Save This

Key dates for EU initiatives

Last Updated: January 2024

The IAPP created this timeline of key dates for the primary EU regulations and initiatives affecting privacy. The IAPP additionally published an overview of the new EU legislation adopted under the EU’s Strategy for Data.

Full timeline of key dates

Note: Key dates filtered by specific initiatives are available here.

2012

25 January 2012: GDPR proposed.

2014

12 March 2014: GDPR Parliament position adopted for negotiations.

2015

June 2015: GDPR trilogue negotiations started.
15 June 2015: GDPR Council position adopted.
15 December 2015: GDPR provisional agreement reached.

2016

14 April 2016: GDPR adopted.
24 May 2016: GDPR entered into force.

2017

10 January 2017: ePrivacy Regulation proposed.
25 October 2017: ePrivacy Regulation Parliament position adopted for negotiations.

2018

17 April 2018: e-Evidence Regulation proposed.
25 May 2018: GDPR applicable.
7 December 2018: e-Evidence Regulation Council position adopted.

2020

24 September 2020: DORA proposed.
25 November 2020: DGA proposed.
15 December 2020: DSA proposed.
15 December 2020: DMA proposed.
16 December 2020: NIS2 Directive proposed.
16 December 2020: e-Evidence Regulation Parliament position adopted for negotiations.

2021

January 2021: e-Evidence Regulation trilogue negotiations started.
10 February 2021: ePrivacy Regulation Council position adopted.
21 April 2021: AI Act proposed.
May 2021: ePrivacy Regulation trilogue negotiations started.
3 June 2021: Revised eIDAS Regulation proposed.
22 July 2021: DGA Parliament position adopted for negotiations.
October 2021: DGA trilogue negotiations started.
1 October 2021: DGA Council position adopted.
22 November 2021: NIS2 Directive Parliament position adopted for negotiations.
24 November 2021: DORA Council position adopted.
25 November 2021: DMA Council position adopted.
25 November 2021: DSA Council position adopted.
30 November 2021: DGA provisional agreement reached.
3 December 2021: NIS2 Directive Council position adopted.
15 December 2021: DMA Parliament position adopted for negotiations.
15 December 2021: DORA Parliament position adopted for negotiations.

2022

January 2022: DMA trilogue negotiations started.
January 2022: NIS2 Directive trilogue negotiations started.
January 2022: DORA trilogue negotiations started.
January 2022: DSA trilogue negotiations started.
20 January 2022: DSA Parliament position adopted for negotiations.
23 February 2022: Data Act proposed.
25 March 2022: DMA provisional agreement reached.
23 April 2022: DSA provisional agreement reached.
3 May 2022: EHDS proposed.
10 May 2022: DORA provisional agreement reached.
11 May 2022: CSAM Regulation proposed.
12 May 2022: NIS2 Directive provisional agreement reached.
16 May 2022: DGA adopted.
23 June 2022: DGA entered into force.
18 July 2022: DMA adopted.
15 September 2022: CRA proposed.
28 September 2022: AI Liability Directive proposed.
4 October 2022: DSA adopted.
1 November 2022: DMA entered into force.
16 November 2022: DSA entered into force.
28 November 2022: NIS2 Directive adopted.
28 November 2022: DORA adopted.
6 December 2022: AI Act Council position adopted.
6 December 2022: Revised eIDAS Regulation Council position adopted.

2023

16 January 2023: NIS2 Directive entered into force.
16 January 2023: DORA entered into force.
25 January 2023: e-Evidence Regulation provisional agreement reached.
March 2023: Data Act trilogue negotiations started.
March 2023: Revised eIDAS Regulation trilogue negotiations started.
14 March 2023: Data Act Parliament position adopted for negotiations.
16 March 2023: Revised eIDAS Regulation Parliament position adopted for negotiations.
24 March 2023: Data Act Council position adopted.
2 May 2023: DMA applicable.
June 2023: AI Act trilogue negotiations started.
14 June 2023: AI Act Parliament position adopted for negotiations.
27 June 2023: e-Evidence Regulation adopted.
27 June 2023: Data Act provisional agreement reached.
4 July 2023: GDPR Enforcement Procedure Regulation proposed.
19 July 2023: CRA Council position adopted.
17 August 2023: e-Evidence Regulation enters into force.
September 2023: CRA trilogue negotiations started.
13 September 2023: CRA Parliament position adopted for negotiations.
24 September 2023: DGA applicable.
8 November 2023: Revised eIDAS Regulation provisional agreement reached.
22 November 2023: CSAM Regulation Parliament position adopted for negotiations.
27 November 2023: Data Act adopted.
30 November 2023: CRA provisional agreement reached.
6 December 2023: EHDS Council position adopted.
8 December 2023: AI Act provisional agreement reached.
13 December 2023: EHDS Parliament position adopted for negotiations.

2024

Early 2024: AI Act to be adopted.
Early 2024: AI Act expected to enter into force.
11 January 2024: Data Act entered into force.
17 February 2024: DSA applicable.
18 October 2024: NIS2 Directive applicable.
European Parliament elections in June 2024 and the new European Commission expected to take office in November 2024 may affect negotiations required to finalize any proposals. If negotiations were not finalized by March 2024, the proposals are unlikely to pass in the current term.

2025

17 January 2025: DORA applicable.
12 September 2025: Data Act applicable.

2026

Early 2026: AI Act expected to apply.
18 August 2026: e-Evidence Regulation applicable.

Key dates by EU initiative

Artificial Intelligence Act (AI Act)
Key dates
- 21 April 2021: AI Act proposed.
- 6 December 2022: AI Act Council position adopted.
- June 2023: AI Act trilogue negotiations started.
- 14 June 2023: AI Act Parliament position adopted for negotiations.
- 8 December 2023: AI Act provisional agreement reached.
- Early 2024: AI Act to be adopted.
- Early 2024: AI Act expected to enter into force.
- Early 2026: AI Act expected to apply.
Artificial Intelligence Liability Directive (AI Liability Directive)
Key dates
- 28 September 2022: AI Liability Directive proposed.
Child Sexual Abuse Material Regulation (CSAM Regulation)
Key dates
- 11 May 2022: CSAM Regulation proposed.
- 22 November 2023: CSAM Regulation Parliament position adopted for negotiations.
Cyber Resilience Act (CRA)
Key dates
- 15 September 2022: CRA proposed.
- 19 July 2023: CRA Council position adopted.
- September 2023: CRA trilogue negotiations started.
- 13 September 2023: CRA Parliament position adopted for negotiations.
- 30 November 2023: CRA provisional agreement reached.
Data Act
Key dates
- 23 February 2022: Data Act proposed.
- March 2023: Data Act trilogue negotiations started.
- 14 March 2023: Data Act Parliament position adopted for negotiations.
- 24 March 2023: Data Act Council position adopted.
- 27 June 2023: Data Act provisional agreement reached.
- 27 November 2023: Data Act adopted.
- 11 January 2024: Data Act entered into force.
- 12 September 2025: Data Act applicable.
Data Governance Act (DGA)
Key dates
- 25 November 2020: DGA proposed.
- 22 July 2021: DGA Parliament position adopted for negotiations.
- October 2021: DGA trilogue negotiations started.
- 1 October 2021: DGA Council position adopted.
- 30 November 2021: DGA provisional agreement reached.
- 16 May 2022: DGA adopted.
- 23 June 2022: DGA entered into force.
- 24 September 2023: DGA applicable.
Digital Markets Act (DMA)
Key dates
- 15 December 2020: DMA proposed.
- 25 November 2021: DMA Council position adopted.
- 15 December 2021: DMA Parliament position adopted for negotiations.
- January 2022: DMA trilogue negotiations started.
- 25 March 2022: DMA provisional agreement reached.
- 18 July 2022: DMA adopted.
- 1 November 2022: DMA entered into force.
- 2 May 2023: DMA applicable.
Digital Operational Resilience Act (DORA)
Key dates
- 24 September 2020: DORA proposed.
- 24 November 2021: DORA Council position adopted.
- 15 December 2021: DORA Parliament position adopted for negotiations.
- January 2022: DORA trilogue negotiations started.
- 10 May 2022: DORA provisional agreement reached.
- 28 November 2022: DORA adopted.
- 16 January 2023: DORA entered into force.
- 17 January 2025: DORA applicable.
Digital Services Act (DSA)
Key dates
- 15 December 2020: DSA proposed.
- 25 November 2021: DSA Council position adopted.
- January 2022: DSA trilogue negotiations started.
- 20 January 2022: DSA Parliament position adopted for negotiations.
- 23 April 2022: DSA provisional agreement reached.
- 4 October 2022: DSA adopted.
- 16 November 2022: DSA entered into force.
- 17 February 2024: DSA applicable.
e-Evidence Regulation
Key dates
- 17 April 2018: e-Evidence Regulation proposed.
- 7 December 2018: e-Evidence Regulation Council position adopted.
- 16 December 2020: e-Evidence Regulation Parliament position adopted for negotiations.
- January 2021: e-Evidence Regulation trilogue negotiations started.
- 18 August 2026: e-Evidence Regulation applicable.
ePrivacy Regulation
Key dates
- 10 January 2017: ePrivacy Regulation proposed.
- 25 October 2017: ePrivacy Regulation Parliament position adopted for negotiations.
- 10 February 2021: ePrivacy Regulation Council position adopted.
- May 2021: ePrivacy Regulation trilogue negotiations started.
European Health Data Space (EHDS)
Key dates
- 3 May 2022: EHDS proposed.
- 6 December 2023: EHDS Council position adopted.
- 13 December 2023: EHDS Parliament position adopted for negotiations.
GDPR Enforcement Procedure Regulation
Key dates
- 4 July 2023: GDPR Enforcement Procedure Regulation proposed.
General Data Protection Regulation (GDPR)
Key dates
- 25 January 2012: GDPR proposed.
- 12 March 2014: GDPR Parliament position adopted for negotiations.
- June 2015: GDPR trilogue negotiations started.
- 15 June 2015: GDPR Council position adopted.
- 15 December 2015: GDPR provisional agreement reached.
- 14 April 2016: GDPR adopted.
- 24 May 2016: GDPR entered into force.
- 25 May 2018: GDPR applicable.
NIS2 Directive
Key dates
- 16 December 2020: NIS2 Directive proposed.
- 22 November 2021: NIS2 Directive Parliament position adopted for negotiations.
- 3 December 2021: NIS2 Directive Council position adopted.
- January 2022: NIS2 Directive trilogue negotiations started.
- 12 May 2022: NIS2 Directive provisional agreement reached.
- 28 November 2022: NIS2 Directive adopted.
- 16 January 2023: NIS2 Directive entered into force.
- 18 October 2024: NIS2 Directive applicable.
Revised eIDAS Regulation
Key dates
- 3 June 2021: Revised eIDAS Regulation proposed.
- 6 December 2022: Revised eIDAS Regulation Council position adopted.
- March 2023: Revised eIDAS Regulation trilogue negotiations started.
- 16 March 2023: Revised eIDAS Regulation Parliament position adopted for negotiations.
- 8 November 2023: Revised eIDAS Regulation provisional agreement reached.

Tags: , , ,

Europe

On this topic page, you can find the IAPP’s collection of coverage, analysis and resources related to privacy in the European region....

European Institutions Privacy Stakeholder Map

To better understand the entities involved in EU privacy rulemaking, this graphic provides an overview of the institutions, their roles, their specific areas of responsibility, and their current leadership....

Read More Save This

EU decision-making at a glance: How do EU laws get approved?

This chart describes the main steps of the codecision procedure, the most common decision-making procedure among EU Institutions....

Read More Save This

EU Data Initiatives in Context

The IAPP published this infographic that puts recent data initiatives in the European Union in context....

Read More Save This

EU-US Data Privacy Framework – Guidance and Resources

The European Commission adopted its adequacy decision for the EU-U.S. Data Privacy Framework 10 July. This page will stay updated with the latest guidance documents and resources covering what these new rules say, how they work and what comes next as the framework takes effect....

Read More Save This

ResourceCenter

All the privacy tools and information you need in one easy-to-find place

Key dates for EU initiatives

Key dates for EU initiatives

Related Stories