Changelog

172 dated events · read from the primary sources on 12 September 2026

What changed in the regulations, month by month

The days a regulation began to apply, the acts and guidance adopted under it, and the national measures member states notified for NIS2, each from the date the content module holds and nothing typed by hand; 9 still to come, 163 behind us.

Coming up

December 2026

  • AI ActThe two prohibitions inserted in Article 5 by the Omnibus apply. Read
  • AI ActThe Article 50(2) marking duty reaches systems that were already on the market on the general date of application. Read

January 2027

  • Data ActSwitching charges between data processing services end; until this day they had to be cost-based. Read
  • MachineryThe Machinery Regulation replaces the Machinery Directive, with the cybersecurity requirements for safety-related components. Read

September 2027

  • AI ActThe Commission's guidance and template for the post-market monitoring plan are due under the amended Article 72(3). Read

December 2027

  • AI ActThe high-risk requirements apply to Annex III systems, on the date the Digital Omnibus set. Read
  • CRAEvery other obligation applies: the essential requirements of Annex I, the technical file, the conformity assessment and the CE marking for products with digital elements. Read

August 2028

  • AI ActThe high-risk requirements apply to Annex I systems, on the date the Digital Omnibus set. Read

August 2030

  • AI ActHigh-risk systems intended for use by public authorities comply by this day whatever their market date, under Article 111(2). Read

Behind us, newest first

September 2026

  • Data ActAccess by design applies to connected products and related services placed on the market from this day. Read
  • CRAThe Article 14 reporting duty applies: an actively exploited vulnerability or a severe incident is reported to ENISA's single reporting platform within 24 hours of awareness, with the notification at 72 hours. Read
  • CRAENISA publishes the list of CSIRTs designated as coordinators, one per member state, the day before the reporting platform opened. Read

August 2026

  • AI ActThe general date of application, the Article 50 transparency duties included. Read

July 2026

  • CRAThe Commission adopts its guidance on the application of the Regulation, C(2026) 5252, the document the CRA pages cite by paragraph. Read
  • AI ActArticles 102 to 110, the amendments to other Union acts, apply. Read
  • AI ActThe Digital Omnibus on AI enters into force: the high-risk dates move and the marking transition is set. Read
  • AI ActThe Digital Omnibus on AI is published in the Official Journal. Read
  • NIS2France notified 15 national measures transposing the Directive to the Commission. Read
  • NIS2Netherlands notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Netherlands notified 2 national measures transposing the Directive to the Commission. Read
  • AI ActThe Digital Omnibus on AI, Regulation (EU) 2026/1744, is signed. Read

June 2026

  • NIS2Portugal notified 1 national measure transposing the Directive to the Commission. Read
  • CRAChapter IV applies: notifying authorities designate the notified bodies that will assess the products the Regulation does not let manufacturers self-assess. Read
  • NIS2Finland notified 2 national measures transposing the Directive to the Commission. Read
  • NIS2Germany notified 1 national measure transposing the Directive to the Commission. Read

May 2026

  • NIS2Luxembourg notified 1 national measure transposing the Directive to the Commission. Read

April 2026

  • NIS2Hungary notified 4 national measures transposing the Directive to the Commission. Read

March 2026

  • NIS2Poland notified 5 national measures transposing the Directive to the Commission. Read

February 2026

  • NIS2Bulgaria notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Sweden notified 13 national measures transposing the Directive to the Commission. Read

January 2026

  • NIS2Germany notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Estonia notified 1 national measure transposing the Directive to the Commission. Read

December 2025

  • NIS2Austria notified 6 national measures transposing the Directive to the Commission. Read
  • NIS2Germany notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Portugal notified 1 national measure transposing the Directive to the Commission. Read

October 2025

  • NIS2Czechia notified 3 national measures transposing the Directive to the Commission. Read
  • NIS2Finland notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Germany notified 2 national measures transposing the Directive to the Commission. Read

September 2025

  • NIS2Hungary notified 9 national measures transposing the Directive to the Commission. Read
  • NIS2Czechia notified 4 national measures transposing the Directive to the Commission. Read
  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read
  • Data ActThe Data Act applies: the switching duties on providers of data processing services, the contract terms, and the access rights on connected products. Read

August 2025

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Germany notified 1 national measure transposing the Directive to the Commission. Read
  • AI ActChapter V applies to general-purpose AI models, with the governance chapters. Read

July 2025

  • DORADelegated Regulation (EU) 2025/532 on subcontracting enters into force. Read
  • NIS2Finland notified 2 national measures transposing the Directive to the Commission. Read
  • NIS2Latvia notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Denmark notified 2 national measures transposing the Directive to the Commission. Read
  • NIS2Denmark notified 6 national measures transposing the Directive to the Commission. Read
  • NIS2Germany notified 2 national measures transposing the Directive to the Commission. Read
  • NIS2Estonia notified 27 national measures transposing the Directive to the Commission. Read

June 2025

  • NIS2Finland notified 8 national measures transposing the Directive to the Commission. Read
  • NIS2Slovenia notified 1 national measure transposing the Directive to the Commission. Read

May 2025

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Cyprus notified 1 national measure transposing the Directive to the Commission. Read

April 2025

  • NIS2Malta notified 1 national measure transposing the Directive to the Commission. Read

March 2025

  • DORADelegated Regulation (EU) 2025/532, subcontracting of critical or important functions, is adopted. Read
  • NIS2Hungary notified 12 national measures transposing the Directive to the Commission. Read

February 2025

  • DORADelegated Regulation (EU) 2025/1190, threat-led penetration testing, is adopted. Read
  • NIS2Slovakia notified 5 national measures transposing the Directive to the Commission. Read
  • NIS2Poland notified 2 national measures transposing the Directive to the Commission. Read
  • AI ActChapters I and II apply: subject matter, definitions, the prohibited practices, and the AI literacy duty of Article 4. Read

January 2025

  • NIS2Germany notified 3 national measures transposing the Directive to the Commission. Read
  • NIS2Denmark notified 2 national measures transposing the Directive to the Commission. Read
  • NIS2Hungary notified 4 national measures transposing the Directive to the Commission. Read
  • NIS2Lithuania notified 3 national measures transposing the Directive to the Commission. Read
  • NIS2Lithuania notified 6 national measures transposing the Directive to the Commission. Read
  • NIS2Germany notified 2 national measures transposing the Directive to the Commission. Read
  • NIS2Cloud, data centre, managed service, marketplace, search and social networking providers had to be registered with their competent authority for ENISA's registry by this day. Read
  • DORADORA applies to banks, insurers, investment firms and payment institutions, and through their contracts to their ICT providers. Read
  • NIS2Romania notified 2 national measures transposing the Directive to the Commission. Read
  • NIS2Austria notified 2 national measures transposing the Directive to the Commission. Read
  • NIS2Germany notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Hungary notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Slovakia notified 2 national measures transposing the Directive to the Commission. Read

December 2024

  • NIS2Romania notified 2 national measures transposing the Directive to the Commission. Read
  • NIS2Germany notified 2 national measures transposing the Directive to the Commission. Read
  • NIS2Greece notified 3 national measures transposing the Directive to the Commission. Read

November 2024

  • DORAImplementing Regulation (EU) 2024/2956, the register of information templates, is adopted. Read
  • NIS2Romania notified 11 national measures transposing the Directive to the Commission. Read
  • NIS2Lithuania notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Croatia notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Slovakia notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Germany notified 1 national measure transposing the Directive to the Commission. Read

October 2024

  • DORAThe content, time limits and templates of major-incident reports are adopted (Delegated Regulation (EU) 2025/301 and Implementing Regulation (EU) 2025/302). Read
  • NIS2Germany notified 3 national measures transposing the Directive to the Commission. Read
  • NIS2The national measures transposing the Directive apply from this day; the law a company is under is its member state's act, listed in the transposition register. Read
  • NIS2Lithuania notified 12 national measures transposing the Directive to the Commission. Read
  • NIS2Italy notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Latvia notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Belgium notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Romania notified 1 national measure transposing the Directive to the Commission. Read

July 2024

  • AI ActRegulation (EU) 2024/1689 is published in the Official Journal. Read

June 2024

  • NIS2Slovakia notified 1 national measure transposing the Directive to the Commission. Read

May 2024

  • NIS2Belgium notified 1 national measure transposing the Directive to the Commission. Read

March 2024

  • DORADelegated Regulation (EU) 2024/1773, the policy on contractual arrangements, is adopted. Read
  • DORADelegated Regulation (EU) 2024/1774, ICT risk management tools and the simplified framework, is adopted. Read
  • DORADelegated Regulation (EU) 2024/1772, the classification of major incidents, is adopted. Read

February 2024

  • NIS2Croatia notified 1 national measure transposing the Directive to the Commission. Read

January 2024

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

September 2023

  • NIS2Hungary notified 1 national measure transposing the Directive to the Commission. Read

July 2023

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

June 2023

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

December 2022

  • DORARegulation (EU) 2022/2554 is published in the Official Journal. Read
  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

September 2022

  • NIS2Czechia notified 2 national measures transposing the Directive to the Commission. Read

June 2022

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

May 2022

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

February 2022

  • NIS2Hungary notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Hungary notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Hungary notified 1 national measure transposing the Directive to the Commission. Read

January 2022

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

November 2021

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

October 2021

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

August 2021

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

July 2021

  • NIS2Czechia notified 2 national measures transposing the Directive to the Commission. Read

January 2021

  • NIS2Hungary notified 1 national measure transposing the Directive to the Commission. Read

December 2020

  • NIS2Hungary notified 1 national measure transposing the Directive to the Commission. Read

September 2020

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

April 2020

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

January 2020

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

April 2019

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

May 2018

  • NIS2Czechia notified 4 national measures transposing the Directive to the Commission. Read
  • GDPRThe Regulation applies, two years after entry into force. Read

February 2018

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

August 2017

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

July 2017

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

March 2017

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

October 2016

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

September 2016

  • NIS2Hungary notified 1 national measure transposing the Directive to the Commission. Read

December 2015

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

September 2015

  • NIS2Czechia notified 2 national measures transposing the Directive to the Commission. Read

June 2015

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

May 2015

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

December 2013

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

April 2013

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

October 2012

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

June 2012

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

February 2012

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

January 2012

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

August 2011

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

July 2011

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

June 2011

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

December 2009

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

July 2009

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

June 2009

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

October 2008

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

July 2008

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

September 2006

  • NIS2Hungary notified 1 national measure transposing the Directive to the Commission. Read

June 2006

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

April 2005

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

January 2005

  • NIS2Czechia notified 2 national measures transposing the Directive to the Commission. Read

November 2004

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

August 2004

  • NIS2Czechia notified 2 national measures transposing the Directive to the Commission. Read

April 2004

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Czechia notified 2 national measures transposing the Directive to the Commission. Read

February 2004

  • NIS2Hungary notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Czechia notified 3 national measures transposing the Directive to the Commission. Read
  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read

January 2004

  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Czechia notified 1 national measure transposing the Directive to the Commission. Read
  • NIS2Czechia notified 2 national measures transposing the Directive to the Commission. Read

A month with nothing in it is not listed. The product's own changes are on the changelog.