All Changes
EU Regulatory Changes
51 changes tracked across 21 compliance frameworks including DORA, NIS2, GDPR, EU AI Act, Cyber Resilience Act, and more.
All
DORA NIS2 GDPR CSRD MaRisk ISO27001 EU_AI_ACT CRA DSA DMA eIDAS2 SOC2 PCI_DSS HIPAA ISO42001 AMLD6 PSD3 DATA_ACT GPSR CER EUDR
ESMA has published its final report setting the clearing thresholds under the updated EMIR 3 framework, which is part of the broader DORA regulatory initiative. This establishes the quantitative le...
Read analysis →
ENISA has published operational details on the cooperation framework for the EU Cybersecurity Reserve, a key mechanism established under the NIS2 Directive. The update clarifies the process for req...
Read analysis →
In a February 2026 speech, ECB supervisory chair Claudia Buch outlined enhanced cooperation between the future Anti-Money Laundering Authority (AMLA) and ECB Banking Supervision. The key change is ...
Read analysis →
The CSSF has published a communication specifying the submission timeframe for a key DORA requirement. It mandates that third-country branches of credit institutions, whose head office is outside t...
Read analysis →
ENISA has published guidance on the process for cybersecurity companies to join the newly established EU Cybersecurity Reserve. This voluntary pool of trusted private sector incident response servi...
Read analysis →
ENISA has published guidance clarifying the funding mechanism for the new EU Cybersecurity Reserve, a key operational capability established under the NIS2 Directive. The Reserve is designed to pro...
Read analysis →
ENISA has published a clarification on the scope of assistance available from the EU Cybersecurity Reserve. This operational tool, established under the NIS2 Directive, is confirmed to provide supp...
Read analysis →
ENISA has published a clarification confirming that non-EU countries are eligible to receive support from the EU Cybersecurity Reserve. This operational detail stems from the NIS2 Directive and the...
Read analysis →
The European Banking Authority (EBA) has published a follow-up report on integrating Information and Communication Technology (ICT) risk into the Supervisory Review and Evaluation Process (SREP). T...
Read analysis →
The European Data Protection Board (EDPB) has published its strategic work programme for 2026-2027, formally establishing a core objective of simplifying GDPR compliance. This represents a signific...
Read analysis →
The European Data Protection Board (EDPB) has published a report summarizing the feedback from its public consultation on proposed GDPR compliance templates. This report details stakeholder input o...
Read analysis →