AI and data laws

311 moving · 704 enacted

European UnionEuropean UnionProposalCOM(2026) 11

Cybersecurity Act 2 (revision of the Cybersecurity Act)

Proposed regulation that would replace the 2019 Cybersecurity Act, strengthening ENISA, simplifying the EU cybersecurity certification framework, and adding measures to reduce ICT supply chain risks from high-risk third-country suppliers.

ProposedIntroducedCommitteeFloorLawProposed

ITRE committee draft report published (PE792.222)Sep 18 7 weeks ago

Body
European Commission
Session
10th parliamentary term
Introduced
Jan 20

Timeline

  1. Sep 18 7 weeks ago

    ITRE committee draft report published (PE792.222)

  2. Apr 29 6 months ago

    European Economic and Social Committee adopts its opinion

  3. Mar 25 7 months ago

    Referral to ITRE committee announced in plenary, 1st reading

  4. Feb 26 8 months ago

    Marketa Gregorova (Greens/EFA) appointed ITRE rapporteur

  5. Jan 20 9 months ago

    Commission proposal COM(2026) 11 published, procedure 2026/0011(COD)

European Union
European Unionunverified

Digital Legislation Overhaul Package

The Council of the European Union agreed on its negotiating position regarding updates to data protection, cookie, data sharing, and incident reporting rules.

Passed one chamber
European Union
European UnionRegulation (EU) 2024/2847

Cyber Resilience Act

Sets mandatory cybersecurity requirements for hardware and software products with digital elements sold in the EU, including vulnerability handling and incident reporting duties for manufacturers.

In force
European Union
European UnionDirective (EU) 2022/2555

NIS2 Directive

Sets cybersecurity risk management and incident reporting obligations for medium and large entities in critical sectors and requires member states to supervise and enforce them.

In force
European Union
European UnionCOM(2026) 16

Digital Networks Act

Proposed regulation that would merge the European Electronic Communications Code, the BEREC Regulation and the radio spectrum programme into one telecoms law, with a single passport for operators, longer spectrum licences and national plans to phase out copper networks.

Proposed
European Union
European UnionRegulation (EU) 2024/1309

Gigabit Infrastructure Act

Replaces the Broadband Cost Reduction Directive with rules to cut the cost and speed up the rollout of gigabit networks, covering permits, access to physical infrastructure and fibre-ready buildings.

In force
European Union
European UnionRegulation (EU) 2025/38

Cyber Solidarity Act

Sets up a European Cybersecurity Alert System of cross-border Cyber Hubs, a Cybersecurity Emergency Mechanism with an EU Cybersecurity Reserve, and a review mechanism for significant incidents.

In force

Change log

  • AddedAdded to the list. Set by hand from the official record.Sep 27

Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.