EU Digital and Data Legislation Tracker

Below you’ll find the overview of the most important EU laws that regulate the digital realm. Such as the AI Act, Cybersecurity Act and Data Act. A handy legislation tracker for each modern-day legal data & AI professional.

Powered by Digibeetle

The table below is a limited view of what Digibeetle offers. Don’t miss the opportunity to save time on research and supercharge your decision-making process with Digibeetle. Unlock the full potential of our intuitive search, referenced and curated documents.

EU Digital and Data Legislation Tracker (Updated)

Last update: 7 July 2026

Abbreviation Title Stage Type Object(s) Addressees Entry into force Application/transposition
GreenData4All GreenData4All Directive

Council stage

Data Geospatial environmental data and access to environmental information Public sector bodies holding environmental spatial data Unknown Unknown
EBW European Business Wallet Regulation

EP stage

Data Digital identity, secure data exchange, data protection Businesses, public sector bodies Unknown Unknown
EU Space Act EU Space Act

EP stage

Space technology Rules for safe, resilient and sustainable space activities Launch operators, spacecraft operators, space service providers Unknown Unknown
CSAM Interim Extension Regulation extending the interim CSAM derogation (2021/1232)

Trilogue / Negotiations

Online services Extension of the period of application of the interim derogation from the ePrivacy framework allowing providers to voluntarily detect, report and remove child sexual abuse material in online communications pending adoption of the permanent CSAM Providers of interpersonal electronic communications services, online platforms Unknown Unknown
PSR Payment Services Regulation

Trilogue / Negotiations

Payments & e-money Compliance and operations rules for payment and e-money services Payment services, e-money services Unknown Unknown
PSD3 Third Payment Services Directive

Trilogue / Negotiations

Payments & e-money authorisation, prudential oversight, and supervision of payment and e-money institutions Payment services, e-money services Unknown Unknown
EBA European Biotech Act

EP stage

Product Health biotechnology Providers of health biotechnology products and services Unknown Unknown
DNA Digital Networks Act

EP stage

Electronic communications Electronic communications networks and services Providers of electronic communications networks and services Unknown Unknown
NIS2 simplification NIS2 Simplification Directive

EP stage

Cybersecurity Simplification of NIS2 and alignment with Cybersecurity Act 2 NIS2 addressees, European Digital Identity Wallets, European Business Wallets, small mid-cap enterprises Unknown Unknown
CSA2 Cybersecurity Act 2

Council stage

Cybersecurity ENISA, ICT products, ICT services, ICT processes, European cybersecurity certification schemes ENISA, operators of essential services, digital service providers Unknown Unknown
MDR/IVDR reform MDR/IVDR simplification Regulation

EP stage

Product Medical devices, in vitro diagnostic devices, clinical/non-clinical data Manufacturers Unknown Unknown
FiDA Regulation Financial Data Access Regulation

Trilogue / Negotiations

Data Personal data, customer data Financial institutions, financial information service providers Unknown Unknown
Omnibus IV Small Mid-Caps Regulation (Omnibus IV)

Trilogue / Negotiations

Data, anti-dumping, anti-subsidy, prospectus, batteries, f-gas Extending regulatory simplification to SMCs Small mid-cap enterprises (SMC) Unknown Unknown
Digital Omnibus on AI Digital Omnibus on AI

Adopted

Product AI systems AI Act addressees, micro, small and medium-sized enterprises (SME), small mid-cap enterprises (SMC) Unknown Unknown
Digital Omnibus (data rules) Digital Omnibus (Data rules)

EP stage

Data Personal data, Data Controllers, processors, data subjects Unknown Unknown
AI Act Artificial Intelligence Act

Published

Product AI systems, General-Purpose AI models, General-Purpose AI systems, Providers, downstream providers, deployers, importers, distributors, affected persons 2024-8-1 2024-8-2
EHDSR European Health Data Space Regulation

Published

Data Personal data, data, health data Patients, data holders 2025-3-26 2027-3-26
AILD AI Liability Directive

Withdrawn

Product, liability AI systems Providers, users, claimants, defendants Unknown Unknown
PLD Product Liability Directive 2024/2853

Published

Product, liability Products Member States, manufacturer, importers, distributors, economic operators, online platforms 2024-12-9 2026-12-9
PWD Platform Work Directive

Published

Data Platform workers’ data Platforms, platform workers 2024-12-1 2026-12-2
Combating Gender-Based Violence Directive Directive on Combating Violence Against Women and Domestic Violence

Published

Anti-cyber violence Online cybercrimes, cyber stalking, cyber harassment, deepfakes, non-consensual sharing of materials Member States, victims 2024-6-13 2027-6-14
GDPREPR GDPR Enforcement Procedural Rules Regulation

Published

Enforcement GDPR enforcement Supervisory authorities, EDPB Unknown Unknown
CRA Cyber Resilience Act

Published

Cybersecurity Products with digital elements Economic operators, manufacturers, importers, distributors, consumers 2024-12-10 2027-12-11
TTPAR Transparency and Targeting of Political Advertising Regulation

Published

Advertising Political advertising Providers, sponsors, controllers, voters 2024-4-9 2024-4-9
GDPR General Data Protection Regulation

Published

Data Personal data Controllers, processors, data subjects 2016-5-24 2018-5-25
CSoldA Cyber Solidarity Act

Published

Cybersecurity Cyber threats Cross-border SOC, public bodies, entities operating in critical or highly critical sectors, trusted providers 2025-2-4 2025-2-4
EUDPR Data Protection Regulation for EU institutions

Published

Data Personal data, operational personal data EU institutions 2018-12-11 2018-12-11
LED Law Enforcement Directive

Published

Data Personal data Law enforcement authorities 2016-5-5 2018-5-6
DGA Data Governance Act

Published

Fair digital market, data Data, non-personal data Data subjects, data holders, data users, data intermediation services, data altruism organisations, public sector bodies 2022-6-23 2023-9-24
Data Act Data Act

Published

Fair digital market, data Data, metadata, personal data, non-personal data Users, data holders, data recipients 2024-1-11 2025-9-12
DSA Digital Services Act

Published

Online services Information society services, illegal content, advertisements, recommender systems Consumers, traders, intermediary services, online platforms, online search engines, VLOPs, VLOSEs 2022-11-16 2024-2-17
DMA Digital Markets Act

Published

Fair digital market Core platform services Gatekeepers, business users, end users 2022-11-1 2023-5-2
IEA Interoperable Europe Act

Published

Cross-border interoperability Trans-European digital public services, data EU entities and bodies regulating or manging trans-European digital public services 2024-4-11 2024-7-11
NIS2 NIS2 Directive

Published

Cybersecurity Cyber threat, ICT products, ICT services, ICT processes Member States, (critical) entities 2023-1-16 2024-10-17
CSA Cybersecurity Act

Published

Cybersecurity ENISA, ICT products, ICT services, ICT processes, European cybersecurity certification schemes ENISA, operators of essential services, digital service providers 2019-6-27 2021-6-28
DORA Digital Operational Resilience Act

Published

Cybersecurity, finance Network and Information Systems Financial entities, ICT third-party service providers 2023-1-16 2025-1-25
ePR ePrivacy Regulation

Withdrawn

Telecom Electronic communications services, electronic communications data, emails, direct marketing communications End-users, electronic communications services providers Unknown Unknown
ATD Access to documents Regulation

Published

Transparency public access to European Parliament, Council and Commission documents European Parliament, Council and Commission 2001-6-3 2001-12-3
ADT reform Revision of Access to Documents Regulation

Withdrawn

Transparency Broader transparency obligations, wider definition of “document” EU institutions Unknown Unknown
MSR Market Surveillance and Compliance of Products Regulation

Published

Enforcement Products Market surveillance authorities, manufacturers, importers, distributors, fulfilment service providers, economic operators, information society service providers, end users 2019-7-15 2021-1-1
EU Digital Travel App EU Digital Travel Application Regulation

Trilogue / Negotiations

Digital identity EU-operated mobile application enabling electronic submission of travel data and use of digital travel credentials at external EU borders; amends Schengen Borders Code and eu-LISA rules Member States, border control authorities, eu-LISA, EU citizens and third-country national travellers Unknown Unknown
CADA Cloud and AI Development Act

Council stage

AI, cloud Framework of measures to strengthen Europe’s cloud and AI ecosystem: data centre capacity, cloud infrastructure investment, AI compute access for providers and public sector, and industrial AI deployment support Cloud service providers, AI developers, public sector bodies, Member States Unknown Unknown
EUDPR Reform EUDPR Reform Regulation

Commission proposal

Data Reform of the data protection framework for EU institutions, bodies, offices and agencies; extension to law enforcement, police cooperation and judicial cooperation contexts; amends Regulation (EU) 2018/1725 (EUDPR) EU institutions, bodies, offices and agencies; European Data Protection Supervisor Unknown Unknown
Chips Act 2.0 Chips Act 2.0

Council stage

Semiconductors Framework to strengthen the EU semiconductor ecosystem: chip design capacity, manufacturing pilot lines, supply chain monitoring, crisis management, and security-of-supply measures; repeals the 2023 Chips Act Semiconductor manufacturers, chip designers, Member States, supply chain operators, competent authorities Unknown Unknown

* indicates an estimated date

source: digibeetle.eu/legislation-tracker

PS: We have more laws in scope, so stay tuned for updates

Featured customers

logo_customer_bird_bird
logo_customer_european_data_protection_supervisor
logo_customer_open_universiteit_ou
logo_customer_pelsrijcken
logo_customer_ku_leuven_citip_centre_for_it_law
logo vrije universiteit brussel lsts

Tame the information overload

No more: “where did I read that again?” or “wasn’t there a case about that?”. Tame the information overload and join Digibeetle.

  • Curated.
  • Referenced.
  • Updated daily.
digibeetle_hero_mockup_screen digibeetle_hero_mockup_screen digibeetle_cjeu_case_law_data_protection