Data & Privacy
- Data Act
- Data Governance Act
- ePrivacy Directive
- GDPR
AI & Trust
- Artificial Intelligence Act
Cybersecurity
- Cybersecurity Act
- DORA
- NIS2
Digital Services & Media
- Digital Markets Act
- Digital Services Act
- European Media Freedom Act
Cybersecurity Act
- Recitals
TITLE I
General provisionsArticles 1 — 2
TITLE II — CHAPTER I
Mandate and objectivesArticles 3 — 4
TITLE II — CHAPTER II
TasksArticles 5 — 12
TITLE II — CHAPTER III
Organisation of ENISAArticles 13 — 28
TITLE II — CHAPTER IV
Establishment and structure of ENISA’s budgetArticles 29 — 33
TITLE II — CHAPTER V
StaffArticles 34 — 37
TITLE II — CHAPTER VI
General provisions concerning ENISAArticles 38 — 45
TITLE III
Cybersecurity certification frameworkArticles 46 — 65
TITLE IV
Final provisionsArticles 66 — 69
ANNEXES
Explore Digital Regulation
Data & Privacy
Recitals
CHAPTER I
GENERAL PROVISIONS
CHAPTER II
BUSINESS TO CONSUMER AND BUSINESS TO BUSINESS DATA SHARING
CHAPTER III
OBLIGATIONS FOR DATA HOLDERS OBLIGED TO MAKE DATA AVAILABLE PURSUANT TO UNION LAW
CHAPTER IV
UNFAIR CONTRACTUAL TERMS RELATED TO DATA ACCESS AND USE BETWEEN ENTERPRISES
CHAPTER V
MAKING DATA AVAILABLE TO PUBLIC SECTOR BODIES, THE COMMISSION, THE EUROPEAN CENTRAL BANK AND UNION BODIES ON THE BASIS OF AN EXCEPTIONAL NEED
CHAPTER VI
SWITCHING BETWEEN DATA PROCESSING SERVICES
CHAPTER VII
UNLAWFUL INTERNATIONAL GOVERNMENTAL ACCESS AND TRANSFER OF NON-PERSONAL DATA
CHAPTER VIII
INTEROPERABILITY
CHAPTER IX
IMPLEMENTATION AND ENFORCEMENT
CHAPTER X
SUI GENERIS RIGHT UNDER DIRECTIVE 96/9/EC
CHAPTER XI
FINAL PROVISIONS
Recitals
CHAPTER I
General provisions
CHAPTER II
Re-use of certain categories of protected data held by public sector bodies
CHAPTER III
Requirements applicable to data intermediation services
CHAPTER IV
Data altruism
CHAPTER V
Competent authorities and procedural provisions
CHAPTER VI
European Data Innovation Board
CHAPTER VII
International access and transfer
CHAPTER VIII
Delegation and committee procedure
CHAPTER IX
Final and transitional provisions
Recitals
CHAPTER I
General provisions
CHAPTER II
Principles
CHAPTER III
Rights of the data subject
CHAPTER IV
Controller and processor
CHAPTER V
Transfers of personal data to third countries or international organisations
CHAPTER VI
Independent supervisory authorities
CHAPTER VII
Cooperation and consistency
CHAPTER VIII
Remedies, liability and penalties
CHAPTER IX
Provisions relating to specific processing situations
CHAPTER X
Delegated acts and implementing acts
CHAPTER XI
Final provisions
AI & Trust
Recitals
CHAPTER I
GENERAL PROVISIONS
CHAPTER II
PROHIBITED AI PRACTICES
CHAPTER III
HIGH-RISK AI SYSTEMS
CHAPTER IV
TRANSPARENCY OBLIGATIONS FOR PROVIDERS AND DEPLOYERS OF CERTAIN AI SYSTEMS
CHAPTER V
GENERAL-PURPOSE AI MODELS
CHAPTER VI
MEASURES IN SUPPORT OF INNOVATION
CHAPTER VII
GOVERNANCE
CHAPTER VIII
EU DATABASE FOR HIGH-RISK AI SYSTEMS
CHAPTER IX
POST-MARKET MONITORING, INFORMATION SHARING AND MARKET SURVEILLANCE
CHAPTER X
CODES OF CONDUCT AND GUIDELINES
CHAPTER XI
DELEGATION OF POWER AND COMMITTEE PROCEDURE
CHAPTER XII
PENALTIES
CHAPTER XIII
FINAL PROVISIONS
ANNEX I
List of Union harmonisation legislation
ANNEX II
List of criminal offences referred to in Article 5(1), first subparagraph, point (h)(iii)
ANNEX III
High-risk AI systems referred to in Article 6(2)
ANNEX IV
Technical documentation referred to in Article 11(1)
ANNEX V
EU declaration of conformity
ANNEX VI
Conformity assessment procedure based on internal control
ANNEX VII
Conformity based on an assessment of the quality management system and an assessment of the technical documentation
ANNEX VIII
Information to be submitted upon the registration of high-risk AI systems in accordance with Article 49
ANNEX IX
Information to be submitted upon the registration of high-risk AI systems listed in Annex III in relation to testing in real world conditions in accordance with Article 60
ANNEX X
Union legislative acts on large-scale IT systems in the area of Freedom, Security and Justice
ANNEX XI
Technical documentation referred to in Article 53(1), point (a) — technical documentation for providers of general-purpose AI models
ANNEX XII
Transparency information referred to in Article 53(1), point (b) — technical documentation for providers of general-purpose AI models to downstream providers that integrate the model into their AI system
ANNEX XIII
Criteria for the designation of general-purpose AI models with systemic risk referred to in Article 51
Cybersecurity
Recitals
TITLE I
General provisions
CHAPTER I
Mandate and objectives
CHAPTER II
Tasks
CHAPTER III
Organisation of ENISA
CHAPTER IV
Establishment and structure of ENISA’s budget
CHAPTER V
Staff
CHAPTER VI
General provisions concerning ENISA
TITLE III
Cybersecurity certification framework
TITLE IV
Final provisions
ANNEX I
Requirements to be met by conformity assessment bodies
Recitals
CHAPTER I
General provisions
CHAPTER II
ICT risk management
CHAPTER III
ICT-related incident management, classification and reporting
CHAPTER IV
Digital operational resilience testing
CHAPTER V
Managing of ICT third-party risk
CHAPTER VI
Information-sharing arrangements
CHAPTER VII
Competent authorities
CHAPTER VIII
Delegated acts
CHAPTER IX
Transitional and final provisions
Recitals
CHAPTER I
GENERAL PROVISIONS
CHAPTER II
COORDINATED CYBERSECURITY FRAMEWORKS
CHAPTER III
COOPERATION AT UNION AND INTERNATIONAL LEVEL
CHAPTER IV
CYBERSECURITY RISK-MANAGEMENT MEASURES AND REPORTING OBLIGATIONS
CHAPTER V
JURISDICTION AND REGISTRATION
CHAPTER VI
INFORMATION SHARING
CHAPTER VII
SUPERVISION AND ENFORCEMENT
CHAPTER VIII
DELEGATED AND IMPLEMENTING ACTS
CHAPTER IX
FINAL PROVISIONS
ANNEX I
SECTORS OF HIGH CRITICALITY
ANNEX II
OTHER CRITICAL SECTORS
ANNEX III
CORRELATION TABLE
Digital Services & Media
Recitals
CHAPTER I
SUBJECT MATTER, SCOPE AND DEFINITIONS
CHAPTER II
GATEKEEPERS
CHAPTER III
PRACTICES OF GATEKEEPERS THAT LIMIT CONTESTABILITY OR ARE UNFAIR
CHAPTER IV
MARKET INVESTIGATION
CHAPTER V
INVESTIGATIVE, ENFORCEMENT AND MONITORING POWERS
CHAPTER VI
FINAL PROVISIONS
ANNEX A
General
ANNEX B
Active end users
ANNEX C
Active business users
ANNEX D
Submission of information
ANNEX E
Specific definitions