Data
Cyber
Platform
Content
AI
Misc
?
?
?
?
Product Security and Telecommunications Infrastructure (PSTI) Act (UK)
Cyber Security and Resilience Bill (UK)
July 2024
?
~2025?
Data Governance Act (EU)
Nov 2020
June 2022
Sept 2023
Data Act (EU)
Feb 2022
Nov 2023
Sept 2025
Health Data Spaces Regulation (EU)
May 2022
Apr 2024
~2028?
ePrivacy Regulation (EU)
Jan 2017
Data (Use and Access) Bill (UK)
Oct 2024
NIS2 Directive (EU)
Dec 2020
Jan 2023
Oct 2024
Digital Operational Resilience Act (EU)
Sept 2020
Dec 2022
17 Jan 2025
Cyber Resilience Act (EU)
Sept 2022
10 Dec 2024
11 June 2026
CSAM Regulation (EU)
May 2022
~2024?
European Media Freedom Act (EU)
Sept 2022
May 2024
Aug 2025
Artificial Intelligence Act (EU)
Apr 2021
AI Liability Directive (EU)
Digital Markets, Competition and Consumers (DMCC) Act (UK)
Apr 2023
Online Safety Act (UK)
Mar 2022
AI Regulation (UK)
Mar 2023
Digital Markets Act (EU)
Dec 2020
Nov 2022
2 May 2023
3 July 2023 – gatekeeper notification deadline
Digital Services Act (EU)
Dec 2020
Nov 2022
Feb 2024
May 2023 – operators designated as very large online platforms (VLOPs) and very large online search engines (VLOSEs) will have to comply with stricter obligations from mid-2023 deadline
?
~2025?
May 2024
Jan 2025
Aug '24
Feb 2025
European Accessibility Act (EU)
June 2022
June 2025
Apr 2019
October 2023
Nov 2021
Dec 2022
April 2024
European Digital Identity Regulation (eID) (EU)
May 2024
May 2026
May 2021
2 Feb 2025 – AI literacy provision/ provisions on prohibited systems become applicable
Sept 2022
?
?
This is to replace the Data Protection and Digital Information Bill (UK). A report stage to closely scrutinise elements of the bill and make changes is scheduled for 21 January 2025
?
?
July 2024 – new Labour Government confirms legislation to regulate most powerful artificial intelligence models forthcoming
?
~April 2026?
?
?
Digital Information and Smart Data Bill (UK)
July 2024
11 June 2026
First obligation applies
11 Dec 2027
Majority applies
April 2025 – consumer enforcement regime comes into force
Spring 2026 – subscription contracts regime comes into force
Jan 2025 – digital markets regime and changes to competition law come into force
Summer 2025 – Register of categorised services expected to be published and draft and final transparency notices will be issued to categorised services
January 2025 – Part 5 services must implement highly effective age assurance processes
December 2024
16 March 2025 – Deadline for completing Illegal Harms risk assessment
April 2025 – Protecting children from harms code expected to be published
16 April 2025 – Children's access assessment completion deadline (U2U and search services)
16 Dec 2024 – Illegal Harms Codes published
July 2025 – Highly effective age assurance in place for other types of harmful content and Children's Access Risk Assessments to be completed
August 2025 – provisions on general purpose AI become applicable
August 2026 – majority of provisions apply including on high-risk systems in Annex III
August 2027 – provisions apply for high-risk AI systems that are products, or used as a safety component of products, covered by EU harmonization legislation
Last updated: 3 Feb 2025
European Technology and Digital Regulation
Horizon Scanner 2025
Data, cyber, platform, content and AI legislation
Date proposed
Date adopted
Applies from
2024
2023
2022
'21
'17-'19
'20
2026
2027
2028
2024
2025
