Legislationsby Glyph
European UnionEuropean UnionLawRegulation (EU) 2024/2847
Cyber Resilience Act
Sets mandatory cybersecurity requirements for hardware and software products with digital elements sold in the EU, including vulnerability handling and incident reporting duties for manufacturers.
Article 14 reporting obligations for actively exploited vulnerabilities and severe incidents applySep 11 2 months ago
- Body
- European Parliament and Council
- Session
- 9th parliamentary term
- Introduced
- Sep 15, 2022
- In effect since
- Dec 10, 20241 year ago
- Topics
- Cyber
Timeline
Dec 11, 2027 in 1 year
Sep 11 2 months ago
Article 14 reporting obligations for actively exploited vulnerabilities and severe incidents apply
Jun 11 5 months ago
Chapter IV (notification of conformity assessment bodies) applies
Dec 10, 2024 1 year ago
Nov 20, 2024 1 year ago
Oct 23, 2024 2 years ago
Oct 10, 2024 2 years ago
Mar 12, 2024 2 years ago
Jan 23, 2024 2 years ago
Jul 19, 2023 3 years ago
Sep 15, 2022 4 years ago
Commission proposal COM(2022) 454 published, procedure 2022/0272(COD)
Related
European UnionDigital Legislation Overhaul Package
The Council of the European Union agreed on its negotiating position regarding updates to data protection, cookie, data sharing, and incident reporting rules.
European UnionCybersecurity Act 2 (revision of the Cybersecurity Act)
Proposed regulation that would replace the 2019 Cybersecurity Act, strengthening ENISA, simplifying the EU cybersecurity certification framework, and adding measures to reduce ICT supply chain risks from high-risk third-country suppliers.
European UnionDigital Omnibus (data, GDPR, ePrivacy, NIS2 simplification)
Proposed regulation that amends the GDPR, the ePrivacy Directive, NIS2 and the Data Act to simplify EU rules on cookie consent, incident reporting and data sharing, and folds several data laws, including the Data Governance Act, into the Data Act.
European UnionNIS2 Directive
Sets cybersecurity risk management and incident reporting obligations for medium and large entities in critical sectors and requires member states to supervise and enforce them.
European UnionAction Plan on Cybersecurity and Artificial Intelligence
Commission action plan to promote safe use of advanced AI, including pre-market evaluation capacity for AI models under the AI Act, strengthen EU cyber resilience, and scale up AI capabilities for cybersecurity.
European UnionCyber Solidarity Act
Sets up a European Cybersecurity Alert System of cross-border Cyber Hubs, a Cybersecurity Emergency Mechanism with an EU Cybersecurity Reserve, and a review mechanism for significant incidents.
European UnionProduct Liability Directive
Replaces the 1985 product liability rules and extends no-fault liability for defective products to software, including AI systems, digital manufacturing files and related digital services.
European UnionNIS2 Implementing Regulation on technical requirements and significant incidents
Sets the technical and methodological cybersecurity risk management requirements under NIS2 for digital infrastructure and digital service providers, such as cloud, data centre and managed security providers, and defines when their incidents count as significant.
Change log
- AddedAdded to the list. Set by hand from the official record.Sep 27
Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.