | Providers, sponsors, controllers, voters | 2024-4-9 | 2024-4-9 |
| GDPR | General Data Protection Regulation |
6 Published |
Data | Personal data | Controllers, processors, data subjects | 2016-5-24 | 2018-5-25 |
| CSoldA | Cyber Solidarity Act |
6 Published |
Cybersecurity | Cyber threats | Cross-border SOC, public bodies, entities operating in critical or highly critical sectors, trusted providers | 2025-2-4 | 2025-2-4 |
| EUDPR | Data Protection Regulation for EU institutions |
6 Published |
Data | Personal data, operational personal data | EU institutions | 2018-12-11 | 2018-12-11 |
| LED | Law Enforcement Directive |
6 Published |
Data | Personal data | Law enforcement authorities | 2016-5-5 | 2018-5-6 |
| DGA | Data Governance Act |
6 Published |
Fair digital market, data | Data, non-personal data | Data subjects, data holders, data users, data intermediation services, data altruism organisations, public sector bodies | 2022-6-23 | 2023-9-24 |
| Data Act | Data Act |
6 Published |
Fair digital market, data | Data, metadata, personal data, non-personal data | Users, data holders, data recipients | 2024-1-11 | 2025-9-12 |
| DSA | Digital Services Act |
6 Published |
Online services | Information society services, illegal content, advertisements, recommender systems | Consumers, traders, intermediary services, online platforms, online search engines, VLOPs, VLOSEs | 2022-11-16 | 2024-2-17 |
| DMA | Digital Markets Act |
6 Published |
Fair digital market | Core platform services | Gatekeepers, business users, end users | 2022-11-1 | 2023-5-2 |
| IEA | Interoperable Europe Act |
6 Published |
Cross-border interoperability | Trans-European digital public services, data | EU entities and bodies regulating or manging trans-European digital public services | 2024-4-11 | 2024-7-11 |
| NIS2 | NIS2 Directive |
6 Published |
Cybersecurity | Cyber threat, ICT products, ICT services, ICT processes | Member States, (critical) entities | 2023-1-16 | 2024-10-17 |
| CSA | Cybersecurity Act |
6 Published |
Cybersecurity | ENISA, ICT products, ICT services, ICT processes, European cybersecurity certification schemes | ENISA, operators of essential services, digital service providers | 2019-6-27 | 2021-6-28 |
| DORA | Digital Operational Resilience Act |
6 Published |
Cybersecurity, finance | Network and Information Systems | Financial entities, ICT third-party service providers | 2023-1-16 | 2025-1-25 |
| ePR | ePrivacy Regulation |
7 Withdrawn |
Telecom | Electronic communications services, electronic communications data, emails, direct marketing communications | End-users, electronic communications services providers | 0Unknown | 0Unknown |
| ATD | Access to documents Regulation |
6 Published |
Transparency | public access to European Parliament, Council and Commission documents | European Parliament, Council and Commission | 2001-6-3 | 2001-12-3 |
| ADT reform | Revision of Access to Documents Regulation |
7 Withdrawn |
Transparency | Broader transparency obligations, wider definition of “document” | EU institutions | 0Unknown | 0Unknown |
| MSR | Market Surveillance and Compliance of Products Regulation |
6 Published |
Enforcement | Products | Market surveillance authorities, manufacturers, importers, distributors, fulfilment service providers, economic operators, information society service providers, end users | 2019-7-15 | 2021-1-1 |
* indicates an estimated date
PS: We have more laws in scope, so stay tuned for updates
Featured customers
Tame the information overload
No more: “where did I read that again?” or “wasn’t there a case about that?”. Tame the information overload and join Digibeetle.
- Curated.
- Referenced.
- Updated daily.
