EU Digital Regulations Tracker

Professional Edition

Comprehensive tracking of EU technology regulations affecting IT services, digital products, and financial entities. Real-time status monitoring of AI Act, DORA, Data Act, CRA, NIS2, GDPR, and Digital Omnibus simplification proposals.

Stand: 17 October 2026 (GDPR, DSA and ePrivacy/TDDDG entries: 30 June 2026) | Sources: official EU and national publications

Current Implementation Status (Stand: 17 October 2026)

Fully Active
DORA (Jan 2025), Data Act (Sept 2025), GPSR (Dec 2024), RED Cybersecurity (Aug 2025), GDPR (May 2018)
Phased Implementation
AI Act (phased until 2 Aug 2028, legacy deadlines until 2030), CRA (in force, notified-body rules since 11 Jun 2026, reporting since 11 Sep 2026, main obligations from 11 Dec 2027), Product Liability Directive (in force since 8 Dec 2024, applies to products placed on the market after 8 Dec 2026), Machinery Reg (in force, applicable 2027), EHDS (entered 2025, applicable 2029-2031), MDR (extended transitions 2027-2028)
Recently Active (Late 2024-2025)
NIS2 Germany (Dec 2025), EHDS (entered force Mar 2025), Copyright DSM (fully implemented Sept 2024)
In force since 27 Jul 2026
Digital Omnibus on AI, Regulation (EU) 2026/1744. Annex III high-risk obligations apply from 2 Dec 2027, Annex I high-risk obligations from 2 Aug 2028 (Art. 113(c) AI Act)
Breaking Development: The Digital Omnibus on AI was ADOPTED — the European Parliament approved it on 16 June 2026 and the Council gave final adoption on 29 June 2026. It defers standalone Annex III high-risk obligations to 2 December 2027 and high-risk AI embedded in Annex I products to 2 August 2028, using fixed dates (the original conditional "standards-availability" trigger was dropped). It also adds a new prohibition on AI-generated non-consensual intimate imagery / CSAM (from 2 December 2026) and SME / small-mid-cap relief. 2 August 2026 is no longer the high-risk baseline (transparency, GPAI and the Art. 5 prohibitions are not deferred). Published in the OJ on 24 July 2026 as Regulation (EU) 2026/1744, in force since 27 July 2026. The wider Digital Omnibus package (proposed 19 Nov 2025) also has separate GDPR / ePrivacy simplification tracks that remain in progress.
20
Total Regulations
19
In Force
1
Pending/Development
6
Critical Priority
Status Update: Major implementation phase underway. DORA fully applicable (Jan 2025). Data Act now active (Sept 2025). NIS2 Germany entered force December 6, 2025 via BSIG amendments - NO transition period, registration opened January 6, 2026, deadline March 6, 2026 for particularly important and important entities. 13 other member states still face infringement proceedings. AI Act phased implementation through 2028 (Regulation (EU) 2026/1744, the Digital Omnibus on AI, in force since 27 July 2026, defers high-risk obligations to 2 Dec 2027 and 2 Aug 2028). CRA main deadlines 2026-2027. Regulatory landscape increasingly complex with interconnected compliance obligations.
Regulation Status Priority Implementation Practice Areas EU Legal Reference German Implementation Authorities Details