AI and data laws

311 moving · 704 enacted

European UnionEuropean Union

58 on file · 41 became law · 10 still moving · 4 moved in 30 days

Guidelines on prohibited AI practices

Non-binding Commission guidelines with legal explanations and practical examples of the AI practices banned under Article 5 of the AI Act, such as harmful manipulation, social scoring and real-time remote biometric identification.

Adopted
Directive (EU) 2024/2853

Product Liability Directive

Replaces the 1985 product liability rules and extends no-fault liability for defective products to software, including AI systems, digital manufacturing files and related digital services.

In force
Directive (EU) 2024/2831

Platform Work Directive

Creates a legal presumption of employment for people working through digital labour platforms and sets the first EU rules on algorithmic management, including human oversight of automated decisions and limits on processing workers' personal data.

In force
Commission Implementing Regulation (EU) 2024/2690

NIS2 Implementing Regulation on technical requirements and significant incidents

Sets the technical and methodological cybersecurity risk management requirements under NIS2 for digital infrastructure and digital service providers, such as cloud, data centre and managed security providers, and defines when their incidents count as significant.

In force
Council Regulation (EU) 2024/1732

EuroHPC AI Factories amendment

Amends the EuroHPC Joint Undertaking regulation to add an AI Factories pillar giving start-ups and innovators access to AI-optimised supercomputers.

In force
Regulation (EU) 2024/1183

European Digital Identity Framework (eIDAS 2)

Amends the eIDAS Regulation to require every member state to offer citizens and businesses a European Digital Identity Wallet, due by the end of 2026, for identification and sharing of electronic attestations.

In force