Key forthcoming EU legislation on Cybersecurity, Artificial Intelligence, Data and Digital Markets

Cybersecurity, artificial intelligence, data and digital markets have been in the focus of the EU legislator, with several new pieces of legislation that will affect businesses in a wide range of sectors. All of these developments have extraterritorial effects and apply to any entity offering relevant services or goods in the EU, regardless of their place of establishment. Another common ground are high fines for non-compliance.

We have prepared the attached overview of these new rules, outlining the scope, key obligations and timetable for application of six pieces of EU legislation: the Digital Operational Resilience Act (DORA), the Network and Information Security 2 (NIS2) Directive, the Cyber Resilience Act (CRA), the EU AI Act, the Digital Services Act (DSA), the Digital Markets Act (DMA) and the Data Act (DA).

We would be delighted to answer any questions and provide a deeper dive into any of these rules.