{"_meta":{"title":"European digital regulation timeline","snapshot":"2026-08","note":"A dated archive of how each instrument of EU digital regulation moved: proposal, agreement, adoption, entry into force, staged application, delay, amendment, withdrawal. Every event is graded. Verified means the primary document was opened and read at the passage asserting the date or fact; reported means the claim rests on the named secondary source. Every event states what the milestone does not bind, because the boundary of an instrument is as much a finding as its content. Depth is deliberately asymmetric: horizontal and sovereignty-relevant instruments carry full event chains; sector overlays carry adoption and application only, as context. Events flagged proposed:true are editorial candidates awaiting the editor's cut.","seeded_by":"TIMELINE-BRIEF.md 2026-08-19; instrument catalogue started from Dastra's AI Act overlap guide (read 2026-08-19) and the instruments the Monitor already tracks; every date re-verified against the cited source","grading_vocabulary":{"verified":"the primary document was opened and read at the passage asserting it","reported":"the primary text was not reached; the claim rests on the named secondary source"},"type_vocabulary":{"proposal":"Commission proposal tabled","political-agreement":"Parliament and Council reach a deal; text not yet formally adopted","adoption":"formally adopted by the co-legislators or the adopting institution","entry-into-force":"the instrument becomes law; obligations may still be dormant","application":"obligations start to bind","delay":"a dated postponement of obligations that were due to bind","amendment":"a later act changes the instrument","withdrawal":"the proposal is withdrawn before adoption","repeal":"the instrument is repealed or replaced","guidance":"non-binding instrument shaping compliance in practice","enforcement":"a dated enforcement step against non-compliance, such as an infringement referral"},"type_labels_es":{"proposal":"propuesta","political-agreement":"acuerdo político","adoption":"adopción","entry-into-force":"entrada en vigor","application":"aplicación","delay":"aplazamiento","amendment":"modificación","withdrawal":"retirada","repeal":"derogación","guidance":"directrices","enforcement":"ejecución"},"areas":{"policy-law":"Policy and law","compute-infra":"Compute and infrastructure","defence-space":"Defence and space","industry":"Industry, investment and R&D"},"areas_es":{"policy-law":"Política y legislación","compute-infra":"Computación e infraestructura","defence-space":"Defensa y espacio","industry":"Industria, inversión e I+D"},"served_note":"Built from data/timeline.json in the publication folder by scripts/build-timeline-asset.js. The _evidence field, which quotes the primary-source passage behind each verified date, is kept in the source for audit and stripped from this served copy."},"EVENTS":[{"id":"pld-adoption-1985","date":"1985-07-25","date_precision":"day","instrument":"Product Liability Directive (Dir 85/374/EEC)","instrument_short":"PLD 1985","area":"policy-law","type":"adoption","title_en":"Council adopts Product Liability Directive 85/374/EEC","title_es":"El Consejo adopta la Directiva 85/374/CEE sobre responsabilidad por productos defectuosos","summary_en":"The Council adopted Directive 85/374/EEC on 25 July 1985, making producers strictly liable for damage caused by defective products; the injured person proves damage, defect and causation, without proving fault. Signed at Brussels on 25 July 1985 and published in OJ L 210 of 7 August 1985, it anchored EU product liability for four decades and is the baseline the AI-era reform of 2024 rewrote, since it was drafted for industrially produced tangible goods.","summary_es":"El Consejo adoptó la Directiva 85/374/CEE el 25 de julio de 1985, estableciendo la responsabilidad objetiva del productor por los daños causados por productos defectuosos; el perjudicado prueba el daño, el defecto y la relación causal, sin necesidad de probar culpa. Firmada en Bruselas el 25 de julio de 1985 y publicada en el DO L 210 de 7 de agosto de 1985, ancló la responsabilidad por productos en la UE durante cuatro décadas y es la base que la reforma de la era de la IA reescribió en 2024, porque fue redactada para bienes tangibles de producción industrial.","grading":"verified","not_tested":"The 1985 regime reached tangible movables and electricity; standalone software, digital services and AI systems as such sat outside it, and it never regulated product safety before harm occurred.","not_tested_es":"El régimen de 1985 alcanzaba los bienes muebles tangibles y la electricidad; el software autónomo, los servicios digitales y los sistemas de IA como tales quedaban fuera, y nunca reguló la seguridad de los productos antes de producirse el daño.","sources":[{"label":"EUR-Lex, Council Directive 85/374/EEC (CELEX 31985L0374)","url":"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:31985L0374","accessed":"2026-08-19"}],"related":["pld-2024-adoption","pld-2024-transposition-deadline"],"proposed":false},{"id":"gpa-entry-into-force-1996","date":"1996-01-01","date_precision":"day","instrument":"WTO Agreement on Government Procurement (GPA 1994)","instrument_short":"GPA","area":"industry","type":"entry-into-force","title_en":"WTO GPA enters into force with the EU as party","title_es":"El ACP de la OMC entra en vigor con la UE como parte","summary_en":"The plurilateral GPA 1994, signed at Marrakesh on 15 April 1994, entered into force on 1 January 1996; the WTO lists the European Union among its parties from that date, with the revised GPA 2012 taking effect on 6 April 2014. The GPA commits the EU to open covered procurement to suppliers from other parties, which is why buy-European clauses in EU procurement law are legally awkward.","summary_es":"El ACP plurilateral de 1994, firmado en Marrakech el 15 de abril de 1994, entró en vigor el 1 de enero de 1996; la OMC cuenta a la Unión Europea entre sus partes desde esa fecha, y el ACP revisado de 2012 surtió efecto el 6 de abril de 2014. El ACP obliga a la UE a abrir la contratación cubierta a proveedores de las demás partes, y por eso las cláusulas de compra europea en el derecho de contratación de la UE resultan jurídicamente incómodas.","grading":"verified","not_tested":"The GPA binds only listed entities above value thresholds; below-threshold purchases, defence carve-outs and non-covered sectors remain open to national preferences.","not_tested_es":"El ACP vincula solo a las entidades listadas por encima de umbrales de valor; las compras por debajo del umbral, las excepciones de defensa y los sectores no cubiertos siguen abiertos a preferencias nacionales.","sources":[{"label":"WTO, Agreement on Government Procurement overview","url":"https://www.wto.org/english/tratop_e/gproc_e/gp_gpa_e.htm","accessed":"2026-08-19"},{"label":"WTO, GPA parties, observers and accessions","url":"https://www.wto.org/english/tratop_e/gproc_e/memobs_e.htm","accessed":"2026-08-19"}],"related":["procurement-revision-consultation-2026"],"proposed":false},{"id":"eprivacy-directive-adoption-2002","date":"2002-07-12","date_precision":"day","instrument":"ePrivacy Directive (Dir 2002/58/EC)","instrument_short":"ePrivacy Directive","area":"policy-law","type":"adoption","title_en":"ePrivacy Directive adopted","title_es":"Adoptada la Directiva sobre la privacidad y las comunicaciones electrónicas","summary_en":"Directive 2002/58/EC was adopted on 12 July 2002 and published in OJ L 201 of 31 July 2002. It set privacy rules for the electronic communications sector, including confidentiality of communications and traffic data, as a lex specialis to Directive 95/46/EC.","summary_es":"La Directiva 2002/58/CE se adoptó el 12 de julio de 2002 y se publicó en el DO L 201 de 31 de julio de 2002. Fijó las normas de privacidad del sector de las comunicaciones electrónicas, incluida la confidencialidad de las comunicaciones y de los datos de tráfico, como lex specialis respecto de la Directiva 95/46/CE.","grading":"verified","not_tested":"Directive 2002/58/EC binds providers in the electronic communications sector and leaves general personal data processing to the horizontal data protection rules.","not_tested_es":"La Directiva 2002/58/CE vincula a los proveedores del sector de las comunicaciones electrónicas y deja el tratamiento general de datos personales a las normas horizontales de protección de datos.","sources":[{"label":"Publications Office of the EU, Directive 2002/58/EC (CELEX 32002L0058)","url":"http://publications.europa.eu/resource/celex/32002L0058","accessed":"2026-08-19"}],"related":["eprivacy-directive-amendment-2009","eprivacy-regulation-proposal-2017"],"proposed":false},{"id":"eprivacy-directive-amendment-2009","date":"2009-11-25","date_precision":"day","instrument":"ePrivacy Directive (Dir 2002/58/EC), amended by Dir 2009/136/EC","instrument_short":"ePrivacy Directive","area":"policy-law","type":"amendment","title_en":"Cookie consent amendment to the ePrivacy Directive adopted","title_es":"Adoptada la modificación que introduce el consentimiento de cookies en la Directiva 2002/58/CE","summary_en":"Directive 2009/136/EC of 25 November 2009 amended Directive 2002/58/EC. Its point 5 replaced Article 5(3), which since then permits storing information, or gaining access to information already stored, in a user's terminal equipment only with informed consent: the basis of EU cookie consent practice.","summary_es":"La Directiva 2009/136/CE, de 25 de noviembre de 2009, modificó la Directiva 2002/58/CE. Su punto 5 sustituyó el artículo 5, apartado 3, que desde entonces solo permite almacenar información, o acceder a información ya almacenada, en el equipo terminal de un usuario con consentimiento informado: la base de la práctica europea del consentimiento de cookies.","grading":"verified","not_tested":"Article 5(3) binds storing of and access to information on terminal equipment and leaves the content of online services regulated elsewhere.","not_tested_es":"El artículo 5, apartado 3, vincula el almacenamiento de información y el acceso a la información en el equipo terminal, y deja el contenido de los servicios en línea regulado en otras normas.","sources":[{"label":"Publications Office of the EU, Directive 2009/136/EC (CELEX 32009L0136)","url":"http://publications.europa.eu/resource/celex/32009L0136","accessed":"2026-08-19"}],"related":["eprivacy-directive-adoption-2002","digital-omnibus-gdpr-proposal-2025"],"proposed":false},{"id":"vis-operational-2011","date":"2011-10-11","date_precision":"day","instrument":"Visa Information System (Reg 767/2008)","instrument_short":"VIS","area":"policy-law","type":"application","title_en":"Visa Information System starts operations","title_es":"El Sistema de Información de Visados entra en funcionamiento","summary_en":"The VIS started operations on 11 October 2011 under Regulation 767/2008, recording short-stay visa applications with fingerprints and facial images. Deployment then proceeded region by region until February 2016.","summary_es":"El VIS entró en funcionamiento el 11 de octubre de 2011 con arreglo al Reglamento 767/2008, registrando las solicitudes de visados de corta duración con impresiones dactilares e imágenes faciales. El despliegue avanzó después región por región hasta febrero de 2016.","grading":"verified","not_tested":"The 2011 start covered only the first consular rollout region; the VIS did not reach worldwide coverage of Schengen consulates until February 2016.","not_tested_es":"El arranque de 2011 cubrió solo la primera región consular del despliegue; el VIS no alcanzó la cobertura mundial de los consulados Schengen hasta febrero de 2016.","sources":[{"label":"European Commission press release IP/11/1169, More efficient and secure visa system goes live","url":"https://ec.europa.eu/commission/presscorner/detail/en/ip_11_1169","accessed":"2026-08-19"},{"label":"eu-LISA, Report on the technical functioning of the VIS (2019)","url":"https://www.eulisa.europa.eu/sites/default/files/documents/2019%20VIS%20Report.pdf","accessed":"2026-08-19"}],"related":[],"proposed":false},{"id":"gdpr-proposal-2012","date":"2012-01-25","date_precision":"day","instrument":"GDPR (Reg 2016/679)","instrument_short":"GDPR","area":"policy-law","type":"proposal","title_en":"Commission proposes the General Data Protection Regulation","title_es":"La Comisión propone el Reglamento General de Protección de Datos","summary_en":"The European Commission tabled COM(2012) 11 final in Brussels on 25 January 2012, a proposal for a General Data Protection Regulation to replace Directive 95/46/EC. The proposal opened procedure 2012/0011(COD).","summary_es":"La Comisión Europea presentó en Bruselas, el 25 de enero de 2012, el COM(2012) 11 final, una propuesta de Reglamento General de Protección de Datos llamado a sustituir la Directiva 95/46/CE. La propuesta abrió el procedimiento 2012/0011(COD).","grading":"verified","not_tested":"The 2012 proposal bound nobody; Directive 95/46/EC continued to govern personal data processing until 25 May 2018.","not_tested_es":"La propuesta de 2012 no vinculaba a nadie; la Directiva 95/46/CE siguió rigiendo el tratamiento de datos personales hasta el 25 de mayo de 2018.","sources":[{"label":"Publications Office of the EU, COM(2012) 11 final (CELEX 52012PC0011)","url":"http://publications.europa.eu/resource/celex/52012PC0011","accessed":"2026-08-19"}],"related":["gdpr-adoption-2016","gdpr-application-2018"],"proposed":false},{"id":"crr-crdiv-application-2014","date":"2014-01-01","date_precision":"day","instrument":"Capital Requirements Regulation (Reg 575/2013) and CRD IV (Dir 2013/36)","instrument_short":"CRR/CRD IV","area":"policy-law","type":"application","title_en":"CRR applies; CRD IV single rulebook takes effect","title_es":"Se aplica el CRR; el código normativo único de la CRD IV surte efecto","summary_en":"Regulation 575/2013 (CRR) applied from 1 January 2014, alongside national transposition of Directive 2013/36/EU (CRD IV), bringing the Basel III single rulebook for bank capital into effect.","summary_es":"El Reglamento 575/2013 (CRR) se aplicó desde el 1 de enero de 2014, junto con la transposición nacional de la Directiva 2013/36/UE (CRD IV), haciendo efectivo el código normativo único de Basilea III para el capital bancario.","grading":"verified","not_tested":"Binds bank capital, liquidity and reporting; it does not classify AI systems, and AI Act high-risk duties for banks arrive through separate creditworthiness use cases.","not_tested_es":"Vincula el capital, la liquidez y la información de los bancos; no clasifica sistemas de IA, y los deberes de alto riesgo del Reglamento de IA para la banca llegan por los casos de uso de solvencia crediticia, que son separados.","sources":[{"label":"Publications Office of the EU, Regulation (EU) No 575/2013, Article 521 (CELEX 32013R0575)","url":"http://publications.europa.eu/resource/celex/32013R0575","accessed":"2026-08-19"}],"related":["ssm-application-2014"],"proposed":false},{"id":"ssm-application-2014","date":"2014-11-04","date_precision":"day","instrument":"SSM Regulation (Council Reg 1024/2013)","instrument_short":"SSM","area":"policy-law","type":"application","title_en":"ECB assumes bank supervision under the SSM Regulation","title_es":"El BCE asume la supervisión bancaria bajo el Reglamento del MUS","summary_en":"Under Council Regulation 1024/2013 of 15 October 2013 the ECB assumed direct prudential supervision of significant euro area banks on 4 November 2014, the start date fixed in Article 33(2).","summary_es":"En virtud del Reglamento (UE) n.º 1024/2013 del Consejo, de 15 de octubre de 2013, el BCE asumió el 4 de noviembre de 2014 la supervisión prudencial directa de los bancos significativos de la zona del euro, la fecha de inicio fijada en el artículo 33, apartado 2.","grading":"verified","not_tested":"Allocates supervisory competence over euro area banks to the ECB; it sets no product conformity regime and does not itself regulate the AI model.","not_tested_es":"Atribuye al BCE la competencia supervisora sobre los bancos de la zona del euro; no establece ningún régimen de conformidad de producto y no regula por sí mismo el modelo de IA.","sources":[{"label":"Publications Office of the EU, Council Regulation (EU) No 1024/2013, Article 33 (CELEX 32013R1024)","url":"http://publications.europa.eu/resource/celex/32013R1024","accessed":"2026-08-19"}],"related":["crr-crdiv-application-2014"],"proposed":false},{"id":"solvency2-application-2016","date":"2016-01-01","date_precision":"day","instrument":"Solvency II (Dir 2009/138)","instrument_short":"Solvency II","area":"policy-law","type":"application","title_en":"Solvency II applies after postponement to 2016","title_es":"Solvencia II se aplica tras el aplazamiento a 2016","summary_en":"Directive 2009/138/EC (Solvency II) applied from 1 January 2016. Directive 2013/58/EU moved transposition to 31 March 2015 and shifted the application date from 1 January 2014 to 1 January 2016.","summary_es":"La Directiva 2009/138/CE (Solvencia II) se aplicó desde el 1 de enero de 2016. La Directiva 2013/58/UE trasladó la transposición al 31 de marzo de 2015 y desplazó la fecha de aplicación del 1 de enero de 2014 al 1 de enero de 2016.","grading":"verified","not_tested":"Binds insurers' capital, governance and reporting; it is no Annex I conformity regime under the AI Act and does not itself regulate the AI model.","not_tested_es":"Vincula el capital, la gobernanza y la información de las aseguradoras; no es un régimen de conformidad del anexo I del Reglamento de IA y no regula por sí misma el modelo de IA.","sources":[{"label":"Publications Office of the EU, Directive 2013/58/EU amending Solvency II (CELEX 32013L0058)","url":"http://publications.europa.eu/resource/celex/32013L0058","accessed":"2026-08-19"}],"related":["idd-application-2018"],"proposed":false},{"id":"gdpr-adoption-2016","date":"2016-04-27","date_precision":"day","instrument":"GDPR (Reg 2016/679)","instrument_short":"GDPR","area":"policy-law","type":"adoption","title_en":"GDPR adopted by Parliament and Council","title_es":"El Parlamento y el Consejo adoptan el RGPD","summary_en":"The European Parliament and the Council adopted Regulation (EU) 2016/679 on 27 April 2016. Under Article 99 it entered into force on the twentieth day after publication in the Official Journal, with application deferred to 25 May 2018.","summary_es":"El Parlamento Europeo y el Consejo adoptaron el Reglamento (UE) 2016/679 el 27 de abril de 2016. Conforme a su artículo 99, entró en vigor a los veinte días de su publicación en el Diario Oficial, con la aplicación diferida al 25 de mayo de 2018.","grading":"verified","not_tested":"Adoption on 27 April 2016 created no enforceable obligations, because Article 99 deferred application to 25 May 2018.","not_tested_es":"La adopción del 27 de abril de 2016 no creó obligaciones exigibles, porque el artículo 99 difirió la aplicación al 25 de mayo de 2018.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2016/679 (CELEX 32016R0679)","url":"http://publications.europa.eu/resource/celex/32016R0679","accessed":"2026-08-19"}],"related":["gdpr-proposal-2012","gdpr-application-2018","led-adoption-2016"],"proposed":false},{"id":"led-adoption-2016","date":"2016-04-27","date_precision":"day","instrument":"Law Enforcement Directive (Dir 2016/680)","instrument_short":"LED","area":"policy-law","type":"adoption","title_en":"Law Enforcement Directive adopted alongside the GDPR","title_es":"Adoptada junto al RGPD la Directiva sobre datos en el ámbito penal","summary_en":"Directive (EU) 2016/680 was adopted on 27 April 2016, the same day as the GDPR. It covers processing of personal data by competent authorities for the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties.","summary_es":"La Directiva (UE) 2016/680 se adoptó el 27 de abril de 2016, el mismo día que el RGPD. Cubre el tratamiento de datos personales por las autoridades competentes con fines de prevención, investigación, detección o enjuiciamiento de infracciones penales o de ejecución de sanciones penales.","grading":"verified","not_tested":"Directive 2016/680 covers processing by competent authorities for criminal law enforcement purposes and leaves general commercial processing to the GDPR.","not_tested_es":"La Directiva 2016/680 cubre el tratamiento por autoridades competentes con fines penales y deja el tratamiento comercial general al RGPD.","sources":[{"label":"Publications Office of the EU, Directive (EU) 2016/680 (CELEX 32016L0680)","url":"http://publications.europa.eu/resource/celex/32016L0680","accessed":"2026-08-19"}],"related":["gdpr-adoption-2016","led-transposition-2018"],"proposed":false},{"id":"eprivacy-regulation-proposal-2017","date":"2017-01-10","date_precision":"day","instrument":"ePrivacy Regulation (proposal COM(2017) 10)","instrument_short":"ePrivacy Regulation","area":"policy-law","type":"proposal","title_en":"Commission proposes the ePrivacy Regulation","title_es":"La Comisión propone el Reglamento sobre la privacidad y las comunicaciones electrónicas","summary_en":"The Commission tabled COM(2017) 10 final on 10 January 2017, a proposed Regulation on Privacy and Electronic Communications intended to repeal Directive 2002/58/EC and complement the GDPR. It opened procedure 2017/0003(COD).","summary_es":"La Comisión presentó el 10 de enero de 2017 el COM(2017) 10 final, una propuesta de Reglamento sobre la privacidad y las comunicaciones electrónicas destinada a derogar la Directiva 2002/58/CE y a complementar el RGPD. Abrió el procedimiento 2017/0003(COD).","grading":"verified","not_tested":"The proposal never became law; providers remained bound by Directive 2002/58/EC as transposed nationally throughout the negotiations.","not_tested_es":"La propuesta nunca llegó a ser ley; los proveedores siguieron vinculados por la Directiva 2002/58/CE, tal como fue transpuesta nacionalmente, durante toda la negociación.","sources":[{"label":"Publications Office of the EU, COM(2017) 10 final (CELEX 52017PC0010)","url":"http://publications.europa.eu/resource/celex/52017PC0010","accessed":"2026-08-19"}],"related":["eprivacy-directive-adoption-2002","eprivacy-regulation-withdrawal-2025"],"proposed":false},{"id":"led-transposition-2018","date":"2018-05-06","date_precision":"day","instrument":"Law Enforcement Directive (Dir 2016/680)","instrument_short":"LED","area":"policy-law","type":"application","title_en":"Transposition deadline for the Law Enforcement Directive","title_es":"Plazo de transposición de la Directiva sobre datos en el ámbito penal","summary_en":"Article 63(1) of Directive (EU) 2016/680 required Member States to adopt and publish the laws needed to comply by 6 May 2018, and to apply those provisions from 6 May 2018.","summary_es":"El artículo 63, apartado 1, de la Directiva (UE) 2016/680 exigía a los Estados miembros adoptar y publicar las disposiciones necesarias para cumplirla a más tardar el 6 de mayo de 2018, y aplicarlas desde esa misma fecha.","grading":"verified","not_tested":"The 6 May 2018 deadline bound Member State legislators; a directive imposes no directly applicable obligations on private parties.","not_tested_es":"El plazo del 6 de mayo de 2018 vinculaba a los legisladores de los Estados miembros; una directiva no impone obligaciones directamente aplicables a los particulares.","sources":[{"label":"Publications Office of the EU, Directive (EU) 2016/680, Article 63 (CELEX 32016L0680)","url":"http://publications.europa.eu/resource/celex/32016L0680","accessed":"2026-08-19"}],"related":["led-adoption-2016","gdpr-application-2018"],"proposed":false},{"id":"gdpr-application-2018","date":"2018-05-25","date_precision":"day","instrument":"GDPR (Reg 2016/679)","instrument_short":"GDPR","area":"policy-law","type":"application","title_en":"GDPR becomes applicable across the EU","title_es":"El RGPD pasa a ser aplicable en toda la UE","summary_en":"Regulation (EU) 2016/679 applied from 25 May 2018 under Article 99(2), repealing Directive 95/46/EC and binding controllers and processors directly in all Member States.","summary_es":"El Reglamento (UE) 2016/679 se aplicó desde el 25 de mayo de 2018 conforme a su artículo 99, apartado 2, derogando la Directiva 95/46/CE y vinculando directamente a responsables y encargados del tratamiento en todos los Estados miembros.","grading":"verified","not_tested":"The GDPR governs personal data and leaves anonymised data and non-personal industrial data outside its reach.","not_tested_es":"El RGPD rige los datos personales y deja fuera de su alcance los datos anonimizados y los datos industriales no personales.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2016/679, Article 99 (CELEX 32016R0679)","url":"http://publications.europa.eu/resource/celex/32016R0679","accessed":"2026-08-19"}],"related":["gdpr-adoption-2016","led-transposition-2018","digital-omnibus-gdpr-proposal-2025"],"proposed":false},{"id":"etias-adopted-2018","date":"2018-09-12","date_precision":"day","instrument":"European Travel Information and Authorisation System (Reg 2018/1240)","instrument_short":"ETIAS","area":"policy-law","type":"adoption","title_en":"ETIAS Regulation adopted","title_es":"Adoptado el Reglamento ETIAS","summary_en":"Regulation 2018/1240 establishing ETIAS was adopted on 12 September 2018. Once live, it will require visa-exempt travellers to obtain a travel authorisation before entering the Schengen area.","summary_es":"El Reglamento 2018/1240, por el que se crea el ETIAS, se adoptó el 12 de septiembre de 2018. Cuando entre en servicio, exigirá a los viajeros exentos de visado obtener una autorización de viaje antes de entrar en el espacio Schengen.","grading":"verified","not_tested":"Adoption in September 2018 fixed no launch date; the regulation binds no traveller until the Commission sets a start of operations, which had still not happened by August 2026.","not_tested_es":"La adopción en septiembre de 2018 no fijó ninguna fecha de puesta en marcha; el reglamento no vincula a ningún viajero hasta que la Comisión fije el inicio de operaciones, algo que en agosto de 2026 seguía sin ocurrir.","sources":[{"label":"European Commission, Migration and Home Affairs, European Travel Information and Authorisation System policy page","url":"https://home-affairs.ec.europa.eu/policies/schengen-borders-and-visa/smart-borders/european-travel-information-authorisation-system_en","accessed":"2026-08-19"}],"related":["etias-delay-2026"],"proposed":false},{"id":"idd-application-2018","date":"2018-10-01","date_precision":"day","instrument":"Insurance Distribution Directive (Dir 2016/97)","instrument_short":"IDD","area":"policy-law","type":"application","title_en":"IDD applies after postponement to 1 October 2018","title_es":"La IDD se aplica tras el aplazamiento al 1 de octubre de 2018","summary_en":"Directive 2016/97 on insurance distribution applied from 1 October 2018. Directive (EU) 2018/411 postponed the application date from 23 February 2018 and moved transposition to 1 July 2018.","summary_es":"La Directiva 2016/97 sobre la distribución de seguros se aplicó desde el 1 de octubre de 2018. La Directiva (UE) 2018/411 aplazó la fecha de aplicación, fijada antes en el 23 de febrero de 2018, y trasladó la transposición al 1 de julio de 2018.","grading":"verified","not_tested":"Binds insurance sales conduct and product oversight; it certifies no products and does not itself regulate the AI model.","not_tested_es":"Vincula la conducta de venta de seguros y la vigilancia de productos; no certifica productos y no regula por sí misma el modelo de IA.","sources":[{"label":"Publications Office of the EU, Directive (EU) 2018/411 amending the IDD (CELEX 32018L0411)","url":"http://publications.europa.eu/resource/celex/32018L0411","accessed":"2026-08-19"}],"related":["solvency2-application-2016"],"proposed":false},{"id":"reg-2018-1725-adoption-2018","date":"2018-10-23","date_precision":"day","instrument":"Regulation (EU) 2018/1725 (data protection in EU institutions)","instrument_short":"Reg 2018/1725","area":"policy-law","type":"adoption","title_en":"Reg 2018/1725 adopted for EU institutions and bodies","title_es":"Adoptado el Reglamento 2018/1725 para las instituciones y organismos de la UE","summary_en":"Regulation (EU) 2018/1725 was adopted on 23 October 2018, aligning the data protection regime for Union institutions, bodies, offices and agencies with the GDPR and repealing Regulation (EC) No 45/2001. Under Article 101 it entered into force on the twentieth day after publication in the Official Journal.","summary_es":"El Reglamento (UE) 2018/1725 se adoptó el 23 de octubre de 2018, alineando con el RGPD el régimen de protección de datos de las instituciones, órganos y organismos de la Unión y derogando el Reglamento (CE) n.º 45/2001. Conforme a su artículo 101, entró en vigor a los veinte días de su publicación en el Diario Oficial.","grading":"verified","not_tested":"Regulation 2018/1725 binds Union institutions, bodies, offices and agencies only; national authorities and companies stay under the GDPR or Directive 2016/680.","not_tested_es":"El Reglamento 2018/1725 vincula únicamente a las instituciones, órganos y organismos de la Unión; las autoridades nacionales y las empresas siguen bajo el RGPD o la Directiva 2016/680.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2018/1725 (CELEX 32018R1725)","url":"http://publications.europa.eu/resource/celex/32018R1725","accessed":"2026-08-19"}],"related":["gdpr-application-2018"],"proposed":false},{"id":"cybersecurity-act-adoption-2019","date":"2019-04-17","date_precision":"day","instrument":"Regulation (EU) 2019/881 on ENISA and on ICT cybersecurity certification (Cybersecurity Act)","instrument_short":"Cybersecurity Act","area":"policy-law","type":"adoption","title_en":"Cybersecurity Act adopted, creating EU certification framework","title_es":"Adoptado el Reglamento de Ciberseguridad, que crea el marco europeo de certificación","summary_en":"The European Parliament and the Council signed Regulation (EU) 2019/881 at Strasbourg on 17 April 2019. It gives ENISA a permanent mandate and establishes the European cybersecurity certification framework under which candidate schemes such as EUCS are prepared.","summary_es":"El Parlamento Europeo y el Consejo firmaron el Reglamento (UE) 2019/881 en Estrasburgo el 17 de abril de 2019. Da a ENISA un mandato permanente y establece el marco europeo de certificación de la ciberseguridad bajo el cual se preparan esquemas candidatos como el EUCS.","grading":"verified","not_tested":"The framework it creates is voluntary, so no provider must certify and no buyer must demand a certificate.","not_tested_es":"El marco que crea es voluntario, así que ningún proveedor está obligado a certificarse y ningún comprador está obligado a exigir un certificado.","sources":[{"label":"Publications Office of the EU, full text of Regulation (EU) 2019/881 (CELEX 32019R0881)","url":"https://publications.europa.eu/resource/celex/32019R0881","accessed":"2026-08-19"}],"related":["cybersecurity-act-entry-into-force-2019","eucs-candidate-scheme-2020"],"proposed":false},{"id":"cybersecurity-act-entry-into-force-2019","date":"2019-06-27","date_precision":"day","instrument":"Regulation (EU) 2019/881 on ENISA and on ICT cybersecurity certification (Cybersecurity Act)","instrument_short":"Cybersecurity Act","area":"policy-law","type":"entry-into-force","title_en":"Cybersecurity Act enters into force","title_es":"El Reglamento de Ciberseguridad entra en vigor","summary_en":"Published in Official Journal L 151 on 7 June 2019, Regulation (EU) 2019/881 entered into force on the twentieth day after publication, 27 June 2019. Under Article 69(2), Articles 58, 60, 61, 63, 64 and 65 applied from 28 June 2021.","summary_es":"Publicado en el Diario Oficial L 151 de 7 de junio de 2019, el Reglamento (UE) 2019/881 entró en vigor a los veinte días de su publicación, el 27 de junio de 2019. Conforme al artículo 69, apartado 2, los artículos 58, 60, 61, 63, 64 y 65 se aplicaron desde el 28 de junio de 2021.","grading":"verified","not_tested":"Entry into force armed the legal basis only; without a scheme adopted by implementing act, nothing could yet be certified.","not_tested_es":"La entrada en vigor armó solo la base jurídica; sin un esquema adoptado por acto de ejecución, todavía no podía certificarse nada.","sources":[{"label":"Publications Office of the EU, full text of Regulation (EU) 2019/881 (CELEX 32019R0881, OJ L 151, 7.6.2019)","url":"https://publications.europa.eu/resource/celex/32019R0881","accessed":"2026-08-19"}],"related":["cybersecurity-act-adoption-2019","eucs-candidate-scheme-2020"],"proposed":false},{"id":"dma-proposal-2020","date":"2020-12-15","date_precision":"day","instrument":"Digital Markets Act (Reg 2022/1925)","instrument_short":"DMA","area":"policy-law","type":"proposal","title_en":"Commission proposes the Digital Markets Act","title_es":"La Comisión propone la Ley de Mercados Digitales","summary_en":"The Commission tabled COM(2020) 842 final, a proposal for a Regulation on contestable and fair markets in the digital sector (Digital Markets Act), in Brussels on 15 December 2020. It formed one package with the Digital Services Act proposal presented the same day.","summary_es":"La Comisión presentó en Bruselas, el 15 de diciembre de 2020, el COM(2020) 842 final, una propuesta de Reglamento sobre mercados disputables y equitativos en el sector digital (Ley de Mercados Digitales). Formó un solo paquete con la propuesta de Ley de Servicios Digitales presentada el mismo día.","grading":"verified","not_tested":"The proposal bound nobody; conduct by large platforms remained subject only to case-by-case competition enforcement under Articles 101 and 102 TFEU.","not_tested_es":"La propuesta no vinculaba a nadie; la conducta de las grandes plataformas siguió sujeta únicamente a la aplicación caso por caso del derecho de la competencia bajo los artículos 101 y 102 del TFUE.","sources":[{"label":"Publications Office of the EU, COM(2020) 842 final (CELEX 52020PC0842)","url":"http://publications.europa.eu/resource/celex/52020PC0842","accessed":"2026-08-19"}],"related":["dsa-proposal-2020","dma-adoption-2022"],"proposed":false},{"id":"dsa-proposal-2020","date":"2020-12-15","date_precision":"day","instrument":"Digital Services Act (Reg 2022/2065)","instrument_short":"DSA","area":"policy-law","type":"proposal","title_en":"Commission proposes the Digital Services Act","title_es":"La Comisión propone la Ley de Servicios Digitales","summary_en":"The Commission tabled COM(2020) 825 final, a proposal for a Regulation on a Single Market for Digital Services (Digital Services Act) amending Directive 2000/31/EC. It was presented in Brussels on 15 December 2020 as part of one package with the Digital Markets Act proposal.","summary_es":"La Comisión presentó el COM(2020) 825 final, una propuesta de Reglamento relativo a un mercado único de servicios digitales (Ley de Servicios Digitales) que modifica la Directiva 2000/31/CE. Se presentó en Bruselas el 15 de diciembre de 2020 como parte de un solo paquete con la propuesta de Ley de Mercados Digitales.","grading":"verified","not_tested":"The proposal bound nobody; intermediaries continued to operate under the liability regime of Directive 2000/31/EC until the final act applied.","not_tested_es":"La propuesta no vinculaba a nadie; los intermediarios siguieron operando bajo el régimen de responsabilidad de la Directiva 2000/31/CE hasta que el acto final se aplicó.","sources":[{"label":"Publications Office of the EU, COM(2020) 825 final (CELEX 52020PC0825)","url":"http://publications.europa.eu/resource/celex/52020PC0825","accessed":"2026-08-19"}],"related":["dma-proposal-2020","dsa-adoption-2022"],"proposed":false},{"id":"eucs-candidate-scheme-2020","date":"2020-12-22","date_precision":"day","instrument":"EUCS, candidate European Cybersecurity Certification Scheme for Cloud Services under Regulation (EU) 2019/881","instrument_short":"EUCS","area":"policy-law","type":"proposal","title_en":"ENISA publishes draft EUCS candidate scheme for consultation","title_es":"ENISA publica a consulta el borrador del esquema candidato EUCS","summary_en":"ENISA published its draft candidate cybersecurity certification scheme for cloud services, prepared under the Cybersecurity Act, and opened a public consultation running from 22 December 2020 to 7 February 2021. The first draft set three assurance levels (basic, substantial, high) and demanded transparency about data location and applicable law rather than localisation or ownership requirements.","summary_es":"ENISA publicó su borrador de esquema candidato de certificación de ciberseguridad para servicios en la nube, preparado bajo el Reglamento de Ciberseguridad, y abrió una consulta pública del 22 de diciembre de 2020 al 7 de febrero de 2021. El primer borrador fijaba tres niveles de garantía (básico, sustancial, alto) y exigía transparencia sobre la ubicación de los datos y el derecho aplicable, no requisitos de localización ni de propiedad.","grading":"verified","not_tested":"A candidate text confers no certificates: nothing can be certified until the Commission adopts the scheme by implementing act.","not_tested_es":"Un texto candidato no confiere certificados: nada puede certificarse hasta que la Comisión adopte el esquema por acto de ejecución.","sources":[{"label":"ENISA, EUCS Cloud Services Scheme publication page (22 December 2020)","url":"https://www.enisa.europa.eu/publications/eucs-cloud-service-scheme","accessed":"2026-08-19"}],"related":["cybersecurity-act-adoption-2019","cybersecurity-act-entry-into-force-2019","eucs-sovereignty-criteria-2023","eucs-sovereignty-criteria-dropped-2024","eucs-stalled-2026","cada-proposal-2026"],"proposed":false},{"id":"ai-act-proposal-2021","date":"2021-04-21","date_precision":"day","instrument":"AI Act (Reg 2024/1689; proposed as COM(2021) 206)","instrument_short":"AI Act","area":"policy-law","type":"proposal","title_en":"Commission tables AI Act proposal COM(2021) 206","title_es":"La Comisión presenta la propuesta del Reglamento de IA, COM(2021) 206","summary_en":"The Commission tabled COM(2021) 206 final in Brussels on 21 April 2021: a proposal for a regulation laying down harmonised rules on artificial intelligence, opening procedure 2021/0106(COD).","summary_es":"La Comisión presentó en Bruselas, el 21 de abril de 2021, el COM(2021) 206 final: una propuesta de reglamento por el que se establecen normas armonizadas en materia de inteligencia artificial, abriendo el procedimiento 2021/0106(COD).","grading":"verified","not_tested":"A proposal binds no one; providers and deployers faced no obligations until adoption in 2024 and the staged application dates from 2025.","not_tested_es":"Una propuesta no vincula a nadie; proveedores y responsables del despliegue no afrontaron obligaciones hasta la adopción en 2024 y las fechas de aplicación escalonadas desde 2025.","sources":[{"label":"Publications Office (CELLAR), COM(2021) 206 final","url":"http://publications.europa.eu/resource/celex/52021PC0206","accessed":"2026-08-19"}],"related":["ai-act-political-agreement-2023","ai-act-adoption-2024"],"proposed":false},{"id":"mdr-application-2021","date":"2021-05-26","date_precision":"day","instrument":"Medical Device Regulation (Reg 2017/745)","instrument_short":"MDR","area":"policy-law","type":"application","title_en":"MDR applies after a one year Covid delay","title_es":"El MDR se aplica tras un año de retraso por la covid","summary_en":"Regulation 2017/745 became applicable on 26 May 2021, one year later than planned. Regulation (EU) 2020/561 of 23 April 2020 postponed the date from 26 May 2020 because of the Covid-19 pandemic.","summary_es":"El Reglamento 2017/745 pasó a ser aplicable el 26 de mayo de 2021, un año más tarde de lo previsto. El Reglamento (UE) 2020/561, de 23 de abril de 2020, aplazó la fecha desde el 26 de mayo de 2020 a causa de la pandemia de covid-19.","grading":"verified","not_tested":"A sector conformity regime the AI Act plugs into for high-risk classification of device software; the MDR application date does not itself regulate the AI model.","not_tested_es":"Un régimen sectorial de conformidad al que el Reglamento de IA se conecta para la clasificación de alto riesgo del software de dispositivos; la fecha de aplicación del MDR no regula por sí misma el modelo de IA.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2020/561 (CELEX 32020R0561)","url":"http://publications.europa.eu/resource/celex/32020R0561","accessed":"2026-08-19"}],"related":["ivdr-application-2022","msr-application-2021"],"proposed":false},{"id":"eurohpc-regulation-adoption-2021","date":"2021-07-13","date_precision":"day","instrument":"EuroHPC Joint Undertaking Regulation (Council Reg 2021/1173)","instrument_short":"EuroHPC Regulation","area":"compute-infra","type":"adoption","title_en":"Council adopts EuroHPC Joint Undertaking regulation","title_es":"El Consejo adopta el reglamento de la Empresa Común EuroHPC","summary_en":"The Council adopted Regulation (EU) 2021/1173 at Brussels on 13 July 2021, re-establishing the European High Performance Computing Joint Undertaking for the 2021 to 2033 period and repealing Regulation (EU) 2018/1488. It pools EU, member state and private funding to procure and operate supercomputers.","summary_es":"El Consejo adoptó el Reglamento (UE) 2021/1173 en Bruselas el 13 de julio de 2021, restableciendo la Empresa Común de Informática de Alto Rendimiento Europea para el periodo 2021 a 2033 y derogando el Reglamento (UE) 2018/1488. Reúne financiación de la UE, de los Estados miembros y privada para adquirir y operar superordenadores.","grading":"verified","not_tested":"The regulation pools money to buy and host supercomputers; it does not require the processors or accelerators inside those machines to be European.","not_tested_es":"El reglamento reúne dinero para comprar y alojar superordenadores; no exige que los procesadores o aceleradores dentro de esas máquinas sean europeos.","sources":[{"label":"Publications Office Cellar, Council Regulation (EU) 2021/1173, CELEX 32021R1173","url":"https://publications.europa.eu/resource/celex/32021R1173","accessed":"2026-08-19"}],"related":["eurohpc-ai-factories-amendment-2024"],"proposed":false},{"id":"msr-application-2021","date":"2021-07-16","date_precision":"day","instrument":"Market Surveillance Regulation (Reg 2019/1020)","instrument_short":"MSR","area":"policy-law","type":"application","title_en":"Market Surveillance Regulation becomes applicable","title_es":"El Reglamento de Vigilancia del Mercado pasa a ser aplicable","summary_en":"Regulation 2019/1020 on market surveillance and compliance of products became applicable on 16 July 2021, with Articles 29 to 33 and 36 applying from 1 January 2021.","summary_es":"El Reglamento 2019/1020, relativo a la vigilancia del mercado y la conformidad de los productos, pasó a ser aplicable el 16 de julio de 2021, con los artículos 29 a 33 y 36 aplicándose desde el 1 de enero de 2021.","grading":"verified","not_tested":"Governs enforcement infrastructure for harmonised products; it creates no product requirements of its own and does not itself regulate the AI model.","not_tested_es":"Rige la infraestructura de ejecución para los productos armonizados; no crea requisitos de producto propios y no regula por sí mismo el modelo de IA.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2019/1020 (CELEX 32019R1020)","url":"http://publications.europa.eu/resource/celex/32019R1020","accessed":"2026-08-19"}],"related":["mdr-application-2021","ivdr-application-2022","machinery-regulation-adoption-2023"],"proposed":false},{"id":"whistleblower-transposition-2021","date":"2021-12-17","date_precision":"day","instrument":"Whistleblower Directive (Dir 2019/1937)","instrument_short":"Whistleblower Dir","area":"policy-law","type":"application","title_en":"Whistleblower Directive transposition deadline","title_es":"Plazo de transposición de la Directiva de protección del denunciante","summary_en":"Member States had to transpose Directive 2019/1937 of 23 October 2019 on the protection of persons reporting breaches of Union law by 17 December 2021; private entities with 50 to 249 workers had until 17 December 2023.","summary_es":"Los Estados miembros debían transponer la Directiva 2019/1937, de 23 de octubre de 2019, relativa a la protección de las personas que informen sobre infracciones del Derecho de la Unión, a más tardar el 17 de diciembre de 2021; las entidades privadas de 50 a 249 trabajadores tuvieron hasta el 17 de diciembre de 2023.","grading":"verified","not_tested":"Obliges Member States to protect reporting persons; it imposes no product conformity regime and does not itself regulate the AI model.","not_tested_es":"Obliga a los Estados miembros a proteger a las personas informantes; no impone ningún régimen de conformidad de producto y no regula por sí misma el modelo de IA.","sources":[{"label":"Publications Office of the EU, Directive (EU) 2019/1937, Article 26 (CELEX 32019L1937)","url":"http://publications.europa.eu/resource/celex/32019L1937","accessed":"2026-08-19"}],"related":[],"proposed":false},{"id":"chips-act-proposal-2022","date":"2022-02-08","date_precision":"day","instrument":"European Chips Act (Reg 2023/1781)","instrument_short":"Chips Act","area":"industry","type":"proposal","title_en":"Commission proposes the European Chips Act","title_es":"La Comisión propone la Ley Europea de Chips","summary_en":"The Commission tabled COM(2022) 46 final in Brussels on 8 February 2022, proposing a regulation to strengthen Europe's semiconductor ecosystem. The proposal opened procedure 2022/0032(COD) and framed the target of doubling the EU's share of world chip production by 2030.","summary_es":"La Comisión presentó en Bruselas, el 8 de febrero de 2022, el COM(2022) 46 final, proponiendo un reglamento para reforzar el ecosistema europeo de semiconductores. La propuesta abrió el procedimiento 2022/0032(COD) y enmarcó el objetivo de duplicar la cuota de la UE en la producción mundial de chips para 2030.","grading":"verified","not_tested":"A proposal binds nobody; it opens the ordinary legislative procedure and moves no public money until the co-legislators adopt the text.","not_tested_es":"Una propuesta no vincula a nadie; abre el procedimiento legislativo ordinario y no mueve dinero público hasta que los colegisladores adoptan el texto.","sources":[{"label":"Publications Office Cellar, COM(2022) 46 final (Chips Act proposal)","url":"http://publications.europa.eu/resource/cellar/ca05000a-89d4-11ec-8c40-01aa75ed71a1.0001.03/DOC_1","accessed":"2026-08-19"},{"label":"Publications Office Cellar, CELEX 52022PC0046","url":"https://publications.europa.eu/resource/celex/52022PC0046","accessed":"2026-08-19"}],"related":["chips-act-adoption-2023","chips-act-entry-into-force-2023"],"proposed":false},{"id":"ivdr-application-2022","date":"2022-05-26","date_precision":"day","instrument":"In Vitro Diagnostic Medical Devices Regulation (Reg 2017/746)","instrument_short":"IVDR","area":"policy-law","type":"application","title_en":"IVDR becomes applicable across the EU","title_es":"El IVDR pasa a ser aplicable en toda la UE","summary_en":"Regulation 2017/746 on in vitro diagnostic medical devices became applicable on 26 May 2022, replacing Directive 98/79/EC, with staggered transition periods for legacy devices.","summary_es":"El Reglamento 2017/746, sobre los productos sanitarios para diagnóstico in vitro, pasó a ser aplicable el 26 de mayo de 2022, sustituyendo a la Directiva 98/79/CE, con periodos transitorios escalonados para los productos heredados.","grading":"verified","not_tested":"A sector conformity regime the AI Act plugs into for high-risk classification of diagnostic software; the IVDR application date does not itself regulate the AI model.","not_tested_es":"Un régimen sectorial de conformidad al que el Reglamento de IA se conecta para la clasificación de alto riesgo del software de diagnóstico; la fecha de aplicación del IVDR no regula por sí misma el modelo de IA.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2017/746 (CELEX 32017R0746)","url":"http://publications.europa.eu/resource/celex/32017R0746","accessed":"2026-08-19"}],"related":["mdr-application-2021","msr-application-2021"],"proposed":false},{"id":"dga-adoption-2022","date":"2022-05-30","date_precision":"day","instrument":"Data Governance Act (Reg 2022/868)","instrument_short":"DGA","area":"policy-law","type":"adoption","title_en":"Data Governance Act adopted as Regulation (EU) 2022/868","title_es":"Adoptada la Ley de Gobernanza de Datos como Reglamento (UE) 2022/868","summary_en":"The European Parliament and the Council adopted Regulation (EU) 2022/868 on European data governance, signed at Brussels on 30 May 2022. It frames re-use of protected public sector data, a notification regime for data intermediation services and a registration regime for data altruism organisations, applying from 24 September 2023.","summary_es":"El Parlamento Europeo y el Consejo adoptaron el Reglamento (UE) 2022/868, relativo a la gobernanza europea de datos, firmado en Bruselas el 30 de mayo de 2022. Enmarca la reutilización de datos protegidos del sector público, un régimen de notificación para los servicios de intermediación de datos y un régimen de registro para las organizaciones de cesión altruista de datos, aplicándose desde el 24 de septiembre de 2023.","grading":"verified","not_tested":"Adoption bound nobody before the 24 September 2023 application date; the regime also leaves the GDPR untouched as the basis for processing personal data.","not_tested_es":"La adopción no vinculó a nadie antes de la fecha de aplicación del 24 de septiembre de 2023; el régimen deja además intacto el RGPD como base para el tratamiento de datos personales.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2022/868 (CELEX 32022R0868)","url":"http://publications.europa.eu/resource/celex/32022R0868","accessed":"2026-08-19"}],"related":["dga-application-2023","data-act-adoption-2023"],"proposed":false},{"id":"dma-adoption-2022","date":"2022-09-14","date_precision":"day","instrument":"Digital Markets Act (Reg 2022/1925)","instrument_short":"DMA","area":"policy-law","type":"adoption","title_en":"Digital Markets Act adopted as Regulation (EU) 2022/1925","title_es":"Adoptada la Ley de Mercados Digitales como Reglamento (UE) 2022/1925","summary_en":"The European Parliament and the Council adopted Regulation (EU) 2022/1925 on contestable and fair markets in the digital sector, signed at Strasbourg on 14 September 2022. Under Article 54 the Regulation applied from 2 May 2023, opening the notification and designation machinery.","summary_es":"El Parlamento Europeo y el Consejo adoptaron el Reglamento (UE) 2022/1925, sobre mercados disputables y equitativos en el sector digital, firmado en Estrasburgo el 14 de septiembre de 2022. Conforme al artículo 54, el Reglamento se aplicó desde el 2 de mayo de 2023, abriendo la maquinaria de notificación y designación.","grading":"verified","not_tested":"Adoption created the regime on paper only; the Regulation applied from 2 May 2023 and bound no firm before the Commission designated it a gatekeeper.","not_tested_es":"La adopción creó el régimen solo sobre el papel; el Reglamento se aplicó desde el 2 de mayo de 2023 y no vinculó a ninguna empresa antes de que la Comisión la designara guardián de acceso.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2022/1925 (CELEX 32022R1925)","url":"http://publications.europa.eu/resource/celex/32022R1925","accessed":"2026-08-19"}],"related":["dma-proposal-2020","dma-gatekeeper-designation-2023"],"proposed":false},{"id":"aild-proposal-2022","date":"2022-09-28","date_precision":"day","instrument":"AI Liability Directive (proposal COM(2022) 496 final, 2022/0303(COD))","instrument_short":"AILD","area":"policy-law","type":"proposal","title_en":"Commission proposes AI Liability Directive","title_es":"La Comisión propone la Directiva de responsabilidad en materia de IA","summary_en":"The Commission tabled the proposal for a directive on adapting non-contractual civil liability rules to artificial intelligence (COM(2022) 496 final, procedure 2022/0303(COD)) in Brussels on 28 September 2022. It would have eased fault-based claims for AI-caused damage through court-ordered disclosure of evidence on high-risk AI systems and rebuttable presumptions of causality, following a minimum harmonisation approach.","summary_es":"La Comisión presentó en Bruselas, el 28 de septiembre de 2022, la propuesta de directiva sobre la adaptación de las normas de responsabilidad civil extracontractual a la inteligencia artificial (COM(2022) 496 final, procedimiento 2022/0303(COD)). Habría facilitado las reclamaciones por culpa por daños causados por IA mediante la exhibición de pruebas ordenada judicialmente sobre sistemas de IA de alto riesgo y presunciones refutables de causalidad, con un enfoque de armonización mínima.","grading":"verified","not_tested":"A proposal binds nobody; even if adopted it would have harmonised only evidence rules (disclosure and presumptions) in fault-based claims, leaving strict liability, fault standards and compensable damage to national law.","not_tested_es":"Una propuesta no vincula a nadie; incluso adoptada habría armonizado solo normas probatorias (exhibición y presunciones) en reclamaciones por culpa, dejando la responsabilidad objetiva, los estándares de culpa y el daño indemnizable al derecho nacional.","sources":[{"label":"EUR-Lex, proposal COM(2022) 496 final with metadata (CELEX 52022PC0496)","url":"https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=CELEX:52022PC0496","accessed":"2026-08-19"}],"related":["aild-withdrawal-2025","pld-2024-adoption"],"proposed":false},{"id":"dsa-adoption-2022","date":"2022-10-19","date_precision":"day","instrument":"Digital Services Act (Reg 2022/2065)","instrument_short":"DSA","area":"policy-law","type":"adoption","title_en":"Digital Services Act adopted as Regulation (EU) 2022/2065","title_es":"Adoptada la Ley de Servicios Digitales como Reglamento (UE) 2022/2065","summary_en":"The European Parliament and the Council adopted Regulation (EU) 2022/2065 on a Single Market for Digital Services, signed at Strasbourg on 19 October 2022. Article 93 staged its effect: certain provisions applied from 16 November 2022, with the bulk deferred to 17 February 2024.","summary_es":"El Parlamento Europeo y el Consejo adoptaron el Reglamento (UE) 2022/2065, relativo a un mercado único de servicios digitales, firmado en Estrasburgo el 19 de octubre de 2022. El artículo 93 escalonó su efecto: ciertas disposiciones se aplicaron desde el 16 de noviembre de 2022, con el grueso diferido al 17 de febrero de 2024.","grading":"verified","not_tested":"Adoption fixed the text without imposing duties on any provider; obligations reached firms only through the staged application dates from 16 November 2022 onwards.","not_tested_es":"La adopción fijó el texto sin imponer deberes a ningún proveedor; las obligaciones alcanzaron a las empresas solo por las fechas de aplicación escalonadas desde el 16 de noviembre de 2022.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2022/2065 (CELEX 32022R2065)","url":"http://publications.europa.eu/resource/celex/32022R2065","accessed":"2026-08-19"}],"related":["dsa-proposal-2020","dsa-vlop-designation-2023","dsa-full-application-2024"],"proposed":false},{"id":"cer-adoption-2022","date":"2022-12-14","date_precision":"day","instrument":"Critical Entities Resilience Directive (Dir 2022/2557)","instrument_short":"CER","area":"policy-law","type":"adoption","title_en":"Critical Entities Resilience Directive adopted","title_es":"Adoptada la Directiva de resiliencia de las entidades críticas","summary_en":"The European Parliament and the Council adopted Directive (EU) 2022/2557 on the resilience of critical entities on 14 December 2022, repealing Council Directive 2008/114/EC. It was published in the Official Journal (L 333/164) on 27 December 2022, alongside NIS2 and DORA.","summary_es":"El Parlamento Europeo y el Consejo adoptaron la Directiva (UE) 2022/2557, relativa a la resiliencia de las entidades críticas, el 14 de diciembre de 2022, derogando la Directiva 2008/114/CE del Consejo. Se publicó en el Diario Oficial (L 333/164) el 27 de diciembre de 2022, junto a NIS2 y DORA.","grading":"verified","not_tested":"The Directive addresses physical and operational resilience of critical entities; cybersecurity of the same entities runs through NIS2, and no entity was bound before transposition and identification.","not_tested_es":"La Directiva aborda la resiliencia física y operativa de las entidades críticas; la ciberseguridad de esas mismas entidades corre por NIS2, y ninguna entidad quedó vinculada antes de la transposición y la identificación.","sources":[{"label":"Publications Office of the EU (Cellar), Official Journal text of Directive (EU) 2022/2557, CELEX 32022L2557","url":"https://publications.europa.eu/resource/celex/32022L2557","accessed":"2026-08-19"}],"related":["cer-transposition-deadline-2024","nis2-adoption-2022","dora-adoption-2022"],"proposed":false},{"id":"dora-adoption-2022","date":"2022-12-14","date_precision":"day","instrument":"Digital Operational Resilience Act (Reg 2022/2554)","instrument_short":"DORA","area":"policy-law","type":"adoption","title_en":"DORA (Reg 2022/2554) adopted","title_es":"Adoptado DORA, el Reglamento 2022/2554","summary_en":"The European Parliament and the Council adopted Regulation (EU) 2022/2554 on digital operational resilience for the financial sector on 14 December 2022. It was published in the Official Journal (L 333/1) on 27 December 2022, in the same issue as NIS2 and the CER Directive.","summary_es":"El Parlamento Europeo y el Consejo adoptaron el Reglamento (UE) 2022/2554, sobre la resiliencia operativa digital del sector financiero, el 14 de diciembre de 2022. Se publicó en el Diario Oficial (L 333/1) el 27 de diciembre de 2022, en el mismo número que NIS2 y la Directiva CER.","grading":"verified","not_tested":"Adoption started the clock only; financial entities' ICT risk obligations applied from 17 January 2025, and the cloud providers underneath answer mainly through contract clauses.","not_tested_es":"La adopción solo puso en marcha el reloj; las obligaciones de riesgo de las TIC de las entidades financieras se aplicaron desde el 17 de enero de 2025, y los proveedores de nube por debajo responden principalmente a través de cláusulas contractuales.","sources":[{"label":"Publications Office of the EU (Cellar), Official Journal text of Regulation (EU) 2022/2554, CELEX 32022R2554","url":"https://publications.europa.eu/resource/celex/32022R2554","accessed":"2026-08-19"}],"related":["dora-application-2025","nis2-adoption-2022","cer-adoption-2022"],"proposed":false},{"id":"fsr-adoption-2022","date":"2022-12-14","date_precision":"day","instrument":"Regulation (EU) 2022/2560 on foreign subsidies distorting the internal market","instrument_short":"Foreign Subsidies Regulation","area":"industry","type":"adoption","title_en":"Foreign Subsidies Regulation adopted","title_es":"Adoptado el Reglamento de Subvenciones Extranjeras","summary_en":"Regulation (EU) 2022/2560 gives the Commission tools to investigate and remedy distortive subsidies granted by non-EU states to companies active in the single market, including notification duties for large mergers and public procurement bids. It is a direct instrument of economic sovereignty against subsidised foreign takeovers of European technology assets.","summary_es":"El Reglamento (UE) 2022/2560 da a la Comisión herramientas para investigar y corregir las subvenciones distorsionadoras concedidas por Estados no pertenecientes a la UE a empresas activas en el mercado único, incluidos deberes de notificación para grandes concentraciones y ofertas de contratación pública. Es un instrumento directo de soberanía económica frente a adquisiciones extranjeras subvencionadas de activos tecnológicos europeos.","grading":"verified","not_tested":"Foreign acquisitions without distortive subsidies are untouched; general investment screening sits in other instruments.","not_tested_es":"Las adquisiciones extranjeras sin subvenciones distorsionadoras quedan intactas; el control general de las inversiones reside en otros instrumentos.","sources":[{"label":"Publications Office of the EU, Official Journal text of Regulation (EU) 2022/2560 (CELEX 32022R2560)","url":"https://publications.europa.eu/resource/celex/32022R2560","accessed":"2026-08-19"}],"related":[],"proposed":false},{"id":"nis2-adoption-2022","date":"2022-12-14","date_precision":"day","instrument":"NIS2 Directive (Dir 2022/2555)","instrument_short":"NIS2","area":"policy-law","type":"adoption","title_en":"NIS2 Directive (Dir 2022/2555) adopted","title_es":"Adoptada la Directiva NIS2, la Directiva 2022/2555","summary_en":"The European Parliament and the Council adopted Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union on 14 December 2022. It was published in the Official Journal (L 333/80) on 27 December 2022, in the same issue as the CER Directive and DORA, and covers essential and important entities across critical sectors.","summary_es":"El Parlamento Europeo y el Consejo adoptaron la Directiva (UE) 2022/2555, relativa a las medidas destinadas a garantizar un elevado nivel común de ciberseguridad en toda la Unión, el 14 de diciembre de 2022. Se publicó en el Diario Oficial (L 333/80) el 27 de diciembre de 2022, en el mismo número que la Directiva CER y DORA, y cubre entidades esenciales e importantes de los sectores críticos.","grading":"verified","not_tested":"Adoption alone bound no operator; duties reach essential and important entities only through national transposition, and hardware provenance in those entities' supply chains stays untested.","not_tested_es":"La adopción por sí sola no vinculó a ningún operador; los deberes alcanzan a las entidades esenciales e importantes solo por la transposición nacional, y la procedencia del hardware en las cadenas de suministro de esas entidades queda sin comprobar.","sources":[{"label":"Publications Office of the EU (Cellar), Official Journal text of Directive (EU) 2022/2555, CELEX 32022L2555","url":"https://publications.europa.eu/resource/celex/32022L2555","accessed":"2026-08-19"}],"related":["nis2-transposition-deadline-2024","nis2-cjeu-referral-2026","cer-adoption-2022","dora-adoption-2022"],"proposed":false},{"id":"sis-renewed-operational-2023","date":"2023-03-07","date_precision":"day","instrument":"Schengen Information System (Reg 2018/1861 and 2018/1862)","instrument_short":"SIS","area":"policy-law","type":"application","title_en":"Renewed Schengen Information System enters into operation","title_es":"El Sistema de Información de Schengen renovado entra en funcionamiento","summary_en":"On 7 March 2023 the upgraded SIS went live in 30 European countries, adding new alert categories and further biometric data. Its legal basis, Regulations 2018/1861 and 2018/1862, was adopted on 28 November 2018.","summary_es":"El 7 de marzo de 2023 el SIS mejorado entró en servicio en 30 países europeos, añadiendo nuevas categorías de descripciones y más datos biométricos. Su base jurídica, los Reglamentos 2018/1861 y 2018/1862, se adoptó el 28 de noviembre de 2018.","grading":"verified","not_tested":"Entry into operation of the renewed SIS did not switch on interoperability with the EES and ETIAS, neither of which was running in March 2023.","not_tested_es":"La entrada en funcionamiento del SIS renovado no activó la interoperabilidad con el SES y el ETIAS, ninguno de los cuales operaba en marzo de 2023.","sources":[{"label":"eu-LISA press release, The renewed Schengen Information System, 7 March 2023","url":"https://www.eulisa.europa.eu/news-and-events/news/renewed-schengen-information-system","accessed":"2026-08-19"}],"related":["ees-operational-2025","etias-adopted-2018"],"proposed":false},{"id":"iris2-adoption-2023","date":"2023-03-15","date_precision":"day","instrument":"Regulation (EU) 2023/588 establishing the Union Secure Connectivity Programme for the period 2023-2027","instrument_short":"IRIS2 (Secure Connectivity Programme)","area":"defence-space","type":"adoption","title_en":"Secure Connectivity Programme (IRIS2) adopted","title_es":"Adoptado el Programa de Conectividad Segura (IRIS2)","summary_en":"Regulation (EU) 2023/588 establishes the Union Secure Connectivity Programme for 2023 to 2027, the legal basis for the IRIS2 satellite constellation providing secure governmental communications. It exists precisely to give the EU an autonomous alternative to non-EU constellations for critical connectivity.","summary_es":"El Reglamento (UE) 2023/588 establece el Programa de Conectividad Segura de la Unión para 2023 a 2027, la base jurídica de la constelación de satélites IRIS2 que proporcionará comunicaciones gubernamentales seguras. Existe precisamente para dar a la UE una alternativa autónoma a las constelaciones no europeas para la conectividad crítica.","grading":"verified","not_tested":"It does not restrict governments or firms from buying non-EU satellite connectivity; it funds a Union alternative.","not_tested_es":"No restringe a gobiernos ni a empresas la compra de conectividad por satélite no europea; financia una alternativa de la Unión.","sources":[{"label":"Publications Office of the EU, Official Journal text of Regulation (EU) 2023/588 (CELEX 32023R0588)","url":"https://publications.europa.eu/resource/celex/32023R0588","accessed":"2026-08-19"}],"related":[],"proposed":false},{"id":"dsa-vlop-designation-2023","date":"2023-04-25","date_precision":"day","instrument":"Digital Services Act (Reg 2022/2065)","instrument_short":"DSA","area":"policy-law","type":"application","title_en":"First 19 very large platforms and search engines designated","title_es":"Designadas las primeras 19 plataformas y motores de búsqueda de muy gran tamaño","summary_en":"On 25 April 2023 the Commission adopted the first designation decisions under the DSA, naming 17 very large online platforms and 2 very large online search engines with over 45 million EU users. Under Article 92 the full DSA obligations applied to them within four months of notification, ahead of the general application date.","summary_es":"El 25 de abril de 2023 la Comisión adoptó las primeras decisiones de designación bajo la Ley de Servicios Digitales, nombrando 17 plataformas en línea de muy gran tamaño y 2 motores de búsqueda en línea de muy gran tamaño con más de 45 millones de usuarios en la UE. Conforme al artículo 92, las obligaciones completas de la ley se les aplicaron a los cuatro meses de la notificación, antes de la fecha de aplicación general.","grading":"verified","not_tested":"The decisions bind only the 19 designated services; platforms below the 45 million user threshold owed no DSA duties until 17 February 2024.","not_tested_es":"Las decisiones vinculan solo a los 19 servicios designados; las plataformas por debajo del umbral de 45 millones de usuarios no debían nada bajo la ley hasta el 17 de febrero de 2024.","sources":[{"label":"European Commission press corner, IP/23/2413, DSA: Commission designates first set of Very Large Online Platforms and Search Engines","url":"https://ec.europa.eu/commission/presscorner/detail/en/ip_23_2413","accessed":"2026-08-19"},{"label":"Publications Office of the EU, Regulation (EU) 2022/2065, Article 92 (CELEX 32022R2065)","url":"http://publications.europa.eu/resource/celex/32022R2065","accessed":"2026-08-19"}],"related":["dsa-adoption-2022","dsa-full-application-2024"],"proposed":false},{"id":"eucs-sovereignty-criteria-2023","date":"2023-05-01","date_precision":"month","instrument":"EUCS, candidate European Cybersecurity Certification Scheme for Cloud Services (revised draft, May 2023)","instrument_short":"EUCS","area":"policy-law","type":"amendment","title_en":"EUCS draft adds immunity from non-EU law at top level","title_es":"El borrador del EUCS añade la inmunidad frente al derecho no europeo en el nivel más alto","summary_en":"A revised ENISA draft of May 2023 introduced explicit sovereignty requirements for the first time: independence of the cloud service from non-EU legislation, EU location of data storage, processing and support, and effective control of the provider, set out in a new Annex J. The draft split assurance level high into evaluation levels CS-EL3 and CS-EL4, reserving the sovereignty criteria for the most sensitive tier; member state non-papers on immunity from non-EU law, modelled on France's SecNumCloud, had pushed this approach since 2021.","summary_es":"Un borrador revisado de ENISA de mayo de 2023 introdujo por primera vez requisitos explícitos de soberanía: independencia del servicio de nube respecto de la legislación no europea, ubicación en la UE del almacenamiento, el tratamiento y el soporte de los datos, y control efectivo del proveedor, recogidos en un nuevo anexo J. El borrador dividió el nivel de garantía alto en los niveles de evaluación CS-EL3 y CS-EL4, reservando los criterios de soberanía para el escalón más sensible; los documentos oficiosos de Estados miembros sobre inmunidad frente al derecho no europeo, inspirados en el SecNumCloud francés, empujaban este enfoque desde 2021.","grading":"reported","not_tested":"The draft criteria graded establishment, ownership and applicable law in a text that never gained legal force, and they stopped before the hardware.","not_tested_es":"Los criterios del borrador graduaban establecimiento, propiedad y derecho aplicable en un texto que nunca adquirió fuerza legal, y se detenían antes del hardware.","sources":[{"label":"Centre for European Policy (cep), cepInput No. 8/2025, EU Cloud Certification at an Impasse, 25 April 2025","url":"https://www.cep.eu/fileadmin/user_upload/cep.eu/cepItalia/cepInput_EU_Cloud_Certification_at_an_Impasse.pdf","accessed":"2026-08-19"}],"related":["eucs-candidate-scheme-2020","eucs-sovereignty-criteria-dropped-2024","csf-procurement-launch-2025","cada-proposal-2026"],"proposed":false},{"id":"machinery-regulation-adoption-2023","date":"2023-06-14","date_precision":"day","instrument":"Machinery Regulation (Reg 2023/1230)","instrument_short":"Machinery Reg","area":"policy-law","type":"adoption","title_en":"Machinery Regulation adopted; repeals Directive 2006/42","title_es":"Adoptado el Reglamento de Máquinas; deroga la Directiva 2006/42","summary_en":"The European Parliament and the Council adopted Regulation (EU) 2023/1230 on machinery on 14 June 2023, published in OJ L 165 on 29 June 2023. It repeals the Machinery Directive 2006/42/EC with effect from 20 January 2027.","summary_es":"El Parlamento Europeo y el Consejo adoptaron el Reglamento (UE) 2023/1230, relativo a las máquinas, el 14 de junio de 2023, publicado en el DO L 165 de 29 de junio de 2023. Deroga la Directiva de Máquinas 2006/42/CE con efectos desde el 20 de enero de 2027.","grading":"verified","not_tested":"Adoption fixed the text only; no machinery obligations bound manufacturers until the staged application dates, and the regulation does not itself regulate the AI model.","not_tested_es":"La adopción fijó solo el texto; ninguna obligación sobre máquinas vinculó a los fabricantes hasta las fechas de aplicación escalonadas, y el reglamento no regula por sí mismo el modelo de IA.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2023/1230 (CELEX 32023R1230)","url":"http://publications.europa.eu/resource/celex/32023R1230","accessed":"2026-08-19"}],"related":["machinery-regulation-application-2027","msr-application-2021"],"proposed":false},{"id":"dma-gatekeeper-designation-2023","date":"2023-09-06","date_precision":"day","instrument":"Digital Markets Act (Reg 2022/1925)","instrument_short":"DMA","area":"policy-law","type":"application","title_en":"Commission designates first six gatekeepers under the DMA","title_es":"La Comisión designa los primeros seis guardianes de acceso bajo la Ley de Mercados Digitales","summary_en":"On 6 September 2023 the Commission designated Alphabet, Amazon, Apple, ByteDance, Meta and Microsoft as the first gatekeepers, covering 22 core platform services in total. Under Article 3(10) each firm then had six months to comply with the obligations in Articles 5, 6 and 7.","summary_es":"El 6 de septiembre de 2023 la Comisión designó a Alphabet, Amazon, Apple, ByteDance, Meta y Microsoft como primeros guardianes de acceso, cubriendo 22 servicios básicos de plataforma en total. Conforme al artículo 3, apartado 10, cada empresa tuvo entonces seis meses para cumplir las obligaciones de los artículos 5, 6 y 7.","grading":"verified","not_tested":"Designation binds six named firms across 22 core platform services; companies below the user and turnover thresholds stay outside the regime entirely.","not_tested_es":"La designación vincula a seis empresas nombradas en 22 servicios básicos de plataforma; las compañías por debajo de los umbrales de usuarios y facturación quedan enteramente fuera del régimen.","sources":[{"label":"European Commission press corner, IP/23/4328, Digital Markets Act: Commission designates six gatekeepers","url":"https://ec.europa.eu/commission/presscorner/detail/en/ip_23_4328","accessed":"2026-08-19"},{"label":"Publications Office of the EU, Regulation (EU) 2022/1925, Article 3(10) (CELEX 32022R1925)","url":"http://publications.europa.eu/resource/celex/32022R1925","accessed":"2026-08-19"}],"related":["dma-adoption-2022","dma-compliance-2024"],"proposed":false},{"id":"chips-act-adoption-2023","date":"2023-09-13","date_precision":"day","instrument":"European Chips Act (Reg 2023/1781)","instrument_short":"Chips Act","area":"industry","type":"adoption","title_en":"European Chips Act adopted by Parliament and Council","title_es":"El Parlamento y el Consejo adoptan la Ley Europea de Chips","summary_en":"Regulation (EU) 2023/1781 was signed at Strasbourg on 13 September 2023, establishing the Chips for Europe Initiative, a framework for first-of-a-kind facilities, and a supply crisis toolbox. It also amends Regulation (EU) 2021/694 (Digital Europe).","summary_es":"El Reglamento (UE) 2023/1781 se firmó en Estrasburgo el 13 de septiembre de 2023, estableciendo la Iniciativa Chips para Europa, un marco para instalaciones pioneras y una caja de herramientas para crisis de suministro. Modifica además el Reglamento (UE) 2021/694 (Europa Digital).","grading":"verified","not_tested":"Adoption fixed the text; the Act channels support into fabrication capacity while mandating no preference for European chips in any public or private purchase.","not_tested_es":"La adopción fijó el texto; la ley canaliza apoyo hacia la capacidad de fabricación sin imponer ninguna preferencia por chips europeos en ninguna compra pública o privada.","sources":[{"label":"Publications Office Cellar, Regulation (EU) 2023/1781, CELEX 32023R1781","url":"https://publications.europa.eu/resource/celex/32023R1781","accessed":"2026-08-19"}],"related":["chips-act-proposal-2022","chips-act-entry-into-force-2023"],"proposed":false},{"id":"chips-act-entry-into-force-2023","date":"2023-09-21","date_precision":"day","instrument":"European Chips Act (Reg 2023/1781)","instrument_short":"Chips Act","area":"industry","type":"entry-into-force","title_en":"European Chips Act enters into force","title_es":"La Ley Europea de Chips entra en vigor","summary_en":"Regulation (EU) 2023/1781 was published in Official Journal L 229 on 18 September 2023. Under Article 41 it entered into force on the third day after publication, 21 September 2023, activating the Chips for Europe Initiative and the crisis response mechanism.","summary_es":"El Reglamento (UE) 2023/1781 se publicó en el Diario Oficial L 229 de 18 de septiembre de 2023. Conforme a su artículo 41, entró en vigor al tercer día de su publicación, el 21 de septiembre de 2023, activando la Iniciativa Chips para Europa y el mecanismo de respuesta a crisis.","grading":"verified","not_tested":"In force, the Act funds capacity and monitoring; it binds no procurement preference and obliges no buyer to source semiconductors from EU fabs.","not_tested_es":"En vigor, la ley financia capacidad y seguimiento; no vincula ninguna preferencia de contratación y no obliga a ningún comprador a abastecerse de semiconductores en fábricas de la UE.","sources":[{"label":"Publications Office Cellar, Regulation (EU) 2023/1781, OJ L 229, 18.9.2023","url":"https://publications.europa.eu/resource/celex/32023R1781","accessed":"2026-08-19"}],"related":["chips-act-proposal-2022","chips-act-adoption-2023"],"proposed":false},{"id":"dga-application-2023","date":"2023-09-24","date_precision":"day","instrument":"Data Governance Act (Reg 2022/868)","instrument_short":"DGA","area":"policy-law","type":"application","title_en":"Data Governance Act becomes applicable across the EU","title_es":"La Ley de Gobernanza de Datos pasa a ser aplicable en toda la UE","summary_en":"Under Article 38 the DGA applied from 24 September 2023. From that date data intermediation service providers owed notification duties, data altruism organisations could register, and public sector bodies had to follow the conditions for re-use of protected data.","summary_es":"Conforme a su artículo 38, la Ley de Gobernanza de Datos se aplicó desde el 24 de septiembre de 2023. Desde esa fecha los proveedores de servicios de intermediación de datos debían notificar, las organizaciones de cesión altruista de datos podían registrarse, y los organismos del sector público tenían que seguir las condiciones de reutilización de los datos protegidos.","grading":"verified","not_tested":"The DGA disciplines intermediaries, altruism organisations and public sector re-use conditions; it compels no private data holder to share anything, a gap the Data Act later addresses.","not_tested_es":"La ley disciplina a los intermediarios, las organizaciones de cesión altruista y las condiciones de reutilización del sector público; no obliga a ningún titular privado de datos a compartir nada, una laguna que la Ley de Datos aborda después.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2022/868, Article 38 (CELEX 32022R0868)","url":"http://publications.europa.eu/resource/celex/32022R0868","accessed":"2026-08-19"}],"related":["dga-adoption-2022","data-act-application-2025"],"proposed":false},{"id":"ai-act-political-agreement-2023","date":"2023-12-09","date_precision":"day","instrument":"AI Act (Reg 2024/1689)","instrument_short":"AI Act","area":"policy-law","type":"political-agreement","title_en":"Parliament and Council strike political deal on the AI Act","title_es":"El Parlamento y el Consejo cierran el acuerdo político sobre el Reglamento de IA","summary_en":"Council presidency and European Parliament negotiators concluded the trilogue on the AI Act with a provisional political agreement announced on 9 December 2023. The Council presented it as the first comprehensive rules for AI in the world.","summary_es":"La presidencia del Consejo y los negociadores del Parlamento Europeo concluyeron el trílogo sobre el Reglamento de IA con un acuerdo político provisional anunciado el 9 de diciembre de 2023. El Consejo lo presentó como las primeras normas integrales sobre IA del mundo.","grading":"verified","not_tested":"The trilogue deal bound only the negotiators politically; no legal text was in force and no operator obligation arose until formal adoption in 2024.","not_tested_es":"El acuerdo del trílogo vinculó solo políticamente a los negociadores; ningún texto legal estaba en vigor y ninguna obligación para operadores nació hasta la adopción formal en 2024.","sources":[{"label":"Council of the EU press release, 9 December 2023","url":"https://www.consilium.europa.eu/en/press/press-releases/2023/12/09/artificial-intelligence-act-council-and-parliament-strike-a-deal-on-the-first-worldwide-rules-for-ai/","accessed":"2026-08-19"}],"related":["ai-act-proposal-2021","ai-act-adoption-2024"],"proposed":false},{"id":"data-act-adoption-2023","date":"2023-12-13","date_precision":"day","instrument":"Data Act (Reg 2023/2854)","instrument_short":"Data Act","area":"policy-law","type":"adoption","title_en":"Data Act adopted as Regulation (EU) 2023/2854","title_es":"Adoptada la Ley de Datos como Reglamento (UE) 2023/2854","summary_en":"The European Parliament and the Council adopted Regulation (EU) 2023/2854 on harmonised rules on fair access to and use of data, signed at Strasbourg on 13 December 2023. It establishes access rights to data from connected products, business-to-government sharing and cloud-switching rules, with application deferred to 12 September 2025.","summary_es":"El Parlamento Europeo y el Consejo adoptaron el Reglamento (UE) 2023/2854, sobre normas armonizadas para un acceso justo a los datos y su utilización, firmado en Estrasburgo el 13 de diciembre de 2023. Establece derechos de acceso a los datos de los productos conectados, el intercambio de empresa a administración y normas de cambio de proveedor de nube, con la aplicación diferida al 12 de septiembre de 2025.","grading":"verified","not_tested":"Adoption imposed nothing immediately; data holders, device makers and cloud providers owed no Data Act duties before 12 September 2025.","not_tested_es":"La adopción no impuso nada de inmediato; titulares de datos, fabricantes de dispositivos y proveedores de nube no debían nada bajo la Ley de Datos antes del 12 de septiembre de 2025.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2023/2854 (CELEX 32023R2854)","url":"http://publications.europa.eu/resource/celex/32023R2854","accessed":"2026-08-19"}],"related":["data-act-application-2025","dga-adoption-2022"],"proposed":false},{"id":"dsa-full-application-2024","date":"2024-02-17","date_precision":"day","instrument":"Digital Services Act (Reg 2022/2065)","instrument_short":"DSA","area":"policy-law","type":"application","title_en":"Digital Services Act applies in full across the EU","title_es":"La Ley de Servicios Digitales se aplica plenamente en toda la UE","summary_en":"Under Article 93(2) the DSA applied from 17 February 2024 to all intermediary services offered in the EU, from hosting providers to marketplaces. The same date was the deadline for Member States to designate their Digital Services Coordinators.","summary_es":"Conforme al artículo 93, apartado 2, la Ley de Servicios Digitales se aplicó desde el 17 de febrero de 2024 a todos los servicios intermediarios ofrecidos en la UE, desde proveedores de alojamiento hasta mercados en línea. La misma fecha era el plazo para que los Estados miembros designaran a sus coordinadores de servicios digitales.","grading":"verified","not_tested":"The DSA disciplines moderation procedures, transparency and risk management; it leaves the definition of what content is illegal to other EU and national law.","not_tested_es":"La ley disciplina los procedimientos de moderación, la transparencia y la gestión de riesgos; deja la definición de qué contenido es ilícito a otras normas de la UE y nacionales.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2022/2065, Article 93 (CELEX 32022R2065)","url":"http://publications.europa.eu/resource/celex/32022R2065","accessed":"2026-08-19"}],"related":["dsa-adoption-2022","dsa-vlop-designation-2023"],"proposed":false},{"id":"eucs-sovereignty-criteria-dropped-2024","date":"2024-03-01","date_precision":"month","instrument":"EUCS, candidate European Cybersecurity Certification Scheme for Cloud Services (draft V1.0.413, March 2024)","instrument_short":"EUCS","area":"policy-law","type":"amendment","title_en":"March 2024 EUCS draft drops the sovereignty requirements","title_es":"El borrador del EUCS de marzo de 2024 retira los requisitos de soberanía","summary_en":"After lengthy discussions and interventions by member state governments, the EUCS draft of March 2024 (V1.0.413) no longer contains the sovereignty requirements, and the split of assurance level high into CS-EL3 and CS-EL4 disappeared with them. Sovereignty conditions were left to national schemes such as France's SecNumCloud and to contractual clauses, allowing non-EU providers to reach the highest certification level.","summary_es":"Tras largas discusiones e intervenciones de gobiernos de Estados miembros, el borrador del EUCS de marzo de 2024 (V1.0.413) ya no contiene los requisitos de soberanía, y la división del nivel de garantía alto en CS-EL3 y CS-EL4 desapareció con ellos. Las condiciones de soberanía quedaron para los esquemas nacionales, como el SecNumCloud francés, y para cláusulas contractuales, permitiendo a proveedores no europeos alcanzar el nivel más alto de certificación.","grading":"reported","not_tested":"The removal settled nothing in law: without an implementing act the scheme still could not issue a certificate at any level.","not_tested_es":"La retirada no zanjó nada en derecho: sin acto de ejecución, el esquema seguía sin poder emitir un certificado en ningún nivel.","sources":[{"label":"Centre for European Policy (cep), cepInput No. 8/2025, EU Cloud Certification at an Impasse, 25 April 2025","url":"https://www.cep.eu/fileadmin/user_upload/cep.eu/cepItalia/cepInput_EU_Cloud_Certification_at_an_Impasse.pdf","accessed":"2026-08-19"}],"related":["eucs-sovereignty-criteria-2023","eucs-candidate-scheme-2020","eucs-stalled-2026","cada-proposal-2026"],"proposed":false},{"id":"dma-compliance-2024","date":"2024-03-07","date_precision":"day","instrument":"Digital Markets Act (Reg 2022/1925)","instrument_short":"DMA","area":"policy-law","type":"application","title_en":"DMA compliance deadline arrives for the six gatekeepers","title_es":"Vence el plazo de cumplimiento de la Ley de Mercados Digitales para los seis guardianes de acceso","summary_en":"The six-month window under Article 3(10) closed on 7 March 2024, by which date Alphabet, Amazon, Apple, ByteDance, Meta and Microsoft had to comply fully with the DMA obligations for each designated core platform service. The Commission opened its first non-compliance investigations on 25 March 2024.","summary_es":"La ventana de seis meses del artículo 3, apartado 10, se cerró el 7 de marzo de 2024, fecha en la que Alphabet, Amazon, Apple, ByteDance, Meta y Microsoft debían cumplir plenamente las obligaciones de la ley para cada servicio básico de plataforma designado. La Comisión abrió sus primeras investigaciones por incumplimiento el 25 de marzo de 2024.","grading":"verified","not_tested":"The deadline bound the six gatekeepers designated in September 2023; any firm designated later runs its own six-month clock under Article 3(10).","not_tested_es":"El plazo vinculó a los seis guardianes designados en septiembre de 2023; cualquier empresa designada después corre su propio reloj de seis meses bajo el artículo 3, apartado 10.","sources":[{"label":"European Commission press corner, IP/24/1689, Commission opens non-compliance investigations against Alphabet, Apple and Meta under the Digital Markets Act","url":"https://ec.europa.eu/commission/presscorner/detail/en/ip_24_1689","accessed":"2026-08-19"},{"label":"Publications Office of the EU, Regulation (EU) 2022/1925, Article 3(10) (CELEX 32022R1925)","url":"http://publications.europa.eu/resource/celex/32022R1925","accessed":"2026-08-19"}],"related":["dma-gatekeeper-designation-2023"],"proposed":false},{"id":"interoperable-europe-act-adoption-2024","date":"2024-03-13","date_precision":"day","instrument":"Regulation (EU) 2024/903 laying down measures for a high level of public sector interoperability across the Union (Interoperable Europe Act)","instrument_short":"Interoperable Europe Act","area":"policy-law","type":"adoption","title_en":"Interoperable Europe Act adopted","title_es":"Adoptado el Reglamento de la Europa Interoperable","summary_en":"Regulation (EU) 2024/903 sets binding interoperability assessments for public administrations and mandates sharing of reusable solutions, including open source, through an Interoperable Europe Board and portal. Public sector interoperability reduces vendor lock-in, a core lever of European digital sovereignty.","summary_es":"El Reglamento (UE) 2024/903 establece evaluaciones de interoperabilidad vinculantes para las administraciones públicas y ordena compartir soluciones reutilizables, incluido el código abierto, a través de un Comité y un portal de la Europa Interoperable. La interoperabilidad del sector público reduce la dependencia de proveedores, una palanca central de la soberanía digital europea.","grading":"verified","not_tested":"It binds Union entities and public sector bodies only; private companies carry no interoperability obligations under it.","not_tested_es":"Vincula solo a las entidades de la Unión y a los organismos del sector público; las empresas privadas no cargan con ninguna obligación de interoperabilidad bajo él.","sources":[{"label":"Publications Office of the EU, Official Journal text of Regulation (EU) 2024/903 (CELEX 32024R0903)","url":"https://publications.europa.eu/resource/celex/32024R0903","accessed":"2026-08-19"}],"related":[],"proposed":false},{"id":"crma-adoption-2024","date":"2024-04-11","date_precision":"day","instrument":"Regulation (EU) 2024/1252 establishing a framework for ensuring a secure and sustainable supply of critical raw materials (Critical Raw Materials Act)","instrument_short":"Critical Raw Materials Act","area":"industry","type":"adoption","title_en":"Critical Raw Materials Act adopted","title_es":"Adoptado el Reglamento de Materias Primas Fundamentales","summary_en":"Regulation (EU) 2024/1252 sets 2030 benchmarks for domestic extraction, processing and recycling of strategic raw materials and fast-tracks permits for strategic projects. Chips, batteries and defence electronics all depend on these supply chains, making it a sovereignty instrument for the industrial base.","summary_es":"El Reglamento (UE) 2024/1252 fija objetivos de referencia para 2030 en extracción, transformación y reciclado internos de materias primas estratégicas y agiliza los permisos de los proyectos estratégicos. Chips, baterías y electrónica de defensa dependen todos de estas cadenas de suministro, lo que lo convierte en un instrumento de soberanía para la base industrial.","grading":"verified","not_tested":"Its benchmarks bind the Union collectively; no individual company is required to source raw materials from European projects.","not_tested_es":"Sus objetivos de referencia vinculan a la Unión colectivamente; no se exige a ninguna empresa individual abastecerse de materias primas en proyectos europeos.","sources":[{"label":"Publications Office of the EU, Official Journal text of Regulation (EU) 2024/1252 (CELEX 32024R1252)","url":"https://publications.europa.eu/resource/celex/32024R1252","accessed":"2026-08-19"}],"related":[],"proposed":false},{"id":"eidas2-adoption-2024","date":"2024-04-11","date_precision":"day","instrument":"Regulation (EU) 2024/1183 amending Regulation (EU) No 910/2014 as regards establishing the European Digital Identity Framework","instrument_short":"eIDAS 2","area":"policy-law","type":"adoption","title_en":"eIDAS 2 adopted, mandating the EU Digital Identity Wallet","title_es":"Adoptado eIDAS 2, que ordena la Cartera Europea de Identidad Digital","summary_en":"Amends Regulation (EU) No 910/2014 to create the European Digital Identity Framework, obliging every member state to offer citizens an EU Digital Identity Wallet. It belongs on a sovereignty timeline because it builds a state-backed European alternative to identity log-ins controlled by non-EU platforms.","summary_es":"Modifica el Reglamento (UE) n.º 910/2014 para crear el Marco Europeo de Identidad Digital, obligando a cada Estado miembro a ofrecer a sus ciudadanos una Cartera Europea de Identidad Digital. Pertenece a una cronología de soberanía porque construye una alternativa europea con respaldo estatal a los inicios de sesión de identidad controlados por plataformas no europeas.","grading":"verified","not_tested":"It obliges states to offer wallets and large platforms to accept them; citizens face no obligation to use one.","not_tested_es":"Obliga a los Estados a ofrecer carteras y a las grandes plataformas a aceptarlas; los ciudadanos no tienen ninguna obligación de usar una.","sources":[{"label":"Publications Office of the EU, Official Journal text of Regulation (EU) 2024/1183 (CELEX 32024R1183)","url":"https://publications.europa.eu/resource/celex/32024R1183","accessed":"2026-08-19"}],"related":[],"proposed":false},{"id":"gigabit-infrastructure-act-adoption-2024","date":"2024-04-29","date_precision":"day","instrument":"Regulation (EU) 2024/1309 on measures to reduce the cost of deploying gigabit electronic communications networks (Gigabit Infrastructure Act)","instrument_short":"Gigabit Infrastructure Act","area":"compute-infra","type":"adoption","title_en":"Gigabit Infrastructure Act adopted","title_es":"Adoptado el Reglamento de Infraestructura Gigabit","summary_en":"Regulation (EU) 2024/1309 cuts the cost and time of rolling out gigabit networks through mandated access to physical infrastructure, permit deadlines and tacit-approval rules, repealing the 2014 Broadband Cost Reduction Directive. Connectivity build-out is the physical substrate of EU digital autonomy, which places it on a sovereignty timeline.","summary_es":"El Reglamento (UE) 2024/1309 recorta el coste y el tiempo de despliegue de las redes gigabit mediante acceso obligatorio a la infraestructura física, plazos para los permisos y reglas de aprobación tácita, derogando la Directiva de reducción de costes de banda ancha de 2014. El despliegue de conectividad es el sustrato físico de la autonomía digital de la UE, lo que lo sitúa en una cronología de soberanía.","grading":"verified","not_tested":"It does not regulate network ownership or vendor choice; operators can still deploy non-EU equipment under it.","not_tested_es":"No regula la propiedad de las redes ni la elección de proveedor; los operadores pueden seguir desplegando equipos no europeos bajo él.","sources":[{"label":"Publications Office of the EU, Official Journal text of Regulation (EU) 2024/1309 (CELEX 32024R1309)","url":"https://publications.europa.eu/resource/celex/32024R1309","accessed":"2026-08-19"}],"related":[],"proposed":false},{"id":"eurodac-recast-adopted-2024","date":"2024-05-14","date_precision":"day","instrument":"Eurodac (Reg 2024/1358)","instrument_short":"Eurodac","area":"policy-law","type":"adoption","title_en":"Eurodac recast regulation adopted under the migration pact","title_es":"Adoptada la refundición de Eurodac bajo el pacto migratorio","summary_en":"Regulation 2024/1358, adopted on 14 May 2024 as part of the Pact on Migration and Asylum, recasts Eurodac from a fingerprint database into a wider asylum and migration management system. Article 63 sets its application from 12 June 2026.","summary_es":"El Reglamento 2024/1358, adoptado el 14 de mayo de 2024 como parte del Pacto sobre Migración y Asilo, refunde Eurodac y lo convierte de una base de datos de impresiones dactilares en un sistema más amplio de gestión del asilo y la migración. Su artículo 63 fija la aplicación desde el 12 de junio de 2026.","grading":"verified","not_tested":"Adoption binds no authority in practice until the recast applies from 12 June 2026, with Article 26 applying only from 12 June 2029.","not_tested_es":"La adopción no vincula en la práctica a ninguna autoridad hasta que la refundición se aplique desde el 12 de junio de 2026, con el artículo 26 aplicándose solo desde el 12 de junio de 2029.","sources":[{"label":"Publications Office of the EU, Official Journal text of Regulation (EU) 2024/1358 (CELEX 32024R1358)","url":"https://publications.europa.eu/resource/celex/32024R1358","accessed":"2026-08-19"},{"label":"Council of the EU press release, The Council adopts the EU's pact on migration and asylum, 14 May 2024","url":"https://www.consilium.europa.eu/en/press/press-releases/2024/05/14/the-council-adopts-the-eu-s-pact-on-migration-and-asylum/","accessed":"2026-08-19"}],"related":[],"proposed":false},{"id":"nzia-adoption-2024","date":"2024-06-13","date_precision":"day","instrument":"Regulation (EU) 2024/1735 on establishing a framework of measures for strengthening Europe's net-zero technology manufacturing ecosystem (Net-Zero Industry Act)","instrument_short":"Net-Zero Industry Act","area":"industry","type":"adoption","title_en":"Net-Zero Industry Act adopted","title_es":"Adoptado el Reglamento de la Industria de Cero Emisiones Netas","summary_en":"Regulation (EU) 2024/1735 aims for Union manufacturing capacity to cover 40 per cent of deployment needs in net-zero technologies by 2030 and adds resilience criteria to public auctions and procurement. It is the EU's flagship attempt to re-shore strategic manufacturing capacity, the industrial arm of sovereignty policy.","summary_es":"El Reglamento (UE) 2024/1735 persigue que la capacidad de fabricación de la Unión cubra el 40 por ciento de las necesidades de despliegue de tecnologías de cero emisiones netas para 2030 y añade criterios de resiliencia a las subastas y la contratación públicas. Es el intento insignia de la UE de repatriar capacidad de fabricación estratégica, el brazo industrial de la política de soberanía.","grading":"verified","not_tested":"The 40 per cent manufacturing benchmark is a Union objective; it compels no member state or manufacturer to build specific capacity.","not_tested_es":"El objetivo del 40 por ciento de fabricación es un objetivo de la Unión; no obliga a ningún Estado miembro ni fabricante a construir una capacidad concreta.","sources":[{"label":"Publications Office of the EU, Official Journal text of Regulation (EU) 2024/1735 (CELEX 32024R1735)","url":"https://publications.europa.eu/resource/celex/32024R1735","accessed":"2026-08-19"}],"related":[],"proposed":false},{"id":"eurohpc-ai-factories-amendment-2024","date":"2024-06-17","date_precision":"day","instrument":"EuroHPC amending regulation (Council Reg 2024/1732)","instrument_short":"EuroHPC AI amendment","area":"compute-infra","type":"amendment","title_en":"Council amends EuroHPC mandate to add AI factories","title_es":"El Consejo modifica el mandato de EuroHPC para añadir las fábricas de IA","summary_en":"Council Regulation (EU) 2024/1732 of 17 June 2024 amends Regulation (EU) 2021/1173, adding the task to develop and operate AI factories and defining AI-optimised supercomputers, so that start-ups and researchers can train large general-purpose AI models on EuroHPC machines. Published in the Official Journal on 19 June 2024.","summary_es":"El Reglamento (UE) 2024/1732 del Consejo, de 17 de junio de 2024, modifica el Reglamento (UE) 2021/1173, añadiendo la tarea de desarrollar y operar fábricas de IA y definiendo los superordenadores optimizados para IA, de modo que emergentes e investigadores puedan entrenar grandes modelos de IA de propósito general en las máquinas de EuroHPC. Publicado en el Diario Oficial el 19 de junio de 2024.","grading":"verified","not_tested":"The amendment buys access to AI training capacity; the accelerators inside the AI factories remain imported and no clause obliges European hardware.","not_tested_es":"La modificación compra acceso a capacidad de entrenamiento de IA; los aceleradores dentro de las fábricas de IA siguen siendo importados y ninguna cláusula obliga a hardware europeo.","sources":[{"label":"Publications Office Cellar, Council Regulation (EU) 2024/1732, CELEX 32024R1732","url":"https://publications.europa.eu/resource/celex/32024R1732","accessed":"2026-08-19"}],"related":["eurohpc-regulation-adoption-2021","cada-proposal-2026"],"proposed":false},{"id":"ai-act-adoption-2024","date":"2024-07-12","date_precision":"day","instrument":"AI Act (Reg 2024/1689)","instrument_short":"AI Act","area":"policy-law","type":"adoption","title_en":"AI Act adopted and published in the Official Journal","title_es":"El Reglamento de IA, adoptado y publicado en el Diario Oficial","summary_en":"Parliament adopted its position on 13 March 2024 and the Council took its decision on 21 May 2024. The act signed on 13 June 2024 was published in the Official Journal as Regulation (EU) 2024/1689 on 12 July 2024.","summary_es":"El Parlamento adoptó su posición el 13 de marzo de 2024 y el Consejo tomó su decisión el 21 de mayo de 2024. El acto firmado el 13 de junio de 2024 se publicó en el Diario Oficial como Reglamento (UE) 2024/1689 el 12 de julio de 2024.","grading":"verified","not_tested":"Publication created no operator obligations; the act entered into force on 1 August 2024 and its first obligations applied from 2 February 2025.","not_tested_es":"La publicación no creó obligaciones para los operadores; el acto entró en vigor el 1 de agosto de 2024 y sus primeras obligaciones se aplicaron desde el 2 de febrero de 2025.","sources":[{"label":"Publications Office (CELLAR), Regulation (EU) 2024/1689, OJ L, 12.7.2024","url":"http://publications.europa.eu/resource/celex/32024R1689","accessed":"2026-08-19"}],"related":["ai-act-political-agreement-2023","ai-act-entry-into-force-2024"],"proposed":false},{"id":"ai-act-entry-into-force-2024","date":"2024-08-01","date_precision":"day","instrument":"AI Act (Reg 2024/1689)","instrument_short":"AI Act","area":"policy-law","type":"entry-into-force","title_en":"AI Act enters into force","title_es":"El Reglamento de IA entra en vigor","summary_en":"Article 113 sets entry into force on the twentieth day after Official Journal publication. Publication on 12 July 2024 put entry into force at 1 August 2024, starting the staged transition periods.","summary_es":"El artículo 113 fija la entrada en vigor a los veinte días de la publicación en el Diario Oficial. La publicación del 12 de julio de 2024 situó la entrada en vigor el 1 de agosto de 2024, arrancando los periodos transitorios escalonados.","grading":"verified","not_tested":"Entry into force only started the transition clocks; no prohibition, high-risk, GPAI or transparency obligation applied before 2 February 2025.","not_tested_es":"La entrada en vigor solo puso en marcha los relojes de transición; ninguna prohibición ni obligación de alto riesgo, de IA de propósito general o de transparencia se aplicó antes del 2 de febrero de 2025.","sources":[{"label":"Publications Office (CELLAR), Regulation (EU) 2024/1689, Article 113","url":"http://publications.europa.eu/resource/celex/32024R1689","accessed":"2026-08-19"}],"related":["ai-act-adoption-2024","ai-act-prohibitions-application-2025"],"proposed":false},{"id":"cer-transposition-deadline-2024","date":"2024-10-17","date_precision":"day","instrument":"Critical Entities Resilience Directive (Dir 2022/2557)","instrument_short":"CER","area":"policy-law","type":"application","title_en":"CER Directive transposition deadline","title_es":"Plazo de transposición de la Directiva CER","summary_en":"Article 26 required member states to adopt and publish measures complying with the CER Directive by 17 October 2024 and to apply them from 18 October 2024. Article 6 then gave member states until 17 July 2026 to identify their critical entities in the sectors set out in the Annex.","summary_es":"El artículo 26 exigía a los Estados miembros adoptar y publicar las medidas de cumplimiento de la Directiva CER a más tardar el 17 de octubre de 2024 y aplicarlas desde el 18 de octubre de 2024. El artículo 6 dio después a los Estados miembros hasta el 17 de julio de 2026 para identificar sus entidades críticas en los sectores del anexo.","grading":"verified","not_tested":"The deadline binds member states; a critical entity carries resilience duties only after its state identifies it under Article 6, a step due by 17 July 2026.","not_tested_es":"El plazo vincula a los Estados miembros; una entidad crítica solo carga con deberes de resiliencia después de que su Estado la identifique bajo el artículo 6, un paso previsto a más tardar el 17 de julio de 2026.","sources":[{"label":"Publications Office of the EU (Cellar), Official Journal text of Directive (EU) 2022/2557, Articles 6 and 26, CELEX 32022L2557","url":"https://publications.europa.eu/resource/celex/32022L2557","accessed":"2026-08-19"}],"related":["cer-adoption-2022","nis2-transposition-deadline-2024"],"proposed":false},{"id":"nis2-transposition-deadline-2024","date":"2024-10-17","date_precision":"day","instrument":"NIS2 Directive (Dir 2022/2555)","instrument_short":"NIS2","area":"policy-law","type":"application","title_en":"NIS2 transposition deadline for member states","title_es":"Plazo de transposición de NIS2 para los Estados miembros","summary_en":"Article 41 required member states to adopt and publish national measures complying with NIS2 by 17 October 2024 and to apply them from 18 October 2024. Many missed the deadline: the Commission sent letters of formal notice to 23 member states on 28 November 2024 and reasoned opinions to 19 of them on 7 May 2025.","summary_es":"El artículo 41 exigía a los Estados miembros adoptar y publicar las medidas nacionales de cumplimiento de NIS2 a más tardar el 17 de octubre de 2024 y aplicarlas desde el 18 de octubre de 2024. Muchos incumplieron el plazo: la Comisión envió cartas de emplazamiento a 23 Estados miembros el 28 de noviembre de 2024 y dictámenes motivados a 19 de ellos el 7 de mayo de 2025.","grading":"verified","not_tested":"The deadline binds national legislators only; an essential or important entity faces enforceable duties solely where and when its member state's transposing law is in force.","not_tested_es":"El plazo vincula solo a los legisladores nacionales; una entidad esencial o importante afronta deberes exigibles únicamente donde y cuando la ley de transposición de su Estado miembro está en vigor.","sources":[{"label":"Publications Office of the EU (Cellar), Official Journal text of Directive (EU) 2022/2555, Article 41, CELEX 32022L2555","url":"https://publications.europa.eu/resource/celex/32022L2555","accessed":"2026-08-19"},{"label":"European Commission (Shaping Europe's digital future), news of 7 May 2025 on reasoned opinions to 19 member states","url":"https://digital-strategy.ec.europa.eu/en/news/commission-calls-19-member-states-fully-transpose-nis2-directive","accessed":"2026-08-19"}],"related":["nis2-adoption-2022","nis2-cjeu-referral-2026","cer-transposition-deadline-2024"],"proposed":false},{"id":"cra-adoption-2024","date":"2024-10-23","date_precision":"day","instrument":"Cyber Resilience Act (Reg 2024/2847)","instrument_short":"CRA","area":"policy-law","type":"adoption","title_en":"Cyber Resilience Act (Reg 2024/2847) adopted","title_es":"Adoptado el Reglamento de Ciberresiliencia, el Reglamento 2024/2847","summary_en":"The European Parliament and the Council adopted Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements on 23 October 2024. It was published in the Official Journal on 20 November 2024 and entered into force on 10 December 2024, the twentieth day after publication.","summary_es":"El Parlamento Europeo y el Consejo adoptaron el Reglamento (UE) 2024/2847, sobre requisitos horizontales de ciberseguridad para los productos con elementos digitales, el 23 de octubre de 2024. Se publicó en el Diario Oficial el 20 de noviembre de 2024 y entró en vigor el 10 de diciembre de 2024, a los veinte días de su publicación.","grading":"verified","not_tested":"Adoption and entry into force placed no duties on manufacturers yet; the essential cybersecurity requirements apply from 11 December 2027, and pure cloud services outside remote data processing stay out of scope.","not_tested_es":"La adopción y la entrada en vigor no impusieron todavía deberes a los fabricantes; los requisitos esenciales de ciberseguridad se aplican desde el 11 de diciembre de 2027, y los servicios de nube puros ajenos al tratamiento remoto de datos quedan fuera del ámbito.","sources":[{"label":"Publications Office of the EU (Cellar), Official Journal text of Regulation (EU) 2024/2847 (OJ L, 2024/2847, 20.11.2024), CELEX 32024R2847","url":"https://publications.europa.eu/resource/celex/32024R2847","accessed":"2026-08-19"}],"related":["cra-reporting-obligations-2026","cra-application-2027"],"proposed":false},{"id":"pld-2024-adoption","date":"2024-10-23","date_precision":"day","instrument":"Product Liability Directive (Dir (EU) 2024/2853)","instrument_short":"PLD 2024","area":"policy-law","type":"adoption","title_en":"New Product Liability Directive (EU) 2024/2853 adopted","title_es":"Adoptada la nueva Directiva de responsabilidad por productos, la Directiva (UE) 2024/2853","summary_en":"The European Parliament and the Council adopted Directive (EU) 2024/2853 on liability for defective products on 23 October 2024, signed at Strasbourg. It brings software, including AI systems, within strict product liability, treats software updates, related digital services and machine learning as factors in defectiveness, eases the claimant's burden of proof through disclosure duties and rebuttable presumptions, and repeals Directive 85/374/EEC.","summary_es":"El Parlamento Europeo y el Consejo adoptaron la Directiva (UE) 2024/2853, sobre responsabilidad por los daños causados por productos defectuosos, el 23 de octubre de 2024, firmada en Estrasburgo. Somete el software, incluidos los sistemas de IA, a la responsabilidad objetiva por productos, trata las actualizaciones de software, los servicios digitales conexos y el aprendizaje automático como factores del carácter defectuoso, alivia la carga de la prueba del demandante mediante deberes de exhibición y presunciones refutables, y deroga la Directiva 85/374/CEE.","grading":"verified","not_tested":"Adoption bound no producer directly; the rules reach economic operators and injured persons only through national transposition, and products placed on the market before 9 December 2026 stay under the 1985 regime.","not_tested_es":"La adopción no vinculó directamente a ningún productor; las normas alcanzan a los operadores económicos y a los perjudicados solo por la transposición nacional, y los productos introducidos en el mercado antes del 9 de diciembre de 2026 permanecen bajo el régimen de 1985.","sources":[{"label":"EUR-Lex, Official Journal, Directive (EU) 2024/2853 (OJ L, 18.11.2024)","url":"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=OJ:L_202402853","accessed":"2026-08-19"}],"related":["pld-adoption-1985","pld-2024-entry-into-force","pld-2024-transposition-deadline"],"proposed":false},{"id":"pld-2024-entry-into-force","date":"2024-12-08","date_precision":"day","instrument":"Product Liability Directive (Dir (EU) 2024/2853)","instrument_short":"PLD 2024","area":"policy-law","type":"entry-into-force","title_en":"Directive (EU) 2024/2853 enters into force","title_es":"La Directiva (UE) 2024/2853 entra en vigor","summary_en":"Directive (EU) 2024/2853 was published in the Official Journal (L series) on 18 November 2024 and, under its Article 23, entered into force on the twentieth day following publication, which fell on 8 December 2024. From that date the two-year transposition clock ran towards 9 December 2026.","summary_es":"La Directiva (UE) 2024/2853 se publicó en el Diario Oficial (serie L) el 18 de noviembre de 2024 y, conforme a su artículo 23, entró en vigor a los veinte días de su publicación, lo que cayó el 8 de diciembre de 2024. Desde esa fecha corrió el reloj de transposición de dos años hacia el 9 de diciembre de 2026.","grading":"verified","not_tested":"Entry into force obliged the member states alone; producers and injured persons see no change in applicable liability rules until national transposition measures apply from 9 December 2026.","not_tested_es":"La entrada en vigor obligó únicamente a los Estados miembros; productores y perjudicados no ven ningún cambio en las normas de responsabilidad aplicables hasta que las medidas nacionales de transposición se apliquen desde el 9 de diciembre de 2026.","sources":[{"label":"EUR-Lex, Official Journal, Directive (EU) 2024/2853, Article 23 (OJ L, 18.11.2024)","url":"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=OJ:L_202402853","accessed":"2026-08-19"}],"related":["pld-2024-adoption","pld-2024-transposition-deadline"],"proposed":false},{"id":"dora-application-2025","date":"2025-01-17","date_precision":"day","instrument":"Digital Operational Resilience Act (Reg 2022/2554)","instrument_short":"DORA","area":"policy-law","type":"application","title_en":"DORA applies to EU financial entities","title_es":"DORA se aplica a las entidades financieras de la UE","summary_en":"Regulation (EU) 2022/2554 applies from 17 January 2025. As a regulation it is binding in its entirety and directly applicable in all member states, so financial entities must meet its ICT risk management, incident reporting, resilience testing and third-party risk requirements without national transposition.","summary_es":"El Reglamento (UE) 2022/2554 se aplica desde el 17 de enero de 2025. Como reglamento, es obligatorio en todos sus elementos y directamente aplicable en todos los Estados miembros, así que las entidades financieras deben cumplir sus requisitos de gestión del riesgo de las TIC, notificación de incidentes, pruebas de resiliencia y riesgo de terceros sin transposición nacional.","grading":"verified","not_tested":"DORA tests financial entities' ICT risk management while the cloud providers underneath answer chiefly through contract clauses, with direct EU oversight reaching only providers later designated as critical ICT third parties.","not_tested_es":"DORA somete a prueba la gestión del riesgo de las TIC de las entidades financieras mientras los proveedores de nube por debajo responden sobre todo por cláusulas contractuales, con una supervisión europea directa que alcanza solo a los proveedores designados después como terceros críticos de TIC.","sources":[{"label":"Publications Office of the EU (Cellar), Official Journal text of Regulation (EU) 2022/2554, Article 64, CELEX 32022R2554","url":"https://publications.europa.eu/resource/celex/32022R2554","accessed":"2026-08-19"}],"related":["dora-adoption-2022"],"proposed":false},{"id":"ai-act-prohibitions-application-2025","date":"2025-02-02","date_precision":"day","instrument":"AI Act (Reg 2024/1689)","instrument_short":"AI Act","area":"policy-law","type":"application","title_en":"Prohibitions and AI literacy duties start to apply","title_es":"Empiezan a aplicarse las prohibiciones y los deberes de alfabetización en IA","summary_en":"Chapters I and II of the AI Act apply from 2 February 2025. This brings in the Article 5 prohibitions on unacceptable AI practices and the Article 4 AI literacy duty for providers and deployers.","summary_es":"Los capítulos I y II del Reglamento de IA se aplican desde el 2 de febrero de 2025. Esto activa las prohibiciones del artículo 5 sobre prácticas de IA inaceptables y el deber de alfabetización en IA del artículo 4 para proveedores y responsables del despliegue.","grading":"verified","not_tested":"High-risk obligations, GPAI model duties, Article 50 transparency and the penalties chapter did not start on this date, and Member States did not yet need designated authorities.","not_tested_es":"Las obligaciones de alto riesgo, los deberes de los modelos de IA de propósito general, la transparencia del artículo 50 y el capítulo de sanciones no empezaron en esta fecha, y los Estados miembros aún no necesitaban autoridades designadas.","sources":[{"label":"Publications Office (CELLAR), Regulation (EU) 2024/1689, Article 113(a)","url":"http://publications.europa.eu/resource/celex/32024R1689","accessed":"2026-08-19"}],"related":["ai-act-entry-into-force-2024","ai-act-gpai-application-2025"],"proposed":false},{"id":"ehds-adoption-2025","date":"2025-02-11","date_precision":"day","instrument":"Regulation (EU) 2025/327 on the European Health Data Space","instrument_short":"EHDS","area":"policy-law","type":"adoption","title_en":"European Health Data Space Regulation adopted","title_es":"Adoptado el Reglamento del Espacio Europeo de Datos Sanitarios","summary_en":"Regulation (EU) 2025/327 creates a common framework for access to and exchange of electronic health data across the Union, covering both care and secondary use for research. It anchors one of Europe's most sensitive data pools inside EU governance rules rather than leaving it to third-country cloud and platform terms.","summary_es":"El Reglamento (UE) 2025/327 crea un marco común para el acceso a los datos sanitarios electrónicos y su intercambio en toda la Unión, cubriendo tanto la asistencia como el uso secundario para investigación. Ancla uno de los repositorios de datos más sensibles de Europa dentro de las reglas de gobernanza de la UE, en lugar de dejarlo a los términos de nubes y plataformas de terceros países.","grading":"verified","not_tested":"It does not change how member states organise or fund healthcare, and patients can opt out of secondary use of their data.","not_tested_es":"No cambia cómo los Estados miembros organizan o financian la sanidad, y los pacientes pueden oponerse al uso secundario de sus datos.","sources":[{"label":"Publications Office of the EU, Official Journal text of Regulation (EU) 2025/327 (CELEX 32025R0327)","url":"https://publications.europa.eu/resource/celex/32025R0327","accessed":"2026-08-19"}],"related":[],"proposed":false},{"id":"cada-call-for-evidence-2025","date":"2025-04-09","date_precision":"day","instrument":"Cloud and AI Development Act (call for evidence and public consultation)","instrument_short":"CADA","area":"policy-law","type":"guidance","title_en":"Commission opens CADA call for evidence and consultation","title_es":"La Comisión abre la convocatoria de datos y la consulta sobre la CADA","summary_en":"Alongside the AI Continent Action Plan, the Commission opened a call for evidence and public consultation on a future Cloud and AI Development Act, running from 9 April to 3 July 2025. It sought views on EU data centre capacity, the lack of a competitive large-scale EU cloud offer, and secure processing capacity at EU-located providers.","summary_es":"Junto al Plan de Acción del Continente de la IA, la Comisión abrió una convocatoria de datos y una consulta pública sobre una futura Ley de Desarrollo de la Nube y la IA, del 9 de abril al 3 de julio de 2025. Pedía opiniones sobre la capacidad de centros de datos de la UE, la falta de una oferta de nube europea competitiva a gran escala y la capacidad de tratamiento seguro en proveedores ubicados en la UE.","grading":"verified","not_tested":"A call for evidence collects views only; it committed the Commission to no text and imposed nothing on providers or buyers.","not_tested_es":"Una convocatoria de datos solo recoge opiniones; no comprometió a la Comisión con ningún texto y no impuso nada a proveedores ni a compradores.","sources":[{"label":"European Commission, Digital Strategy consultation page, Have Your Say: Future cloud and AI policies in the EU","url":"https://digital-strategy.ec.europa.eu/en/consultations/have-your-say-future-cloud-and-ai-policies-eu","accessed":"2026-08-19"}],"related":["cada-proposal-2026","csf-procurement-launch-2025"],"proposed":false},{"id":"eu-space-act-proposal-2025","date":"2025-06-25","date_precision":"day","instrument":"EU Space Act (Proposal for a Regulation on the safety, resilience and sustainability of space activities, COM(2025) 335)","instrument_short":"EU Space Act","area":"defence-space","type":"proposal","title_en":"Commission proposes the EU Space Act","title_es":"La Comisión propone la Ley Espacial de la UE","summary_en":"On 25 June 2025 the Commission proposed a single EU framework for the safety, resilience and cybersecurity of space activities, reaching non-EU operators that serve the Union market; as of August 2026 it remains under negotiation in Parliament and Council. Rules that bind third-country constellations make it a central sovereignty file for space.","summary_es":"El 25 de junio de 2025 la Comisión propuso un marco único de la UE para la seguridad, la resiliencia y la ciberseguridad de las actividades espaciales, que alcanza a los operadores no europeos que sirven al mercado de la Unión; en agosto de 2026 sigue en negociación en el Parlamento y el Consejo. Unas reglas que vinculan a las constelaciones de terceros países lo convierten en un expediente central de soberanía para el espacio.","grading":"verified","not_tested":"As a proposal it binds nobody yet, and activities carried out solely for defence or national security would fall outside its scope.","not_tested_es":"Como propuesta todavía no vincula a nadie, y las actividades realizadas exclusivamente con fines de defensa o de seguridad nacional quedarían fuera de su ámbito.","sources":[{"label":"European Commission, DG Defence Industry and Space, EU Space Act page","url":"https://defence-industry-space.ec.europa.eu/eu-space-act_en","accessed":"2026-08-19"}],"related":[],"proposed":false},{"id":"gpai-code-of-practice-2025","date":"2025-07-10","date_precision":"day","instrument":"General-Purpose AI Code of Practice (under AI Act, Reg 2024/1689)","instrument_short":"GPAI Code of Practice","area":"policy-law","type":"guidance","title_en":"Commission publishes the GPAI Code of Practice","title_es":"La Comisión publica el Código de Buenas Prácticas de la IA de propósito general","summary_en":"The Commission published the General-Purpose AI Code of Practice on 10 July 2025, three weeks before the GPAI obligations applied on 2 August 2025. Its transparency, copyright, and safety and security chapters give providers a voluntary route to demonstrate compliance with Articles 53 and 55.","summary_es":"La Comisión publicó el Código de Buenas Prácticas de la IA de propósito general el 10 de julio de 2025, tres semanas antes de que las obligaciones sobre estos modelos se aplicaran el 2 de agosto de 2025. Sus capítulos de transparencia, derechos de autor, y seguridad y protección dan a los proveedores una vía voluntaria para demostrar el cumplimiento de los artículos 53 y 55.","grading":"verified","not_tested":"The code is a voluntary compliance tool; it creates no new obligations and providers who decline to sign remain bound only by the AI Act itself.","not_tested_es":"El código es una herramienta voluntaria de cumplimiento; no crea obligaciones nuevas y los proveedores que declinan firmarlo siguen vinculados solo por el propio Reglamento de IA.","sources":[{"label":"European Commission, The General-Purpose AI Code of Practice","url":"https://digital-strategy.ec.europa.eu/en/policies/contents-code-gpai","accessed":"2026-08-19"}],"related":["ai-act-gpai-application-2025"],"proposed":false},{"id":"ai-act-gpai-application-2025","date":"2025-08-02","date_precision":"day","instrument":"AI Act (Reg 2024/1689)","instrument_short":"AI Act","area":"policy-law","type":"application","title_en":"GPAI, governance and penalties provisions start to apply","title_es":"Empiezan a aplicarse las disposiciones de IA de propósito general, gobernanza y sanciones","summary_en":"From 2 August 2025 the AI Act applies to notifying authorities (Chapter III Section 4), general-purpose AI models (Chapter V), governance (Chapter VII), penalties (Chapter XII) and confidentiality (Article 78). Article 101 on fines for GPAI model providers is excluded until the general application date.","summary_es":"Desde el 2 de agosto de 2025 el Reglamento de IA se aplica a las autoridades notificantes (capítulo III, sección 4), los modelos de IA de propósito general (capítulo V), la gobernanza (capítulo VII), las sanciones (capítulo XII) y la confidencialidad (artículo 78). El artículo 101, sobre multas a los proveedores de estos modelos, queda excluido hasta la fecha de aplicación general.","grading":"verified","not_tested":"High-risk Chapter III obligations and Article 50 transparency did not start; Article 101 fines were excluded, and GPAI models already on the market before this date have until 2 August 2027 to comply.","not_tested_es":"Las obligaciones de alto riesgo del capítulo III y la transparencia del artículo 50 no empezaron; las multas del artículo 101 quedaron excluidas, y los modelos de propósito general ya en el mercado antes de esta fecha tienen hasta el 2 de agosto de 2027 para cumplir.","sources":[{"label":"Publications Office (CELLAR), Regulation (EU) 2024/1689, Article 113(b)","url":"http://publications.europa.eu/resource/celex/32024R1689","accessed":"2026-08-19"}],"related":["gpai-code-of-practice-2025","ai-act-general-application-2026"],"proposed":false},{"id":"data-act-application-2025","date":"2025-09-12","date_precision":"day","instrument":"Data Act (Reg 2023/2854)","instrument_short":"Data Act","area":"policy-law","type":"application","title_en":"Data Act becomes applicable across the EU","title_es":"La Ley de Datos pasa a ser aplicable en toda la UE","summary_en":"Under Article 50 the Data Act applied from 12 September 2025, activating user access rights to connected-product data, rules against unfair contractual terms and cloud-switching duties. Chapter IV reaches contracts concluded on or before that date only from 12 September 2027, subject to conditions.","summary_es":"Conforme a su artículo 50, la Ley de Datos se aplicó desde el 12 de septiembre de 2025, activando los derechos de acceso de los usuarios a los datos de los productos conectados, las reglas contra cláusulas contractuales abusivas y los deberes de cambio de proveedor de nube. El capítulo IV alcanza a los contratos celebrados en esa fecha o antes solo desde el 12 de septiembre de 2027, con condiciones.","grading":"verified","not_tested":"The cloud-switching rules bind providers to remove exit obstacles while stopping short of any data localisation mandate; long-term legacy contracts stay outside Chapter IV until 2027.","not_tested_es":"Las reglas de cambio de proveedor obligan a retirar los obstáculos de salida sin llegar a ningún mandato de localización de datos; los contratos heredados de larga duración quedan fuera del capítulo IV hasta 2027.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2023/2854, Article 50 (CELEX 32023R2854)","url":"http://publications.europa.eu/resource/celex/32023R2854","accessed":"2026-08-19"}],"related":["data-act-adoption-2023"],"proposed":false},{"id":"aild-withdrawal-2025","date":"2025-10-06","date_precision":"day","instrument":"AI Liability Directive (proposal COM(2022) 496 final, 2022/0303(COD))","instrument_short":"AILD","area":"policy-law","type":"withdrawal","title_en":"Commission withdraws AI Liability Directive proposal","title_es":"La Comisión retira la propuesta de Directiva de responsabilidad en materia de IA","summary_en":"The withdrawal of the AI Liability Directive proposal became final on 6 October 2025, when it appeared in the Official Journal list of withdrawn Commission proposals (C/2025/5423); EUR-Lex records 6 October 2025 as the proposal's end of validity. The Commission had announced the intention in its work programme 2025 of 11 February 2025, giving as the reason that there was no foreseeable agreement, and stating it would assess whether another proposal should be tabled or another type of approach chosen.","summary_es":"La retirada de la propuesta de Directiva de responsabilidad en materia de IA fue firme el 6 de octubre de 2025, cuando apareció en la lista del Diario Oficial de propuestas retiradas de la Comisión (C/2025/5423); EUR-Lex registra el 6 de octubre de 2025 como fin de validez de la propuesta. La Comisión había anunciado la intención en su programa de trabajo 2025, de 11 de febrero de 2025, alegando que no había acuerdo previsible, y declarando que evaluaría si presentar otra propuesta o elegir otro tipo de enfoque.","grading":"verified","not_tested":"The withdrawal removes only the proposed AI-specific fault regime; Directive (EU) 2024/2853 still reaches AI systems as products, and national fault-based liability law continues to apply to AI-caused damage.","not_tested_es":"La retirada elimina solo el régimen de culpa específico de la IA propuesto; la Directiva (UE) 2024/2853 sigue alcanzando a los sistemas de IA como productos, y el derecho nacional de responsabilidad por culpa sigue aplicándose a los daños causados por IA.","sources":[{"label":"EUR-Lex, Official Journal C/2025/5423, Withdrawal of Commission proposals (CELEX 52025XC05423)","url":"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:52025XC05423","accessed":"2026-08-19"},{"label":"EUR-Lex, Commission work programme 2025, COM(2025) 45 final, Annex IV (CELEX 52025DC0045)","url":"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:52025DC0045","accessed":"2026-08-19"}],"related":["aild-proposal-2022","pld-2024-adoption"],"proposed":false},{"id":"eprivacy-regulation-withdrawal-2025","date":"2025-10-06","date_precision":"day","instrument":"ePrivacy Regulation (proposal COM(2017) 10)","instrument_short":"ePrivacy Regulation","area":"policy-law","type":"withdrawal","title_en":"Commission withdraws the ePrivacy Regulation proposal","title_es":"La Comisión retira la propuesta de Reglamento sobre la privacidad electrónica","summary_en":"The Commission formally withdrew the ePrivacy Regulation proposal in the list of withdrawn proposals published in the Official Journal as C/2025/5423 on 6 October 2025, closing procedure 2017/0003(COD). The withdrawal had been slated in the Commission work programme 2025 of February 2025, after eight years without agreement between the co-legislators.","summary_es":"La Comisión retiró formalmente la propuesta de Reglamento sobre la privacidad y las comunicaciones electrónicas en la lista de propuestas retiradas publicada en el Diario Oficial como C/2025/5423 el 6 de octubre de 2025, cerrando el procedimiento 2017/0003(COD). La retirada figuraba en el programa de trabajo 2025 de la Comisión, de febrero de 2025, tras ocho años sin acuerdo entre los colegisladores.","grading":"verified","not_tested":"The withdrawal closes procedure 2017/0003(COD) and leaves Directive 2002/58/EC and its national transpositions fully in force.","not_tested_es":"La retirada cierra el procedimiento 2017/0003(COD) y deja plenamente en vigor la Directiva 2002/58/CE y sus transposiciones nacionales.","sources":[{"label":"Official Journal of the EU, Withdrawal of Commission proposals, C/2025/5423, 6.10.2025","url":"http://publications.europa.eu/resource/oj/C_202505423","accessed":"2026-08-19"},{"label":"TechCrunch, EU abandons ePrivacy reform (work programme 2025 context)","url":"https://techcrunch.com/2025/02/12/eu-abandons-eprivacy-reform-as-bloc-shifts-focus-to-competitiveness-and-fostering-data-access-for-ai/","accessed":"2026-08-19"}],"related":["eprivacy-regulation-proposal-2017","eprivacy-directive-adoption-2002","digital-omnibus-gdpr-proposal-2025"],"proposed":false},{"id":"csf-procurement-launch-2025","date":"2025-10-10","date_precision":"day","instrument":"EU Cloud Sovereignty Framework (Cloud III Dynamic Purchasing System tender)","instrument_short":"Cloud Sovereignty Framework","area":"policy-law","type":"guidance","title_en":"Commission launches sovereignty-scored EUR 180 million cloud tender","title_es":"La Comisión lanza una licitación de nube de 180 millones de euros puntuada por soberanía","summary_en":"The Commission announced a EUR 180 million tender under the Cloud III Dynamic Purchasing System, scored against its new Cloud Sovereignty Framework, letting EU institutions, bodies, offices and agencies procure sovereign cloud services over six years from up to four providers. The framework measures sovereignty across eight dimensions and its graded levels prefigure the four-level framework later proposed in CADA.","summary_es":"La Comisión anunció una licitación de 180 millones de euros bajo el sistema dinámico de adquisición Cloud III, puntuada contra su nuevo Marco de Soberanía de la Nube, que permite a las instituciones, órganos y organismos de la UE contratar servicios de nube soberana durante seis años con hasta cuatro proveedores. El marco mide la soberanía en ocho dimensiones y sus niveles graduados prefiguran el marco de cuatro niveles propuesto después en la CADA.","grading":"verified","not_tested":"The framework binds procurement by EU institutions, bodies and agencies alone; member state buyers and private demand sit outside it.","not_tested_es":"El marco vincula solo la contratación de las instituciones, órganos y organismos de la UE; los compradores de los Estados miembros y la demanda privada quedan fuera.","sources":[{"label":"European Commission news, Commission moves forward on cloud sovereignty with EUR 180 million tender, 10 October 2025","url":"https://commission.europa.eu/news-and-media/news/commission-moves-forward-cloud-sovereignty-eur-180-million-tender-2025-10-10_en","accessed":"2026-08-19"}],"related":["cada-call-for-evidence-2025","cada-proposal-2026","eucs-sovereignty-criteria-2023"],"proposed":false},{"id":"ees-operational-2025","date":"2025-10-12","date_precision":"day","instrument":"Entry/Exit System (Reg 2017/2226)","instrument_short":"EES","area":"policy-law","type":"application","title_en":"Entry/Exit System begins progressive operations","title_es":"El Sistema de Entradas y Salidas inicia sus operaciones progresivas","summary_en":"The Commission set 12 October 2025 as the start of EES operations, opening a progressive rollout at the external borders of 29 European countries over six months. The system digitally records entries and exits of non-EU nationals on short stays.","summary_es":"La Comisión fijó el 12 de octubre de 2025 como inicio de las operaciones del SES, abriendo un despliegue progresivo en las fronteras exteriores de 29 países europeos durante seis meses. El sistema registra digitalmente las entradas y salidas de los nacionales de terceros países en estancias cortas.","grading":"verified","not_tested":"The 12 October 2025 start opened a six-month progressive rollout, so registration at every border crossing point was not yet required from day one.","not_tested_es":"El arranque del 12 de octubre de 2025 abrió un despliegue progresivo de seis meses, así que el registro en cada paso fronterizo todavía no era exigible desde el primer día.","sources":[{"label":"European Commission, Migration and Home Affairs news, Commission set launch date of the Entry/Exit System to 12 October 2025, 30 July 2025","url":"https://home-affairs.ec.europa.eu/news/commission-set-launch-date-entryexit-system-12-october-2025-2025-07-30_en","accessed":"2026-08-19"}],"related":["ees-fully-operational-2026","etias-delay-2026"],"proposed":false},{"id":"digital-omnibus-gdpr-proposal-2025","date":"2025-11-19","date_precision":"day","instrument":"Digital Omnibus Regulation (proposal COM(2025) 837)","instrument_short":"Digital Omnibus","area":"policy-law","type":"proposal","title_en":"Digital Omnibus proposes targeted GDPR amendments","title_es":"El Ómnibus Digital propone modificaciones selectivas del RGPD","summary_en":"The Commission tabled the Digital Omnibus Regulation, COM(2025) 837 final (procedure 2025/0360(COD)), on 19 November 2025. For the GDPR it would amend Articles 4, 5, 9, 12, 13, 22, 33 and 35 and insert new Articles 41a, 88a, 88b and 88c, moving terminal equipment and cookie rules from the ePrivacy Directive into the GDPR and creating a legitimate interest basis for AI training. As of August 2026 the file sits at committee stage in the Parliament (ITRE and LIBE jointly), with no Parliament or Council position adopted.","summary_es":"La Comisión presentó el Reglamento Ómnibus Digital, COM(2025) 837 final (procedimiento 2025/0360(COD)), el 19 de noviembre de 2025. Para el RGPD modificaría los artículos 4, 5, 9, 12, 13, 22, 33 y 35 e insertaría los nuevos artículos 41 bis, 88 bis, 88 ter y 88 quater, trasladando las reglas de equipo terminal y cookies de la Directiva sobre la privacidad electrónica al RGPD y creando una base de interés legítimo para el entrenamiento de IA. En agosto de 2026 el expediente está en fase de comisión en el Parlamento (ITRE y LIBE conjuntamente), sin posición adoptada del Parlamento ni del Consejo.","grading":"verified","not_tested":"The proposal binds nobody while negotiations continue; the GDPR as adopted in 2016 applies unchanged as of August 2026.","not_tested_es":"La propuesta no vincula a nadie mientras siguen las negociaciones; el RGPD tal como se adoptó en 2016 se aplica sin cambios en agosto de 2026.","sources":[{"label":"European Parliament, Legislative Train Schedule, Digital Omnibus Regulation Proposal","url":"https://www.europarl.europa.eu/legislative-train/theme-a-new-plan-for-europe-s-sustainable-prosperity-and-competitiveness/file-digital-package","accessed":"2026-08-19"},{"label":"iubenda blog, EU Digital Omnibus GDPR changes explained (article by article)","url":"https://www.iubenda.com/en/blog/eu-digital-omnibus-gdpr-changes-proposed-amendments-explained/","accessed":"2026-08-19"}],"related":["gdpr-adoption-2016","gdpr-application-2018","eprivacy-directive-amendment-2009","eprivacy-regulation-withdrawal-2025","digital-omnibus-proposal-2025"],"proposed":false},{"id":"digital-omnibus-proposal-2025","date":"2025-11-19","date_precision":"day","instrument":"Digital Omnibus on AI (COM(2025) 836)","instrument_short":"Digital Omnibus on AI","area":"policy-law","type":"proposal","title_en":"Commission proposes Digital Omnibus on AI","title_es":"La Comisión propone el Ómnibus Digital sobre la IA","summary_en":"On 19 November 2025 the Commission published the Digital Omnibus on AI proposal (COM(2025) 836, CELEX 52025PC0836), targeted amendments to simplify AI Act implementation. It proposed deferring the high-risk rules, with application at the latest by 2 December 2027 for Annex III systems and 2 August 2028 for Annex I systems.","summary_es":"El 19 de noviembre de 2025 la Comisión publicó la propuesta de Ómnibus Digital sobre la IA (COM(2025) 836, CELEX 52025PC0836), modificaciones selectivas para simplificar la aplicación del Reglamento de IA. Proponía diferir las reglas de alto riesgo, con aplicación a más tardar el 2 de diciembre de 2027 para los sistemas del anexo III y el 2 de agosto de 2028 para los del anexo I.","grading":"verified","not_tested":"The proposal changed nothing in force on its date; the February 2025 prohibitions and the August 2025 GPAI obligations continued to apply unchanged while negotiations ran.","not_tested_es":"La propuesta no cambió nada vigente en su fecha; las prohibiciones de febrero de 2025 y las obligaciones de propósito general de agosto de 2025 siguieron aplicándose sin cambios mientras corría la negociación.","sources":[{"label":"European Commission, Digital Omnibus on AI Regulation Proposal (digital-strategy.ec.europa.eu)","url":"https://digital-strategy.ec.europa.eu/en/library/digital-omnibus-ai-regulation-proposal","accessed":"2026-08-19"}],"related":["digital-omnibus-political-agreement-2026","digital-omnibus-delay-2026","digital-omnibus-gdpr-proposal-2025"],"proposed":false},{"id":"edip-adoption-2025","date":"2025-12-16","date_precision":"day","instrument":"Regulation (EU) 2025/2643 establishing the European Defence Industry Programme and a framework of measures to ensure the timely availability and supply of defence products (EDIP Regulation)","instrument_short":"EDIP","area":"defence-space","type":"adoption","title_en":"EDIP Regulation adopted","title_es":"Adoptado el Reglamento EDIP","summary_en":"Regulation (EU) 2025/2643 establishes the first dedicated EU defence industry programme, steering Union funding towards European suppliers and creating a framework to secure supply of defence products in crises. It writes a European preference into defence-industrial support, the sovereignty logic in statute form.","summary_es":"El Reglamento (UE) 2025/2643 establece el primer programa específico de la UE para la industria de defensa, orientando la financiación de la Unión hacia proveedores europeos y creando un marco para asegurar el suministro de productos de defensa en crisis. Escribe una preferencia europea en el apoyo a la industria de defensa, la lógica de la soberanía en forma de norma.","grading":"verified","not_tested":"It steers Union funding; member states remain free to procure non-EU defence equipment with national budgets.","not_tested_es":"Orienta la financiación de la Unión; los Estados miembros siguen siendo libres de adquirir equipos de defensa no europeos con presupuestos nacionales.","sources":[{"label":"Publications Office of the EU, Official Journal text of Regulation (EU) 2025/2643 (CELEX 32025R2643)","url":"https://publications.europa.eu/resource/celex/32025R2643","accessed":"2026-08-19"}],"related":[],"proposed":false},{"id":"procurement-revision-consultation-2026","date":"2026-01-26","date_precision":"day","instrument":"Revision of the 2014 Public Procurement Directives","instrument_short":"Procurement revision","area":"industry","type":"guidance","title_en":"Procurement directives revision consultation closes","title_es":"Cierra la consulta sobre la revisión de las directivas de contratación pública","summary_en":"The Commission's twelve-week public consultation on revising the 2014 Public Procurement Directives closed on 26 January 2026, following the evaluation report published in October 2025. The feedback feeds a legislative proposal announced for the second quarter of 2026 and now expected on 9 September 2026, with European-preference criteria among the announced elements.","summary_es":"La consulta pública de doce semanas de la Comisión sobre la revisión de las directivas de contratación pública de 2014 se cerró el 26 de enero de 2026, tras el informe de evaluación publicado en octubre de 2025. Las aportaciones alimentan una propuesta legislativa anunciada para el segundo trimestre de 2026 y ahora esperada el 9 de septiembre de 2026, con criterios de preferencia europea entre los elementos anunciados.","grading":"verified","not_tested":"A closed consultation changes no law; Directives 2014/23/EU, 2014/24/EU and 2014/25/EU keep applying unchanged until a proposal is adopted and transposed.","not_tested_es":"Una consulta cerrada no cambia ninguna ley; las Directivas 2014/23/UE, 2014/24/UE y 2014/25/UE siguen aplicándose sin cambios hasta que una propuesta se adopte y se transponga.","sources":[{"label":"TED (Tenders Electronic Daily), Provide your view on the revision of the EU public procurement directives","url":"https://ted.europa.eu/en/provide-your-view-on-the-revision-of-the-eu-public-procurement-directives","accessed":"2026-08-19"},{"label":"European Commission Public Buyers Community, Revision of the Public Procurement Directives","url":"https://public-buyers-community.ec.europa.eu/revision-public-procurement-directives","accessed":"2026-08-19"}],"related":["gpa-entry-into-force-1996"],"proposed":false},{"id":"ees-fully-operational-2026","date":"2026-04-10","date_precision":"day","instrument":"Entry/Exit System (Reg 2017/2226)","instrument_short":"EES","area":"policy-law","type":"application","title_en":"Entry/Exit System becomes fully operational","title_es":"El Sistema de Entradas y Salidas pasa a estar plenamente operativo","summary_en":"The Commission announced on 30 March 2026 that the EES would be fully operational on 10 April 2026, completing the progressive rollout. Passport stamping is replaced by digital records of entries, exits and refusals for short-stay travellers.","summary_es":"La Comisión anunció el 30 de marzo de 2026 que el SES estaría plenamente operativo el 10 de abril de 2026, completando el despliegue progresivo. El sellado de pasaportes se sustituye por registros digitales de entradas, salidas y denegaciones para los viajeros de estancia corta.","grading":"verified","not_tested":"Full operation concerns border registration only; under the AI Act's carve-out for Annex X large-scale IT systems, AI components placed in service before August 2027 have a compliance window running to the end of 2030.","not_tested_es":"La plena operación concierne solo al registro fronterizo; bajo la excepción del Reglamento de IA para los sistemas informáticos de gran magnitud del anexo X, los componentes de IA puestos en servicio antes de agosto de 2027 tienen una ventana de cumplimiento que corre hasta finales de 2030.","sources":[{"label":"European Commission, Migration and Home Affairs news, The Entry/Exit System will become fully operational on 10 April 2026, 30 March 2026","url":"https://home-affairs.ec.europa.eu/news/entryexit-system-will-become-fully-operational-10-april-2026-2026-03-30_en","accessed":"2026-08-19"}],"related":["ees-operational-2025"],"proposed":false},{"id":"digital-omnibus-political-agreement-2026","date":"2026-05-07","date_precision":"day","instrument":"Digital Omnibus on AI (Reg 2026/1744)","instrument_short":"Digital Omnibus on AI","area":"policy-law","type":"political-agreement","title_en":"Provisional deal reached on the Digital Omnibus on AI","title_es":"Acuerdo provisional sobre el Ómnibus Digital sobre la IA","summary_en":"On 7 May 2026 the Council presidency and European Parliament negotiators reached a provisional agreement on the Digital Omnibus on AI, part of the Omnibus VII simplification package. The deal confirmed deferral of the high-risk application dates agreed in the November 2025 proposal.","summary_es":"El 7 de mayo de 2026 la presidencia del Consejo y los negociadores del Parlamento Europeo alcanzaron un acuerdo provisional sobre el Ómnibus Digital sobre la IA, parte del paquete de simplificación Ómnibus VII. El acuerdo confirmó el aplazamiento de las fechas de aplicación de alto riesgo pactado en la propuesta de noviembre de 2025.","grading":"verified","not_tested":"A provisional agreement binds neither the institutions nor operators; the AI Act timetable stood unchanged until formal adoption on 8 July 2026 and publication on 24 July 2026.","not_tested_es":"Un acuerdo provisional no vincula ni a las instituciones ni a los operadores; el calendario del Reglamento de IA permaneció sin cambios hasta la adopción formal el 8 de julio de 2026 y la publicación el 24 de julio de 2026.","sources":[{"label":"Council of the EU press release 299/26, 7 May 2026","url":"https://www.consilium.europa.eu/en/press/press-releases/2026/05/07/artificial-intelligence-council-and-parliament-agree-to-simplify-and-streamline-rules/","accessed":"2026-08-19"}],"related":["digital-omnibus-proposal-2025","digital-omnibus-delay-2026"],"proposed":false},{"id":"eucs-stalled-2026","date":"2026-06-01","date_precision":"month","instrument":"EUCS, candidate European Cybersecurity Certification Scheme for Cloud Services","instrument_short":"EUCS","area":"policy-law","type":"delay","title_en":"EUCS still unadopted; CADA takes over sovereignty assurance","title_es":"El EUCS sigue sin adoptarse; la CADA asume la garantía de soberanía","summary_en":"No implementing act had adopted EUCS by August 2026, more than five years after the candidate draft. Reporting on the June 2026 package says the CADA proposal, COM(2026) 502, moves sovereignty assurance into its own four-level framework and has ENISA resume and finalise EUCS as a cybersecurity-only certification that complements it. The two assessments would be satisfied independently, so an EUCS certificate would never substitute for a CADA sovereignty level.","summary_es":"Ningún acto de ejecución había adoptado el EUCS en agosto de 2026, más de cinco años después del borrador candidato. La información publicada sobre el paquete de junio de 2026 indica que la propuesta CADA, COM(2026) 502, traslada la garantía de soberanía a su propio marco de cuatro niveles y encarga a ENISA retomar y finalizar el EUCS como una certificación solo de ciberseguridad que lo complementa. Las dos evaluaciones se satisfarían de forma independiente, así que un certificado EUCS nunca sustituiría a un nivel de soberanía CADA.","grading":"reported","not_tested":"No adopted scheme means no EUCS certificate exists for a buyer to require; the surviving draft grades cybersecurity controls and leaves sovereignty grading to CADA.","not_tested_es":"Sin esquema adoptado no existe certificado EUCS que un comprador pueda exigir; el borrador superviviente gradúa controles de ciberseguridad y deja la graduación de soberanía a la CADA.","sources":[{"label":"Qsentinel, EUCS Resumption, CSA2 and CADA: Cloud Certification Explained, July 2026","url":"https://qsentinel.com/knowledge-base/compliance/eucs-resumption-csa2-and-cada-cloud-certification-explained/","accessed":"2026-08-19"},{"label":"Centre for European Policy (cep), cepInput No. 8/2025, EU Cloud Certification at an Impasse, 25 April 2025","url":"https://www.cep.eu/fileadmin/user_upload/cep.eu/cepItalia/cepInput_EU_Cloud_Certification_at_an_Impasse.pdf","accessed":"2026-08-19"}],"related":["eucs-candidate-scheme-2020","eucs-sovereignty-criteria-2023","eucs-sovereignty-criteria-dropped-2024","cada-proposal-2026"],"proposed":false},{"id":"cada-proposal-2026","date":"2026-06-03","date_precision":"day","instrument":"Cloud and AI Development Act, proposal for a Regulation, COM(2026) 502","instrument_short":"CADA","area":"policy-law","type":"proposal","title_en":"Commission proposes the Cloud and AI Development Act","title_es":"La Comisión propone la Ley de Desarrollo de la Nube y la IA","summary_en":"The Commission adopted the CADA proposal, COM(2026) 502, on 3 June 2026 within its Tech Sovereignty Package; this was the legislative proposal, and Parliament had yet to allocate the file to a committee in August 2026. It sets out a cloud sovereignty framework with four assurance levels grading EU infrastructure location (Level 1), independence from third countries and supply chain transparency (Level 2), EU ownership and control (Level 3) and full transparency and control over the software supply chain (Level 4), with providers recognised by member states after an audit. Its procurement arm proposes a common EU-level framework for public administrations to pool purchasing power, alongside measures to triple EU data centre capacity within five to seven years.","summary_es":"La Comisión adoptó la propuesta CADA, COM(2026) 502, el 3 de junio de 2026 dentro de su Paquete de Soberanía Tecnológica; se trataba de la propuesta legislativa, y en agosto de 2026 el Parlamento aún no había asignado el expediente a una comisión. Establece un marco de soberanía de la nube con cuatro niveles de garantía que gradúan la ubicación de la infraestructura en la UE (nivel 1), la independencia de terceros países y la transparencia de la cadena de suministro (nivel 2), la propiedad y el control europeos (nivel 3) y la plena transparencia y control sobre la cadena de suministro del software (nivel 4), con proveedores reconocidos por los Estados miembros tras una auditoría. Su brazo de contratación propone un marco común a escala de la UE para que las administraciones públicas agrupen su poder de compra, junto a medidas para triplicar la capacidad de centros de datos de la UE en cinco a siete años.","grading":"verified","not_tested":"A proposal binds nobody until the co-legislators adopt it; even then the levels steer public sector procurement while private cloud buying stays untouched.","not_tested_es":"Una propuesta no vincula a nadie hasta que los colegisladores la adopten; incluso entonces los niveles orientan la contratación del sector público mientras la compra privada de nube queda intacta.","sources":[{"label":"European Commission, Digital Strategy library, Proposal for the Cloud and AI Development Act (CADA), COM(2026) 502","url":"https://digital-strategy.ec.europa.eu/en/library/proposal-cloud-and-ai-development-act-cada","accessed":"2026-08-19"},{"label":"European Commission, Digital Strategy policy page, Cloud and AI Development Act","url":"https://digital-strategy.ec.europa.eu/en/policies/cloud-and-ai-development-act","accessed":"2026-08-19"},{"label":"European Parliament, Legislative Train Schedule, Cloud and AI Development Act","url":"https://www.europarl.europa.eu/legislative-train/theme-a-new-plan-for-europe-s-sustainable-prosperity-and-competitiveness/file-cloud-and-ai-development-act","accessed":"2026-08-19"}],"related":["cada-call-for-evidence-2025","csf-procurement-launch-2025","eucs-candidate-scheme-2020","eucs-sovereignty-criteria-2023","eucs-sovereignty-criteria-dropped-2024","eucs-stalled-2026"],"proposed":false},{"id":"etias-delay-2026","date":"2026-07-01","date_precision":"month","instrument":"European Travel Information and Authorisation System (Reg 2018/1240)","instrument_short":"ETIAS","area":"policy-law","type":"delay","title_en":"ETIAS launch window dropped from official timeline","title_es":"La ventana de lanzamiento del ETIAS desaparece del calendario oficial","summary_en":"In July 2026 the official EU pages removed the last quarter of 2026 as the ETIAS launch window; the Commission now states only that a start date will be announced several months before launch. Reporting links the slip to EES stabilisation and points to 2027.","summary_es":"En julio de 2026 las páginas oficiales de la UE retiraron el último trimestre de 2026 como ventana de lanzamiento del ETIAS; la Comisión afirma ahora solo que la fecha de inicio se anunciará varios meses antes del lanzamiento. La prensa vincula el retraso a la estabilización del SES y apunta a 2027.","grading":"reported","not_tested":"Dropping the late 2026 window breaches no legal deadline, because the ETIAS Regulation leaves the start of operations to a later Commission decision.","not_tested_es":"Retirar la ventana de finales de 2026 no incumple ningún plazo legal, porque el Reglamento ETIAS deja el inicio de operaciones a una decisión posterior de la Comisión.","sources":[{"label":"etias.com article, ETIAS drops 2026 date as launch slips out of view, 16 July 2026","url":"https://etias.com/articles/etias-drops-2026-date-as-launch-slips-out-of-view","accessed":"2026-08-19"},{"label":"European Commission, Migration and Home Affairs, ETIAS policy page (states ETIAS is currently not in operation, no date given)","url":"https://home-affairs.ec.europa.eu/policies/schengen-borders-and-visa/smart-borders/european-travel-information-authorisation-system_en","accessed":"2026-08-19"}],"related":["etias-adopted-2018","ees-operational-2025"],"proposed":false},{"id":"nis2-cjeu-referral-2026","date":"2026-07-08","date_precision":"day","instrument":"NIS2 Directive (Dir 2022/2555)","instrument_short":"NIS2","area":"policy-law","type":"enforcement","title_en":"Four states referred to CJEU over late NIS2 transposition","title_es":"Cuatro Estados, llevados al TJUE por la transposición tardía de NIS2","summary_en":"On 8 July 2026 the Commission referred Ireland, Spain, France and the Netherlands to the Court of Justice of the European Union for failing to notify full NIS2 transposition, requesting a lump sum and daily penalties until complete transposition is notified. The referral followed letters of formal notice on 28 November 2024 and reasoned opinions on 7 May 2025.","summary_es":"El 8 de julio de 2026 la Comisión llevó a Irlanda, España, Francia y los Países Bajos ante el Tribunal de Justicia de la Unión Europea por no notificar la transposición completa de NIS2, solicitando una suma a tanto alzado y multas diarias hasta que se notifique la transposición completa. El recurso siguió a las cartas de emplazamiento del 28 de noviembre de 2024 y a los dictámenes motivados del 7 de mayo de 2025.","grading":"verified","not_tested":"The referral disciplines four governments' legislative delay; it creates no new duty for any entity, and any financial penalties would fall on the states concerned.","not_tested_es":"El recurso disciplina el retraso legislativo de cuatro gobiernos; no crea ningún deber nuevo para ninguna entidad, y las eventuales sanciones económicas recaerían sobre los Estados afectados.","sources":[{"label":"European Commission (Shaping Europe's digital future), news of 8 July 2026 on referral of Ireland, Spain, France and the Netherlands to the Court of Justice","url":"https://digital-strategy.ec.europa.eu/en/news/commission-refers-ireland-spain-france-and-netherlands-court-justice-failing-transpose-rules","accessed":"2026-08-19"}],"related":["nis2-adoption-2022","nis2-transposition-deadline-2024"],"proposed":false},{"id":"digital-omnibus-delay-2026","date":"2026-07-24","date_precision":"day","instrument":"Digital Omnibus on AI (Reg 2026/1744)","instrument_short":"Digital Omnibus on AI","area":"policy-law","type":"delay","title_en":"Digital Omnibus enacted, high-risk dates move to 2027 and 2028","title_es":"Promulgado el Ómnibus Digital: las fechas de alto riesgo pasan a 2027 y 2028","summary_en":"Regulation (EU) 2026/1744 of 8 July 2026 (Parliament position 16 June, Council decision 29 June) was published in the Official Journal on 24 July 2026 and entered into force on 27 July 2026. It rewrites Article 113 of the AI Act: Chapter III Sections 1 to 3 apply from 2 December 2027 for Annex III high-risk systems and from 2 August 2028 for Annex I systems, while newly added prohibitions and the legacy generative transparency grace period run to 2 December 2026.","summary_es":"El Reglamento (UE) 2026/1744, de 8 de julio de 2026 (posición del Parlamento el 16 de junio, decisión del Consejo el 29 de junio), se publicó en el Diario Oficial el 24 de julio de 2026 y entró en vigor el 27 de julio de 2026. Reescribe el artículo 113 del Reglamento de IA: las secciones 1 a 3 del capítulo III se aplican desde el 2 de diciembre de 2027 para los sistemas de alto riesgo del anexo III y desde el 2 de agosto de 2028 para los sistemas del anexo I, mientras que las prohibiciones recién añadidas y el periodo de gracia de transparencia para los sistemas generativos heredados corren hasta el 2 de diciembre de 2026.","grading":"verified","not_tested":"The delay touches only the Chapter III Sections 1 to 3 high-risk duties; the prohibitions, AI literacy, GPAI obligations and Article 50 transparency keep their existing application dates.","not_tested_es":"El aplazamiento toca solo los deberes de alto riesgo de las secciones 1 a 3 del capítulo III; las prohibiciones, la alfabetización en IA, las obligaciones de propósito general y la transparencia del artículo 50 conservan sus fechas de aplicación.","sources":[{"label":"Publications Office (CELLAR), Regulation (EU) 2026/1744, OJ L, 24.7.2026","url":"http://publications.europa.eu/resource/celex/32026R1744","accessed":"2026-08-19"}],"related":["digital-omnibus-proposal-2025","digital-omnibus-political-agreement-2026","ai-act-general-application-2026","ai-act-annex-i-application-2027"],"proposed":false},{"id":"ai-act-general-application-2026","date":"2026-08-02","date_precision":"day","instrument":"AI Act (Reg 2024/1689)","instrument_short":"AI Act","area":"policy-law","type":"application","title_en":"AI Act general application starts without high-risk rules","title_es":"Arranca la aplicación general del Reglamento de IA sin las reglas de alto riesgo","summary_en":"The AI Act's general application date under Article 113 is 2 August 2026, bringing in the Article 50 transparency obligations for generative and interactive systems and the Article 101 GPAI fines regime. Regulation (EU) 2026/1744, in force from 27 July 2026, carved the Chapter III Sections 1 to 3 high-risk obligations out of this date.","summary_es":"La fecha de aplicación general del Reglamento de IA bajo el artículo 113 es el 2 de agosto de 2026, activando las obligaciones de transparencia del artículo 50 para los sistemas generativos e interactivos y el régimen de multas del artículo 101 para los modelos de propósito general. El Reglamento (UE) 2026/1744, en vigor desde el 27 de julio de 2026, extrajo de esta fecha las obligaciones de alto riesgo de las secciones 1 a 3 del capítulo III.","grading":"verified","not_tested":"The Chapter III Sections 1 to 3 high-risk obligations do not start on this date (deferred to 2 December 2027 and 2 August 2028), and generative systems already on the market have until 2 December 2026 for Article 50(2).","not_tested_es":"Las obligaciones de alto riesgo de las secciones 1 a 3 del capítulo III no empiezan en esta fecha (diferidas al 2 de diciembre de 2027 y al 2 de agosto de 2028), y los sistemas generativos ya en el mercado tienen hasta el 2 de diciembre de 2026 para el artículo 50, apartado 2.","sources":[{"label":"Publications Office (CELLAR), Regulation (EU) 2024/1689, Article 113","url":"http://publications.europa.eu/resource/celex/32024R1689","accessed":"2026-08-19"},{"label":"Publications Office (CELLAR), Regulation (EU) 2026/1744, Article 1(40)","url":"http://publications.europa.eu/resource/celex/32026R1744","accessed":"2026-08-19"}],"related":["digital-omnibus-delay-2026","ai-act-annex-i-application-2027"],"proposed":false},{"id":"cra-reporting-obligations-2026","date":"2026-09-11","date_precision":"day","instrument":"Cyber Resilience Act (Reg 2024/2847)","instrument_short":"CRA","area":"policy-law","type":"application","title_en":"CRA manufacturer reporting obligations start","title_es":"Empiezan las obligaciones de notificación de los fabricantes bajo el Reglamento de Ciberresiliencia","summary_en":"From 11 September 2026, Article 14 of the Cyber Resilience Act applies: manufacturers must notify actively exploited vulnerabilities and severe incidents affecting their products with digital elements. Chapter IV (Articles 35 to 51), on conformity assessment bodies, has applied since 11 June 2026.","summary_es":"Desde el 11 de septiembre de 2026 se aplica el artículo 14 del Reglamento de Ciberresiliencia: los fabricantes deben notificar las vulnerabilidades explotadas activamente y los incidentes graves que afecten a sus productos con elementos digitales. El capítulo IV (artículos 35 a 51), sobre los organismos de evaluación de la conformidad, se aplica desde el 11 de junio de 2026.","grading":"verified","not_tested":"Article 14 tests reporting alone; the essential design and vulnerability-handling requirements, conformity assessment and CE marking bind manufacturers only from 11 December 2027.","not_tested_es":"El artículo 14 somete a prueba solo la notificación; los requisitos esenciales de diseño y gestión de vulnerabilidades, la evaluación de la conformidad y el marcado CE vinculan a los fabricantes solo desde el 11 de diciembre de 2027.","sources":[{"label":"Publications Office of the EU (Cellar), Official Journal text of Regulation (EU) 2024/2847, Article 71, CELEX 32024R2847","url":"https://publications.europa.eu/resource/celex/32024R2847","accessed":"2026-08-19"}],"related":["cra-adoption-2024","cra-application-2027"],"proposed":false},{"id":"pld-2024-transposition-deadline","date":"2026-12-09","date_precision":"day","instrument":"Product Liability Directive (Dir (EU) 2024/2853)","instrument_short":"PLD 2024","area":"policy-law","type":"application","title_en":"Deadline for transposing Directive (EU) 2024/2853","title_es":"Plazo de transposición de la Directiva (UE) 2024/2853","summary_en":"Member states must bring into force the laws, regulations and administrative provisions needed to comply with Directive (EU) 2024/2853 by 9 December 2026 (Article 22). Directive 85/374/EEC is repealed with effect from the same date, though it continues to apply to products placed on the market or put into service before then (Article 21).","summary_es":"Los Estados miembros deben poner en vigor las disposiciones legales, reglamentarias y administrativas necesarias para cumplir la Directiva (UE) 2024/2853 a más tardar el 9 de diciembre de 2026 (artículo 22). La Directiva 85/374/CEE queda derogada con efectos desde la misma fecha, aunque sigue aplicándose a los productos introducidos en el mercado o puestos en servicio antes (artículo 21).","grading":"verified","not_tested":"The new regime reaches only products placed on the market or put into service from 9 December 2026; earlier products remain under Directive 85/374/EEC, and property used exclusively for professional purposes stays outside it.","not_tested_es":"El nuevo régimen alcanza solo a los productos introducidos en el mercado o puestos en servicio desde el 9 de diciembre de 2026; los anteriores permanecen bajo la Directiva 85/374/CEE, y los bienes usados exclusivamente con fines profesionales quedan fuera.","sources":[{"label":"EUR-Lex, Official Journal, Directive (EU) 2024/2853, Articles 21 and 22 (OJ L, 18.11.2024)","url":"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=OJ:L_202402853","accessed":"2026-08-19"}],"related":["pld-2024-adoption","pld-2024-entry-into-force","pld-adoption-1985"],"proposed":false},{"id":"machinery-regulation-application-2027","date":"2027-01-20","date_precision":"day","instrument":"Machinery Regulation (Reg 2023/1230)","instrument_short":"Machinery Reg","area":"policy-law","type":"application","title_en":"Machinery Regulation applies from 20 January 2027","title_es":"El Reglamento de Máquinas se aplica desde el 20 de enero de 2027","summary_en":"Regulation 2023/1230 applies from 20 January 2027, the date set by the corrigendum of 4 July 2023, which corrected the originally published 14 January 2027. Directive 2006/42/EC is repealed with effect from the same day.","summary_es":"El Reglamento 2023/1230 se aplica desde el 20 de enero de 2027, la fecha fijada por la corrección de errores de 4 de julio de 2023, que corrigió el 14 de enero de 2027 publicado originalmente. La Directiva 2006/42/CE queda derogada con efectos desde el mismo día.","grading":"verified","not_tested":"A sector conformity regime the AI Act plugs into for high-risk classification of machinery safety components; it does not itself regulate the AI model.","not_tested_es":"Un régimen sectorial de conformidad al que el Reglamento de IA se conecta para la clasificación de alto riesgo de los componentes de seguridad de las máquinas; no regula por sí mismo el modelo de IA.","sources":[{"label":"Publications Office of the EU, Corrigendum to Regulation (EU) 2023/1230, OJ L 169 of 4.7.2023","url":"http://publications.europa.eu/resource/celex/32023R1230R%2801%29","accessed":"2026-08-19"},{"label":"Publications Office of the EU, Regulation (EU) 2023/1230, Article 54 (CELEX 32023R1230)","url":"http://publications.europa.eu/resource/celex/32023R1230","accessed":"2026-08-19"}],"related":["machinery-regulation-adoption-2023"],"proposed":false},{"id":"ai-act-annex-i-application-2027","date":"2027-08-02","date_precision":"day","instrument":"AI Act (Reg 2024/1689)","instrument_short":"AI Act","area":"policy-law","type":"application","title_en":"Original 2027 start date for Annex I high-risk systems","title_es":"La fecha original de 2027 para los sistemas de alto riesgo del anexo I","summary_en":"As adopted in 2024, Article 113 point (c) set 2 August 2027 for Article 6(1) and the corresponding obligations covering AI systems in products under the Annex I Union harmonisation legislation. Regulation (EU) 2026/1744 replaced this point before it took effect and set 2 August 2028 for Annex I systems.","summary_es":"Tal como se adoptó en 2024, el artículo 113, letra c), fijaba el 2 de agosto de 2027 para el artículo 6, apartado 1, y las obligaciones correspondientes que cubren los sistemas de IA en productos bajo la legislación de armonización de la Unión del anexo I. El Reglamento (UE) 2026/1744 sustituyó esta letra antes de que surtiera efecto y fijó el 2 de agosto de 2028 para los sistemas del anexo I.","grading":"verified","not_tested":"This original date now binds no one; Regulation (EU) 2026/1744 superseded it, and embedded-product high-risk duties start on 2 August 2028 instead.","not_tested_es":"Esta fecha original ya no vincula a nadie; el Reglamento (UE) 2026/1744 la superó, y los deberes de alto riesgo de los productos con IA embebida empiezan en su lugar el 2 de agosto de 2028.","sources":[{"label":"Publications Office (CELLAR), Regulation (EU) 2024/1689, Article 113(c)","url":"http://publications.europa.eu/resource/celex/32024R1689","accessed":"2026-08-19"},{"label":"Publications Office (CELLAR), Regulation (EU) 2026/1744, Article 1(40)","url":"http://publications.europa.eu/resource/celex/32026R1744","accessed":"2026-08-19"}],"related":["digital-omnibus-delay-2026","ai-act-general-application-2026"],"proposed":false},{"id":"cra-application-2027","date":"2027-12-11","date_precision":"day","instrument":"Cyber Resilience Act (Reg 2024/2847)","instrument_short":"CRA","area":"policy-law","type":"application","title_en":"Cyber Resilience Act applies in full","title_es":"El Reglamento de Ciberresiliencia se aplica plenamente","summary_en":"From 11 December 2027, Regulation (EU) 2024/2847 applies in full. Products with digital elements placed on the EU market must meet the essential cybersecurity requirements and carry CE marking following conformity assessment.","summary_es":"Desde el 11 de diciembre de 2027 el Reglamento (UE) 2024/2847 se aplica en su totalidad. Los productos con elementos digitales introducidos en el mercado de la UE deben cumplir los requisitos esenciales de ciberseguridad y llevar el marcado CE tras la evaluación de la conformidad.","grading":"verified","not_tested":"The obligations attach to products placed on the market from that date; standalone software as a service beyond remote data processing solutions stays outside the Regulation.","not_tested_es":"Las obligaciones se aplican a los productos introducidos en el mercado desde esa fecha; el software autónomo como servicio, más allá de las soluciones de tratamiento remoto de datos, queda fuera del Reglamento.","sources":[{"label":"Publications Office of the EU (Cellar), Official Journal text of Regulation (EU) 2024/2847, Article 71, CELEX 32024R2847","url":"https://publications.europa.eu/resource/celex/32024R2847","accessed":"2026-08-19"}],"related":["cra-adoption-2024","cra-reporting-obligations-2026"],"proposed":false}]}