Regulation Navigator

German Accessibility Reinforcement Act (transposing the European Accessibility Act, Directive (EU) 2019/882)

You offer B2C services in electronic commerce (online shop, booking, app).

Next deadline: 2030-06-28 — End of the transition period for certain existing services

Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act)

You manufacture products with digital elements placed on the EU market (hardware or software).

Next deadline: 2027-12-11 — Full applicability of manufacturer obligations (CE marking, conformity assessment)

Regulation (EU) 2023/2854 on harmonised rules on fair access to and use of data (Data Act)

You manufacture connected products (IoT) or offer related services that generate data.

Next deadline: 2026-09-12 — Connected-product requirements (data accessibility by design) for newly placed products

Regulation (EU) 2024/1689 on Artificial Intelligence (AI Act)

You develop, distribute or operate AI systems in the EU.

Next deadline: 2027-12-02 — Note: for high-risk AI under Annex III, a postponed deadline is currently going through the legislative process (EU 'Digital Omnibus'; as of 08/2026 not yet final in the Official Journal) — verify against the official source if in doubt

Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation)

You process personal data of people in the EU (customers, users, employees).

Next deadline: 2018-05-25 — Full applicability — binding across the entire EU since then

Directive (EU) 2022/2555 on measures for a high common level of cybersecurity (NIS 2 Directive)

Your entity falls into one of the 18 sectors (e.g. energy, transport, health, digital infrastructure, IT services, ICT service management).

Next deadline: 2026-03-06 — Germany: end of the 3-month registration deadline for in-scope entities with the BSI