Regulatory tracker
Revised
Every row is re-verified against the Official Journal on each revision.
Every dated EU obligation that reaches equipment placed on the European market: what the instrument is, which operators it binds, and what is different the day after.
| Date | Instrument | Binds | Status | Consequence |
|---|---|---|---|---|
| AI Act (EU) 2024/1689 | Providers and deployers of AI systems that interact with people | Action required | The Article 50 transparency duties apply: a person interacting with an AI system, or with content it generates, must be told so. | |
| Cyber Resilience Act (EU) 2024/2847 | Manufacturers of products with digital elements | Action required | Actively exploited vulnerabilities and severe incidents must be reported to ENISA and the national CSIRT within 24 hours. | |
| Machinery Regulation (EU) 2023/1230 | Manufacturers, authorised representatives, importers | Approaching | Directive 2006/42/EC stops applying: conformity assessment, a technical file and an EU declaration of conformity are required, and a responsible economic operator must be established in the Union before the machine is placed on the market. | |
| AI Act (EU) 2024/1689 | Providers and deployers of stand-alone high-risk AI systems (Annex III) | Not yet applicable | Deferred from 2 August 2026 by Regulation (EU) 2026/1744. Risk management, technical documentation, human oversight and registration in the EU database become enforceable. | |
| Cyber Resilience Act (EU) 2024/2847 | Manufacturers, importers and distributors | Not yet applicable | No product with digital elements may be placed on the EU market without CE marking against the Regulation's essential cybersecurity requirements. | |
| AI Act (EU) 2024/1689 | Providers of high-risk AI embedded in regulated products (Annex I) | Not yet applicable | Deferred from 2 August 2027 by Regulation (EU) 2026/1744. The same obligations reach AI that is a safety component of machinery already covered by the sectoral legislation in Annex I. |
Action required: in force, or within the 90-day window. Approaching: inside the 365-day planning horizon. Not yet applicable: beyond it.