European UnionEuropean UnionLawRegulation (EU) 2025/2518
GDPR Procedural Regulation (cross-border enforcement)
Adds harmonised procedural rules for how national data protection authorities cooperate and handle complaints in cross-border GDPR cases.
Enters into forceJan 1 10 months ago
- Body
- European Parliament and Council
- Session
- 10th parliamentary term
- Introduced
- Jul 4, 2023
- In effect since
- Jan 110 months ago
Timeline
Apr 2, 2027 in 4 months
Jan 1 10 months ago
Dec 12, 2025 11 months ago
Nov 26, 2025 11 months ago
Nov 17, 2025 11 months ago
Oct 21, 2025 1 year ago
Jul 15, 2025 1 year ago
Apr 10, 2024 2 years ago
Feb 15, 2024 2 years ago
Jul 4, 2023 3 years ago
Commission proposal COM(2023) 348 published, procedure 2023/0202(COD)
Related
Digital Legislation Overhaul Package
The Council of the European Union agreed on its negotiating position regarding updates to data protection, cookie, data sharing, and incident reporting rules.
Data Act
Sets rules on who can access and use data generated by connected products and related services, on business-to-government data sharing in exceptional need, and on switching between cloud and data processing services.
Interim ePrivacy derogation to combat online child sexual abuse (2026 re-adoption)
Restores, until 3 April 2028, a temporary derogation from the ePrivacy Directive that lets messaging and other communications providers voluntarily detect, report and remove online child sexual abuse material, after the earlier interim regulation expired on 3 April 2026.
Digital Omnibus (data, GDPR, ePrivacy, NIS2 simplification)
Proposed regulation that amends the GDPR, the ePrivacy Directive, NIS2 and the Data Act to simplify EU rules on cookie consent, incident reporting and data sharing, and folds several data laws, including the Data Governance Act, into the Data Act.
Digital Markets Act
Sets obligations and prohibitions for large online platforms designated as gatekeepers, such as bans on self-preferencing and anti-steering, and requirements on interoperability and data use.
Regulation to prevent and combat child sexual abuse online (CSA Regulation)
Proposed regulation that would set obligations for online service providers to assess and reduce the risk of child sexual abuse on their services, allow detection orders, and create an EU Centre on child sexual abuse.
DAC8 (crypto-asset tax reporting)
Amends the Directive on administrative cooperation in taxation to require crypto-asset service providers to report their users' crypto-asset transactions to tax authorities, with automatic exchange of that information between member states.
Data Governance Act
Creates a framework for reusing certain protected public sector data, regulates data intermediation services, and sets rules for data altruism organisations.
Change log
- AddedAdded to the list. Set by hand from the official record.Sep 27
Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.