{
  "_meta": {
    "description": "Single source for the hub deadline views. Generated from the canonical timeline of the tools monorepo (packages/corpus/dist/eu-regulation-timeline.json) plus the German labels of the Fristen-Navigator, so hub and navigator show the same dates. No stored status: the hub derives past/upcoming from 'date' at load time.",
    "generatedFrom": "legal-prompt-studio/packages/corpus/dist/eu-regulation-timeline.json",
    "corpusBuiltAt": "2026-10-17",
    "stand": "2026-10-17",
    "entryCount": 28
  },
  "entries": [
    {
      "date": "2018-05-25",
      "regulation": "gdpr",
      "regulationName": "General Data Protection Regulation (GDPR)",
      "milestone": "Applies (Art. 99(2))",
      "milestoneDe": "Gilt (Art. 99 Abs. 2)",
      "officialCitation": "Regulation (EU) 2016/679",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2016/679/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2023-05-02",
      "regulation": "dma",
      "regulationName": "Digital Markets Act (DMA)",
      "milestone": "Applies (Art. 54)",
      "milestoneDe": "Gilt (Art. 54)",
      "officialCitation": "Regulation (EU) 2022/1925, OJ L 265, 12 October 2022",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2022/1925/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2023-08-25",
      "regulation": "dsa",
      "regulationName": "Digital Services Act (DSA)",
      "milestone": "Obligations apply to the first designated very large online platforms and search engines (designated 25 April 2023, Art. 92)",
      "milestoneDe": "Pflichten gelten für die ersten benannten sehr großen Online-Plattformen und Suchmaschinen (benannt am 25. April 2023, Art. 92)",
      "officialCitation": "Regulation (EU) 2022/2065, OJ L 277, 27 October 2022",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2022/2065/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2024-01-11",
      "regulation": "data-act",
      "regulationName": "EU Data Act",
      "milestone": "Entry into force",
      "milestoneDe": "Inkrafttreten",
      "officialCitation": "Regulation (EU) 2023/2854, OJ L, 22 December 2023",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2023/2854/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2024-02-17",
      "regulation": "dsa",
      "regulationName": "Digital Services Act (DSA)",
      "milestone": "Applies to all providers of intermediary services (Art. 93(2))",
      "milestoneDe": "Gilt für alle Anbieter von Vermittlungsdiensten (Art. 93 Abs. 2)",
      "officialCitation": "Regulation (EU) 2022/2065, OJ L 277, 27 October 2022",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2022/2065/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2024-03-06",
      "regulation": "dma",
      "regulationName": "Digital Markets Act (DMA)",
      "milestone": "Compliance deadline for the six gatekeepers designated on 6 September 2023 (Art. 3(10))",
      "milestoneDe": "Frist für die sechs am 6. September 2023 benannten Torwächter (Art. 3 Abs. 10)",
      "officialCitation": "Regulation (EU) 2022/1925, OJ L 265, 12 October 2022",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2022/1925/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2024-08-01",
      "regulation": "ai-act",
      "regulationName": "EU AI Act",
      "milestone": "Entry into force",
      "milestoneDe": "Inkrafttreten",
      "officialCitation": "Regulation (EU) 2024/1689, OJ L, 12 July 2024, as amended by Regulation (EU) 2026/1744",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2024-10-17",
      "regulation": "nis2-bsig",
      "regulationName": "NIS2 Directive, German implementation (BSIG)",
      "milestone": "EU transposition deadline (missed by most member states)",
      "milestoneDe": "EU-Umsetzungsfrist (von den meisten Mitgliedstaaten versäumt)",
      "officialCitation": "Directive (EU) 2022/2555, OJ L 333, 27 December 2022; German: BSIG i.d.F. des NIS2UmsuCG",
      "sourceUrl": "https://www.gesetze-im-internet.de/bsig_2025/",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2024-12-10",
      "regulation": "cra",
      "regulationName": "Cyber Resilience Act (CRA)",
      "milestone": "Entry into force",
      "milestoneDe": "Inkrafttreten",
      "officialCitation": "Regulation (EU) 2024/2847, OJ L, 20 November 2024",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2024/2847/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2025-01-17",
      "regulation": "dora",
      "regulationName": "Digital Operational Resilience Act (DORA)",
      "milestone": "Fully applicable (no transition period)",
      "milestoneDe": "Vollständig anwendbar (keine Übergangsfrist)",
      "officialCitation": "Regulation (EU) 2022/2554, OJ L 333, 27 December 2022",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2022/2554/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2025-02-02",
      "regulation": "ai-act",
      "regulationName": "EU AI Act",
      "milestone": "Prohibited practices (Art. 5) + AI literacy (Art. 4)",
      "milestoneDe": "Verbotene Praktiken (Art. 5) + KI-Kompetenz (Art. 4)",
      "officialCitation": "Regulation (EU) 2024/1689, OJ L, 12 July 2024, as amended by Regulation (EU) 2026/1744",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2025-08-02",
      "regulation": "ai-act",
      "regulationName": "EU AI Act",
      "milestone": "GPAI model obligations (Arts. 51-56), governance and penalties (except Art. 101)",
      "milestoneDe": "Pflichten für GPAI-Modelle (Art. 51-56), Governance und Sanktionen (außer Art. 101)",
      "officialCitation": "Regulation (EU) 2024/1689, OJ L, 12 July 2024, as amended by Regulation (EU) 2026/1744",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2025-09-12",
      "regulation": "data-act",
      "regulationName": "EU Data Act",
      "milestone": "Core provisions apply (user rights, B2B obligations, enforcement)",
      "milestoneDe": "Kernvorschriften gelten (Nutzerrechte, B2B-Pflichten, Durchsetzung)",
      "officialCitation": "Regulation (EU) 2023/2854, OJ L, 22 December 2023",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2023/2854/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2025-11-19",
      "regulation": "gdpr",
      "regulationName": "General Data Protection Regulation (GDPR)",
      "milestone": "Commission proposes the Digital Omnibus, COM(2025) 837 (amending the GDPR, ePrivacy Directive, Data Act and NIS2), still a proposal and not adopted (status 17 Oct 2026)",
      "milestoneDe": "Kommission schlägt den Digital Omnibus vor, COM(2025) 837 (Änderungen an DSGVO, ePrivacy-Richtlinie, Data Act und NIS2), weiterhin Vorschlag, nicht verabschiedet (Stand 17.10.2026)",
      "officialCitation": "Regulation (EU) 2016/679",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2016/679/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2025-12-06",
      "regulation": "nis2-bsig",
      "regulationName": "NIS2 Directive, German implementation (BSIG)",
      "milestone": "German BSIG (NIS2UmsuCG) in force, no transition period",
      "milestoneDe": "Deutsches BSIG (NIS2UmsuCG) in Kraft, keine Übergangsfrist",
      "officialCitation": "Directive (EU) 2022/2555, OJ L 333, 27 December 2022; German: BSIG i.d.F. des NIS2UmsuCG",
      "sourceUrl": "https://www.gesetze-im-internet.de/bsig_2025/",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2026-01-06",
      "regulation": "nis2-bsig",
      "regulationName": "NIS2 Directive, German implementation (BSIG)",
      "milestone": "BSI registration portal opens",
      "milestoneDe": "BSI-Registrierungsportal öffnet",
      "officialCitation": "Directive (EU) 2022/2555, OJ L 333, 27 December 2022; German: BSIG i.d.F. des NIS2UmsuCG",
      "sourceUrl": "https://www.gesetze-im-internet.de/bsig_2025/",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2026-03-06",
      "regulation": "nis2-bsig",
      "regulationName": "NIS2 Directive, German implementation (BSIG)",
      "milestone": "Registration deadline under § 33 BSIG for particularly important and important entities (3 months)",
      "milestoneDe": "Registrierungsfrist nach § 33 BSIG für besonders wichtige und wichtige Einrichtungen (3 Monate)",
      "officialCitation": "Directive (EU) 2022/2555, OJ L 333, 27 December 2022; German: BSIG i.d.F. des NIS2UmsuCG",
      "sourceUrl": "https://www.gesetze-im-internet.de/bsig_2025/",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2026-06-11",
      "regulation": "cra",
      "regulationName": "Cyber Resilience Act (CRA)",
      "milestone": "Conformity-assessment body notification provisions apply",
      "milestoneDe": "Vorschriften zur Notifizierung von Konformitätsbewertungsstellen gelten",
      "officialCitation": "Regulation (EU) 2024/2847, OJ L, 20 November 2024",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2024/2847/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2026-07-27",
      "regulation": "ai-act",
      "regulationName": "EU AI Act",
      "milestone": "Digital Omnibus on AI (Regulation (EU) 2026/1744) in force: high-risk dates deferred, two prohibitions added to Art. 5",
      "milestoneDe": "Digital Omnibus zur KI (Verordnung (EU) 2026/1744) in Kraft: Hochrisiko-Fristen verschoben, zwei neue Verbote in Art. 5",
      "officialCitation": "Regulation (EU) 2024/1689, OJ L, 12 July 2024, as amended by Regulation (EU) 2026/1744",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2026-08-02",
      "regulation": "ai-act",
      "regulationName": "EU AI Act",
      "milestone": "General application, incl. transparency obligations (Art. 50) and market surveillance",
      "milestoneDe": "Allgemeine Geltung, u. a. Transparenzpflichten (Art. 50) und Marktüberwachung",
      "officialCitation": "Regulation (EU) 2024/1689, OJ L, 12 July 2024, as amended by Regulation (EU) 2026/1744",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2026-09-11",
      "regulation": "cra",
      "regulationName": "Cyber Resilience Act (CRA)",
      "milestone": "Vulnerability and incident reporting obligations (Art. 14), also for products already on the market (Art. 69(3))",
      "milestoneDe": "Melde- und Berichtspflichten für Schwachstellen und Vorfälle (Art. 14), auch für bereits in Verkehr gebrachte Produkte (Art. 69 Abs. 3)",
      "officialCitation": "Regulation (EU) 2024/2847, OJ L, 20 November 2024",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2024/2847/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2026-09-12",
      "regulation": "data-act",
      "regulationName": "EU Data Act",
      "milestone": "Product design obligations apply to new connected products",
      "milestoneDe": "Pflichten zur Produktgestaltung gelten für neue vernetzte Produkte",
      "officialCitation": "Regulation (EU) 2023/2854, OJ L, 22 December 2023",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2023/2854/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2026-12-02",
      "regulation": "ai-act",
      "regulationName": "EU AI Act",
      "milestone": "New prohibitions: AI-generated intimate imagery without consent and CSAM (Art. 5(1)(ba), (bb)); generative AI systems placed on the market before 2 Aug 2026 must meet the Art. 50(2) marking duty (Art. 111(4))",
      "milestoneDe": "Neue Verbote: KI-erzeugte intime Darstellungen ohne Einwilligung und Darstellungen sexuellen Kindesmissbrauchs (Art. 5 Abs. 1 Buchst. ba, bb). Generative KI-Systeme, die vor dem 2. August 2026 in Verkehr gebracht wurden, müssen die Kennzeichnungspflicht nach Art. 50 Abs. 2 erfüllen (Art. 111 Abs. 4)",
      "officialCitation": "Regulation (EU) 2024/1689, OJ L, 12 July 2024, as amended by Regulation (EU) 2026/1744",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2027-08-02",
      "regulation": "ai-act",
      "regulationName": "EU AI Act",
      "milestone": "National AI regulatory sandboxes operational (Art. 57(1), deferred from 2 Aug 2026); GPAI models placed on the market before 2 Aug 2025 must comply (Art. 111(3))",
      "milestoneDe": "Nationale KI-Reallabore einsatzbereit (Art. 57 Abs. 1, verschoben vom 2. August 2026). GPAI-Modelle, die vor dem 2. August 2025 in Verkehr gebracht wurden, müssen die Pflichten erfüllen (Art. 111 Abs. 3)",
      "officialCitation": "Regulation (EU) 2024/1689, OJ L, 12 July 2024, as amended by Regulation (EU) 2026/1744",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2027-09-12",
      "regulation": "data-act",
      "regulationName": "EU Data Act",
      "milestone": "Unfair-contractual-terms rules (Chapter IV) apply to contracts concluded on or before 12 Sep 2025 that are of indefinite duration or due to expire at least 10 years from 11 Jan 2024 (Art. 50)",
      "milestoneDe": "Regeln zu missbräuchlichen Vertragsklauseln (Kapitel IV) gelten für Verträge, die bis einschließlich 12. September 2025 geschlossen wurden und unbefristet sind oder frühestens 10 Jahre nach dem 11. Januar 2024 auslaufen (Art. 50)",
      "officialCitation": "Regulation (EU) 2023/2854, OJ L, 22 December 2023",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2023/2854/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2027-12-02",
      "regulation": "ai-act",
      "regulationName": "EU AI Act",
      "milestone": "High-risk obligations for Annex III systems apply (Art. 113(3)(c)(i), deferred from 2 Aug 2026)",
      "milestoneDe": "Hochrisiko-Pflichten für Systeme nach Anhang III gelten (Art. 113 Abs. 3 Buchst. c Ziff. i, verschoben vom 2. August 2026)",
      "officialCitation": "Regulation (EU) 2024/1689, OJ L, 12 July 2024, as amended by Regulation (EU) 2026/1744",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2027-12-11",
      "regulation": "cra",
      "regulationName": "Cyber Resilience Act (CRA)",
      "milestone": "Main obligations apply (products placed on the market earlier: only if substantially modified, Art. 69(2))",
      "milestoneDe": "Hauptpflichten gelten (früher in Verkehr gebrachte Produkte nur bei wesentlicher Änderung, Art. 69 Abs. 2)",
      "officialCitation": "Regulation (EU) 2024/2847, OJ L, 20 November 2024",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2024/2847/oj",
      "lastVerified": "2026-10-17"
    },
    {
      "date": "2028-08-02",
      "regulation": "ai-act",
      "regulationName": "EU AI Act",
      "milestone": "High-risk obligations for Annex I product-embedded systems apply (Art. 113(3)(c)(ii), deferred from 2 Aug 2027)",
      "milestoneDe": "Hochrisiko-Pflichten für in Anhang-I-Produkte eingebettete Systeme gelten (Art. 113 Abs. 3 Buchst. c Ziff. ii, verschoben vom 2. August 2027)",
      "officialCitation": "Regulation (EU) 2024/1689, OJ L, 12 July 2024, as amended by Regulation (EU) 2026/1744",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj",
      "lastVerified": "2026-10-17"
    }
  ]
}