AI and data laws

311 moving · 704 enacted

European UnionEuropean UnionLawDirective (EU) 2024/2853

Product Liability Directive

Replaces the 1985 product liability rules and extends no-fault liability for defective products to software, including AI systems, digital manufacturing files and related digital services.

In forceIntroducedCommitteeFloorLawIn force

Enters into forceDec 8, 2024 1 year ago

Body
European Parliament and Council
Session
9th parliamentary term
Introduced
Sep 28, 2022
In effect since
Dec 8, 20241 year ago
Topics
AICyber

Timeline

  1. Dec 9 in 4 weeks

    Transposition deadline; directive applies to products placed on the market after this date

  2. Dec 8, 2024 1 year ago

    Enters into force

  3. Nov 18, 2024 1 year ago

    Published in the Official Journal

  4. Oct 23, 2024 2 years ago

    Final act signed

  5. Oct 10, 2024 2 years ago

    Council adopts the act

  6. Mar 12, 2024 2 years ago

    Parliament adopts the agreed text

  7. Oct 18, 2023 3 years ago

    Plenary confirms the mandate to open negotiations

  8. Oct 9, 2023 3 years ago

    Joint IMCO and JURI committee vote, 1st reading

  9. Sep 28, 2022 4 years ago

    Commission proposal COM(2022) 495 published, procedure 2022/0302(COD)

European Union
European Unionunverified

Digital Legislation Overhaul Package

The Council of the European Union agreed on its negotiating position regarding updates to data protection, cookie, data sharing, and incident reporting rules.

Passed one chamber
European Union
European UnionCOM(2026) 11

Cybersecurity Act 2 (revision of the Cybersecurity Act)

Proposed regulation that would replace the 2019 Cybersecurity Act, strengthening ENISA, simplifying the EU cybersecurity certification framework, and adding measures to reduce ICT supply chain risks from high-risk third-country suppliers.

Proposed
European Union
European UnionCOM(2026) 502 (2026/0138(COD))

Cloud and AI Development Act

Proposed regulation to speed up permitting and deployment of data centres, aim to at least triple EU data centre capacity, and create an EU-wide four-level cloud and AI sovereignty framework with a public sector procurement mechanism.

Proposed
European Union
European UnionRegulation (EU) 2024/2847

Cyber Resilience Act

Sets mandatory cybersecurity requirements for hardware and software products with digital elements sold in the EU, including vulnerability handling and incident reporting duties for manufacturers.

In force
European Union
European UnionRegulation (EU) 2024/1689

AI Act

Sets EU-wide risk-based rules for AI systems, banning certain practices, imposing requirements on high-risk systems, transparency duties for some AI, and obligations for general-purpose AI model providers.

In force
European Union
European UnionCouncil Regulation (EU) 2026/150

EuroHPC AI Gigafactories amendment

Amends the EuroHPC Joint Undertaking regulation to provide a legal basis for AI Gigafactories of more than 100,000 advanced AI processors and to expand quantum computing activities.

In force

Change log

  • AddedAdded to the list. Set by hand from the official record.Sep 27

Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.