EU Regulatory Center
Every regulation, with its source and review date
LAW_IN_FORCE, OFFICIAL_GUIDANCE, PROPOSAL and ANALYSIS are kept structurally separate — a proposal is never shown as law already in force.
Regulations tracked
6 instrumentsLaw in force
NIS2 Directive
Cybersecurity risk-management and incident-reporting obligations for essential and important entities.
Read more
Law in force
Cyber Resilience Act (CRA)
Cybersecurity requirements for products with digital elements, across their lifecycle.
Read more
Law in force
DORA
Digital operational resilience for the financial sector and its critical ICT providers.
Read more
Law in force
EU AI Act
Risk-based obligations for providers and deployers of AI systems, phased in by risk tier.
Read more
Law in force
GDPR
The EU’s general data-protection framework — principles, rights and breach-notification duties.
Read more
Law in force
CER Directive
Physical and operational resilience obligations for critical entities, complementing NIS2.
Read more
How status works
Every instrument on this page carries one of four statuses: Law in force (published and applicable), Official guidance (regulator guidance interpreting a law already in force), Proposal (not yet adopted), or Analysis (CYRKIL commentary, clearly separated from the primary source). Status, source and review date are shown together — never one without the others.
