Introduction to Resource Center
This page provides an overview of the IAPP's Resource Center offerings.

Contact Resource Center
For any Resource Center related inquiries, please reach out to resourcecenter@iapp.org.



Resource Center / Tools and Trackers / Key dates for EU initiatives

Key dates for EU initiatives

This timeline provides key dates for the primary EU regulations and initiatives affecting privacy.

Last updated: January 2024

Contributors:

Anokhy Desai
Laura Pliauškaitė

The IAPP created this timeline of key dates for the primary EU regulations and initiatives affecting privacy. The IAPP additionally published an overview of the new EU legislation adopted under the EU’s Strategy for Data.

Full timeline of key dates

Note: Key dates filtered by specific initiatives are available here.

2012

2014

  • 12 March 2014: GDPR Parliament position adopted for negotiations.

2015

  • June 2015: GDPR trilogue negotiations started.
  • 15 June 2015: GDPR Council position adopted.
  • 15 December 2015: GDPR provisional agreement reached.

2016

  • 14 April 2016: GDPR adopted.
  • 24 May 2016: GDPR entered into force.

2017

  • 10 January 2017: ePrivacy Regulation proposed.
  • 25 October 2017: ePrivacy Regulation Parliament position adopted for negotiations.

2018

  • 17 April 2018: e-Evidence Regulation proposed.
  • 25 May 2018: GDPR applicable.
  • 7 December 2018: e-Evidence Regulation Council position adopted.

2020

  • 24 September 2020: DORA proposed.
  • 25 November 2020: DGA proposed.
  • 15 December 2020: DSA proposed.
  • 15 December 2020: DMA proposed.
  • 16 December 2020: NIS2 Directive proposed.
  • 16 December 2020: e-Evidence Regulation Parliament position adopted for negotiations.

2021

  • January 2021: e-Evidence Regulation trilogue negotiations started.
  • 10 February 2021: ePrivacy Regulation Council position adopted.
  • 21 April 2021: AI Act proposed.
  • May 2021: ePrivacy Regulation trilogue negotiations started.
  • 3 June 2021: Revised eIDAS Regulation proposed.
  • 22 July 2021: DGA Parliament position adopted for negotiations.
  • October 2021: DGA trilogue negotiations started.
  • 1 October 2021: DGA Council position adopted.
  • 22 November 2021: NIS2 Directive Parliament position adopted for negotiations.
  • 24 November 2021: DORA Council position adopted.
  • 25 November 2021: DMA Council position adopted.
  • 25 November 2021: DSA Council position adopted.
  • 30 November 2021: DGA provisional agreement reached.
  • 3 December 2021: NIS2 Directive Council position adopted.
  • 15 December 2021: DMA Parliament position adopted for negotiations.
  • 15 December 2021: DORA Parliament position adopted for negotiations.

2022

  • January 2022: DMA trilogue negotiations started.
  • January 2022: NIS2 Directive trilogue negotiations started.
  • January 2022: DORA trilogue negotiations started.
  • January 2022: DSA trilogue negotiations started.
  • 20 January 2022: DSA Parliament position adopted for negotiations.
  • 23 February 2022: Data Act proposed.
  • 25 March 2022: DMA provisional agreement reached.
  • 23 April 2022: DSA provisional agreement reached.
  • 3 May 2022: EHDS proposed.
  • 10 May 2022: DORA provisional agreement reached.
  • 11 May 2022: CSAM Regulation proposed.
  • 12 May 2022: NIS2 Directive provisional agreement reached.
  • 16 May 2022: DGA adopted.
  • 23 June 2022: DGA entered into force.
  • 18 July 2022: DMA adopted.
  • 15 September 2022: CRA proposed.
  • 28 September 2022: AI Liability Directive proposed.
  • 4 October 2022: DSA adopted.
  • 1 November 2022: DMA entered into force.
  • 16 November 2022: DSA entered into force.
  • 28 November 2022: NIS2 Directive adopted.
  • 28 November 2022: DORA adopted.
  • 6 December 2022: AI Act Council position adopted.
  • 6 December 2022: Revised eIDAS Regulation Council position adopted.

2023

  • 16 January 2023: NIS2 Directive entered into force.
  • 16 January 2023: DORA entered into force.
  • 25 January 2023: e-Evidence Regulation provisional agreement reached.
  • March 2023: Data Act trilogue negotiations started.
  • March 2023: Revised eIDAS Regulation trilogue negotiations started.
  • 14 March 2023: Data Act Parliament position adopted for negotiations.
  • 16 March 2023: Revised eIDAS Regulation Parliament position adopted for negotiations.
  • 24 March 2023: Data Act Council position adopted.
  • 2 May 2023: DMA applicable.
  • June 2023: AI Act trilogue negotiations started.
  • 14 June 2023: AI Act Parliament position adopted for negotiations.
  • 27 June 2023: e-Evidence Regulation adopted.
  • 27 June 2023: Data Act provisional agreement reached.
  • 4 July 2023: GDPR Enforcement Procedure Regulation proposed.
  • 19 July 2023: CRA Council position adopted.
  • 17 August 2023: e-Evidence Regulation enters into force.
  • September 2023: CRA trilogue negotiations started.
  • 13 September 2023: CRA Parliament position adopted for negotiations.
  • 24 September 2023: DGA applicable.
  • 8 November 2023: Revised eIDAS Regulation provisional agreement reached.
  • 22 November 2023: CSAM Regulation Parliament position adopted for negotiations.
  • 27 November 2023: Data Act adopted.
  • 30 November 2023: CRA provisional agreement reached.
  • 6 December 2023: EHDS Council position adopted.
  • 8 December 2023: AI Act provisional agreement reached.
  • 13 December 2023: EHDS Parliament position adopted for negotiations.

    • 2024

    • Early 2024: AI Act to be adopted.
    • Early 2024: AI Act expected to enter into force.
    • 11 January 2024: Data Act entered into force.
    • 17 February 2024: DSA applicable.
    • 18 October 2024: NIS2 Directive applicable.
    • European Parliament elections in June 2024 and the new European Commission expected to take office in November 2024 may affect negotiations required to finalize any proposals. If negotiations were not finalized by March 2024, the proposals are unlikely to pass in the current term.

    2025

    2026

    • Early 2026: AI Act expected to apply.
    • 18 August 2026: e-Evidence Regulation applicable.

Key dates by EU initiative

  • expand_more

    Artificial Intelligence Act (AI Act)

    Key dates

    • 21 April 2021: AI Act proposed.
    • 6 December 2022: AI Act Council position adopted.
    • June 2023: AI Act trilogue negotiations started.
    • 14 June 2023: AI Act Parliament position adopted for negotiations.
    • 8 December 2023: AI Act provisional agreement reached.
    • Early 2024: AI Act to be adopted.
    • Early 2024: AI Act expected to enter into force.
    • Early 2026: AI Act expected to apply.
  • expand_more

    Artificial Intelligence Liability Directive (AI Liability Directive)

    Key dates

    • 28 September 2022: AI Liability Directive proposed.
  • expand_more

    Child Sexual Abuse Material Regulation (CSAM Regulation)

    Key dates

    • 11 May 2022: CSAM Regulation proposed.
    • 22 November 2023: CSAM Regulation Parliament position adopted for negotiations.
  • expand_more

    Cyber Resilience Act (CRA)

    Key dates

    • 15 September 2022: CRA proposed.
    • 19 July 2023: CRA Council position adopted.
    • September 2023: CRA trilogue negotiations started.
    • 13 September 2023: CRA Parliament position adopted for negotiations.
    • 30 November 2023: CRA provisional agreement reached.
  • expand_more

    Data Act

    Key dates

    • 23 February 2022: Data Act proposed.
    • March 2023: Data Act trilogue negotiations started.
    • 14 March 2023: Data Act Parliament position adopted for negotiations.
    • 24 March 2023: Data Act Council position adopted.
    • 27 June 2023: Data Act provisional agreement reached.
    • 27 November 2023: Data Act adopted.
    • 11 January 2024: Data Act entered into force.
    • 12 September 2025: Data Act applicable.
  • expand_more

    Data Governance Act (DGA)

    Key dates

    • 25 November 2020: DGA proposed.
    • 22 July 2021: DGA Parliament position adopted for negotiations.
    • October 2021: DGA trilogue negotiations started.
    • 1 October 2021: DGA Council position adopted.
    • 30 November 2021: DGA provisional agreement reached.
    • 16 May 2022: DGA adopted.
    • 23 June 2022: DGA entered into force.
    • 24 September 2023: DGA applicable.
  • expand_more

    Digital Markets Act (DMA)

    Key dates

    • 15 December 2020: DMA proposed.
    • 25 November 2021: DMA Council position adopted.
    • 15 December 2021: DMA Parliament position adopted for negotiations.
    • January 2022: DMA trilogue negotiations started.
    • 25 March 2022: DMA provisional agreement reached.
    • 18 July 2022: DMA adopted.
    • 1 November 2022: DMA entered into force.
    • 2 May 2023: DMA applicable.
  • expand_more

    Digital Operational Resilience Act (DORA)

    Key dates

    • 24 September 2020: DORA proposed.
    • 24 November 2021: DORA Council position adopted.
    • 15 December 2021: DORA Parliament position adopted for negotiations.
    • January 2022: DORA trilogue negotiations started.
    • 10 May 2022: DORA provisional agreement reached.
    • 28 November 2022: DORA adopted.
    • 16 January 2023: DORA entered into force.
    • 17 January 2025: DORA applicable.
  • expand_more

    Digital Services Act (DSA)

    Key dates

    • 15 December 2020: DSA proposed.
    • 25 November 2021: DSA Council position adopted.
    • January 2022: DSA trilogue negotiations started.
    • 20 January 2022: DSA Parliament position adopted for negotiations.
    • 23 April 2022: DSA provisional agreement reached.
    • 4 October 2022: DSA adopted.
    • 16 November 2022: DSA entered into force.
    • 17 February 2024: DSA applicable.
  • expand_more

    e-Evidence Regulation

    Key dates

    • 17 April 2018: e-Evidence Regulation proposed.
    • 7 December 2018: e-Evidence Regulation Council position adopted.
    • 16 December 2020: e-Evidence Regulation Parliament position adopted for negotiations.
    • January 2021: e-Evidence Regulation trilogue negotiations started.
    • 18 August 2026: e-Evidence Regulation applicable.
  • expand_more

    ePrivacy Regulation

    Key dates

    • 10 January 2017: ePrivacy Regulation proposed.
    • 25 October 2017: ePrivacy Regulation Parliament position adopted for negotiations.
    • 10 February 2021: ePrivacy Regulation Council position adopted.
    • May 2021: ePrivacy Regulation trilogue negotiations started.
  • expand_more

    European Health Data Space (EHDS)

    Key dates

    • 3 May 2022: EHDS proposed.
    • 6 December 2023: EHDS Council position adopted.
    • 13 December 2023: EHDS Parliament position adopted for negotiations.
  • expand_more

    GDPR Enforcement Procedure Regulation

    Key dates

    • 4 July 2023: GDPR Enforcement Procedure Regulation proposed.
  • expand_more

    General Data Protection Regulation (GDPR)

    Key dates

    • 25 January 2012: GDPR proposed.
    • 12 March 2014: GDPR Parliament position adopted for negotiations.
    • June 2015: GDPR trilogue negotiations started.
    • 15 June 2015: GDPR Council position adopted.
    • 15 December 2015: GDPR provisional agreement reached.
    • 14 April 2016: GDPR adopted.
    • 24 May 2016: GDPR entered into force.
    • 25 May 2018: GDPR applicable.
  • expand_more

    NIS2 Directive

    Key dates

    • 16 December 2020: NIS2 Directive proposed.
    • 22 November 2021: NIS2 Directive Parliament position adopted for negotiations.
    • 3 December 2021: NIS2 Directive Council position adopted.
    • January 2022: NIS2 Directive trilogue negotiations started.
    • 12 May 2022: NIS2 Directive provisional agreement reached.
    • 28 November 2022: NIS2 Directive adopted.
    • 16 January 2023: NIS2 Directive entered into force.
    • 18 October 2024: NIS2 Directive applicable.
  • expand_more

    Revised eIDAS Regulation

    Key dates

    • 3 June 2021: Revised eIDAS Regulation proposed.
    • 6 December 2022: Revised eIDAS Regulation Council position adopted.
    • March 2023: Revised eIDAS Regulation trilogue negotiations started.
    • 16 March 2023: Revised eIDAS Regulation Parliament position adopted for negotiations.
    • 8 November 2023: Revised eIDAS Regulation provisional agreement reached.

Tags: Privacy Law, Privacy Operations Management, Privacy Research, Westin Research Center
Related Stories
Europe
On this topic page, you can find the IAPP’s collection of coverage, analysis and resources related to privacy in the European region....
EU-US Data Privacy Framework – Guidance and Resources
The European Commission adopted its adequacy decision for the EU-U.S. Data Privacy Framework 10 July. This page will stay updated with the latest guidance documents and resources covering what these new rules say, how they work and what comes next as the framework takes effect....
Read More