Legislationsby Glyphunverified
Keeping Internet Digital Spaces Accountable and Trustworthy Act
The European Commission adopted a legislative proposal aimed at strengthening the protection of children online.
European UnionEuropean Union
58 on file · 41 became law · 10 still moving · 4 moved in 30 days
unverified
Digital Services Act TikTok Investigation
The European Commission preliminarily found TikTok in breach of the Digital Services Act over harmful algorithmic rabbit hole effects in its recommender system.
unverified
KIDS Act
The European Commission published a proposal for the KIDS Act to enhance online safety for children.
unverified
Digital Legislation Overhaul Package
The Council of the European Union agreed on its negotiating position regarding updates to data protection, cookie, data sharing, and incident reporting rules.
COM(2026) 11
Cybersecurity Act 2 (revision of the Cybersecurity Act)
Proposed regulation that would replace the 2019 Cybersecurity Act, strengthening ENISA, simplifying the EU cybersecurity certification framework, and adding measures to reduce ICT supply chain risks from high-risk third-country suppliers.
COM(2026) 502 (2026/0138(COD))
Cloud and AI Development Act
Proposed regulation to speed up permitting and deployment of data centres, aim to at least triple EU data centre capacity, and create an EU-wide four-level cloud and AI sovereignty framework with a public sector procurement mechanism.
COM(2026) 504 (2026/0139(COD))
Chips Act 2.0
Proposed regulation that would replace the 2023 Chips Act with a Chips for Europe Initiative 2.0, support for first-of-a-kind and strategic semiconductor projects, and stronger coordination to prevent supply dependencies.
Regulation (EU) 2023/2854
Data Act
Sets rules on who can access and use data generated by connected products and related services, on business-to-government data sharing in exceptional need, and on switching between cloud and data processing services.
Regulation (EU) 2024/2847
Cyber Resilience Act
Sets mandatory cybersecurity requirements for hardware and software products with digital elements sold in the EU, including vulnerability handling and incident reporting duties for manufacturers.
Regulation (EU) 2024/1689
AI Act
Sets EU-wide risk-based rules for AI systems, banning certain practices, imposing requirements on high-risk systems, transparency duties for some AI, and obligations for general-purpose AI model providers.
Guidelines on transparency obligations for providers and deployers of certain AI systems
Commission guidelines on Article 50 of the AI Act clarifying who must disclose AI interactions, mark AI-generated content in machine-readable form, and label deepfakes and certain AI-generated text.
Regulation (EU) 2026/1881
Interim ePrivacy derogation to combat online child sexual abuse (2026 re-adoption)
Restores, until 3 April 2028, a temporary derogation from the ePrivacy Directive that lets messaging and other communications providers voluntarily detect, report and remove online child sexual abuse material, after the earlier interim regulation expired on 3 April 2026.
Council Regulation (EU) 2026/150
EuroHPC AI Gigafactories amendment
Amends the EuroHPC Joint Undertaking regulation to provide a legal basis for AI Gigafactories of more than 100,000 advanced AI processors and to expand quantum computing activities.
COM(2025) 837
Digital Omnibus (data, GDPR, ePrivacy, NIS2 simplification)
Proposed regulation that amends the GDPR, the ePrivacy Directive, NIS2 and the Data Act to simplify EU rules on cookie consent, incident reporting and data sharing, and folds several data laws, including the Data Governance Act, into the Data Act.
Regulation (EU) 2026/1744 (COM(2025) 836, 2025/0359(COD))
Digital Omnibus on AI
Amends the AI Act to delay high-risk obligations to 2 December 2027 and 2 August 2028, extend SME relief to small mid-caps, simplify AI literacy and registration duties, widen AI Office oversight, and ban AI nudification and CSAM generation.
Regulation (EU) 2022/1925
Digital Markets Act
Sets obligations and prohibitions for large online platforms designated as gatekeepers, such as bans on self-preferencing and anti-steering, and requirements on interoperability and data use.
DMA non-compliance decision against Google
Commission decision fining Google 890 million euros under the Digital Markets Act: 460 million for self-preferencing its own services in Google Search and 430 million for anti-steering restrictions on Google Play.
Draft guidelines on the classification of high-risk AI systems
Draft Commission guidelines under Article 6(5) of the AI Act with practical examples of AI systems that should or should not be classified as high-risk, published for consultation before formal adoption.
Regulation (EU) 2022/2065
Digital Services Act
Sets due diligence obligations for online intermediaries and platforms on illegal content, transparency, advertising and protection of minors, with extra systemic risk duties for very large online platforms and search engines supervised by the Commission.
C(2025) 8630 final
DSA non-compliance decision against X
First Digital Services Act non-compliance decision, fining X 120 million euros for deceptive design of its blue checkmark (Article 25(1)), a deficient advertising repository (Article 39) and failing to give researchers access to public data (Article 40(12)).
Code of Practice on Transparency of AI-generated Content
Voluntary code that helps providers of generative AI systems mark and detect AI-generated content and helps deployers label deepfakes and certain AI-generated text, to meet Article 50(2), (4) and (5) of the AI Act.
Directive (EU) 2022/2555
NIS2 Directive
Sets cybersecurity risk management and incident reporting obligations for medium and large entities in critical sectors and requires member states to supervise and enforce them.
COM(2026) 577
Action Plan on Cybersecurity and Artificial Intelligence
Commission action plan to promote safe use of advanced AI, including pre-market evaluation capacity for AI models under the AI Act, strengthen EU cyber resilience, and scale up AI capabilities for cybersecurity.
Regulation (EU) 2023/1114
Markets in Crypto-Assets Regulation (MiCA)
Sets EU-wide rules for issuing and offering crypto-assets, including asset-referenced tokens and e-money tokens, and for authorising and supervising crypto-asset service providers.
COM(2022) 209
Regulation to prevent and combat child sexual abuse online (CSA Regulation)
Proposed regulation that would set obligations for online service providers to assess and reduce the risk of child sexual abuse on their services, allow detection orders, and create an EU Centre on child sexual abuse.
COM(2026) 16
Digital Networks Act
Proposed regulation that would merge the European Electronic Communications Code, the BEREC Regulation and the radio spectrum programme into one telecoms law, with a single passport for operators, longer spectrum licences and national plans to phase out copper networks.
Regulation (EU) 2023/1781
European Chips Act
Establishes a framework to strengthen the EU semiconductor ecosystem through the Chips for Europe Initiative, support for first-of-a-kind production facilities, and a supply crisis monitoring and response mechanism.
COM(2026) 503
European Tech Sovereignty communication and EU Open Source Strategy
Commission communication presenting the European Technological Sovereignty Package, linking the Chips Act 2.0, the Cloud and AI Development Act, an EU Open Source Strategy and a roadmap for digitalisation and AI in energy.
DSA non-compliance decision against Temu
Commission decision fining Temu 200 million euros under the Digital Services Act for failing to properly identify and assess the systemic risks of illegal products offered on its marketplace.
Council Decision (EU) 2026/1080
Council Decision on concluding the Council of Europe AI Convention
Council decision concluding, on behalf of the European Union, the Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law, following the Commission proposal COM(2025) 265 and the consent of the European Parliament.
Council Directive (EU) 2023/2226
DAC8 (crypto-asset tax reporting)
Amends the Directive on administrative cooperation in taxation to require crypto-asset service providers to report their users' crypto-asset transactions to tax authorities, with automatic exchange of that information between member states.
Regulation (EU) 2025/2518
GDPR Procedural Regulation (cross-border enforcement)
Adds harmonised procedural rules for how national data protection authorities cooperate and handle complaints in cross-border GDPR cases.
Regulation (EU) 2022/868
Data Governance Act
Creates a framework for reusing certain protected public sector data, regulates data intermediation services, and sets rules for data altruism organisations.
Regulation (EU) 2024/1309
Gigabit Infrastructure Act
Replaces the Broadband Cost Reduction Directive with rules to cut the cost and speed up the rollout of gigabit networks, covering permits, access to physical infrastructure and fibre-ready buildings.
Commission Delegated Regulation (EU) 2025/2050
DSA Delegated Act on Data Access for Vetted Researchers
Sets the technical conditions and procedures under which very large online platforms and search engines must share data with vetted researchers under Article 40 of the Digital Services Act.
Regulation (EU) 2024/900
Regulation on transparency and targeting of political advertising
Requires political advertisements to be labelled with sponsor and funding information, creates an EU repository of online political ads, and restricts targeting and ad delivery techniques that use personal data.
OJ C/2025/5519
DSA Guidelines on the Protection of Minors Online
Commission guidelines under Article 28 of the Digital Services Act setting out measures online platforms accessible to minors should take to ensure a high level of privacy, safety and security, including age assurance methods and protections against grooming, harmful content and exploitative commercial practices.
COM(2025) 723
Apply AI Strategy
Commission communication to speed up AI adoption in industry and the public sector through sectoral flagships, SME support, an Apply AI Alliance and an AI Observatory.
COM(2022) 496
AI Liability Directive
Proposed directive adapting non-contractual civil liability rules to AI, including disclosure of evidence and a rebuttable presumption of causality, which the Commission withdrew.
C-413/23 P (ECLI:EU:C:2025:645)
EDPS v SRB (pseudonymised data)
Court of Justice judgment holding that pseudonymised data are not in all cases and for every person personal data, since pseudonymisation may prevent recipients other than the controller from identifying the data subject, and setting aside the General Court's ruling in T-557/20.
Regulation (EU) 2024/1083
European Media Freedom Act
Sets common rules to protect media pluralism and editorial independence, including safeguards against spyware use on journalists, transparency of media ownership and state advertising, and treatment of media content by very large online platforms.
General-Purpose AI Code of Practice
Voluntary code drawn up by independent experts that gives general-purpose AI model providers a way to show compliance with AI Act transparency, copyright and safety and security obligations.
Template for the public summary of training content of general-purpose AI models
Explanatory notice and mandatory template that general-purpose AI model providers use to publish a summary of the data used to train their models, including main datasets and top domain names, under Article 53 of the AI Act.
Guidelines on the scope of obligations for providers of general-purpose AI models
Commission guidelines clarifying which actors count as providers of general-purpose AI models and the scope of their obligations under the AI Act.
DMA non-compliance decisions against Apple and Meta
First Digital Markets Act non-compliance decisions, fining Apple 500 million euros for breaching the anti-steering obligation on its App Store and Meta 200 million euros for its pay or consent model.
COM(2025) 165
AI Continent Action Plan
Commission communication setting out actions to make the EU a leading AI continent, covering computing infrastructure such as AI factories and gigafactories, data, skills, AI uptake and simpler implementation of the AI Act.
Commission Implementing Regulation (EU) 2025/454
AI Act scientific panel implementing regulation
Sets the rules for establishing and operating the AI Act scientific panel of independent experts that advises the AI Office, including on systemic risks from general-purpose AI models.
Regulation (EU) 2025/327
European Health Data Space Regulation
Gives people control over and cross-border access to their electronic health data and sets a framework for the secondary use of health data for research, innovation and policy making.
Guidelines on the definition of an AI system
Non-binding Commission guidelines explaining how to determine whether a software system is an AI system within the scope of the AI Act.
Regulation (EU) 2025/38
Cyber Solidarity Act
Sets up a European Cybersecurity Alert System of cross-border Cyber Hubs, a Cybersecurity Emergency Mechanism with an EU Cybersecurity Reserve, and a review mechanism for significant incidents.