The IAPP created a timeline of key dates for the primary EU regulations and initiatives affecting privacy. In the instance an initiative has not been finalized, we have included the positions of the institutions. The IAPP additionally published an overview of the EU's data strategy and an infographic on EU data initiatives.
14 March 2023: Data Act Parliament position adopted for negotiations.
May 2023: AI Act Parliament expected to adopt position.
June 2023: AI Act trilogue negotiations expected to start.
2 May 2023: DMA applicable.
24 September 2023: DGA applicable.
2024 and beyond
17 February 2024: DSA applicable.
Spring 2024 AI Act to be adopted.
Mid-2024: Data Act expected to enter into force.
18 October 2024: NIS2 applicable.
17 January 2025: DORA applicable.
Note: European parliamentary elections in May 2024 and the new European Commission expected to take office in November 2024 may affect negotiations required to finalize any proposals. If negotiations were not finalized by March 2023, the proposals are unlikely to pass in the current term.
To better understand the entities involved in EU privacy rulemaking, this chart provides an overview of the institutions, the nature of their role, the specific areas of responsibilities, and current leadership....
The European Commission adopted its adequacy decision for the EU-U.S. Data Privacy Framework 10 July. This page will stay updated with the latest guidance documents and resources covering what these new rules say, how they work and what comes next as the framework takes effect....
