Data & Privacy
- Data Act
- Data Governance Act
- EHDS
- ePrivacy Directive
- GDPR
AI & Trust
- Artificial Intelligence Act
- Product Liability Directive
Cybersecurity
- Cyber Resilience Act
- Cybersecurity Act
- DORA
- NIS2
Digital Services & Media
- Digital Markets Act
- Digital Services Act
- European Media Freedom Act
Cyber Resilience Act
- Recitals
CHAPTER I
GENERAL PROVISIONSArticles 1 — 12
CHAPTER II
OBLIGATIONS OF ECONOMIC OPERATORS AND PROVISIONS IN RELATION TO FREE AND OPEN-SOURCE SOFTWAREArticles 13 — 26
CHAPTER III
CONFORMITY OF THE PRODUCT WITH DIGITAL ELEMENTSArticles 27 — 34
CHAPTER IV
NOTIFICATION OF CONFORMITY ASSESSMENT BODIESArticles 35 — 51
CHAPTER V
MARKET SURVEILLANCE AND ENFORCEMENTArticles 52 — 60
CHAPTER VI
DELEGATED POWERS AND COMMITTEE PROCEDUREArticles 61 — 62
CHAPTER VII
CONFIDENTIALITY AND PENALTIESArticles 63 — 65
CHAPTER VIII
TRANSITIONAL AND FINAL PROVISIONSArticles 66 — 71
ANNEXES
Explore Digital Regulation
Cybersecurity
Recitals
CHAPTER I
GENERAL PROVISIONS
CHAPTER II
OBLIGATIONS OF ECONOMIC OPERATORS AND PROVISIONS IN RELATION TO FREE AND OPEN-SOURCE SOFTWARE
CHAPTER III
CONFORMITY OF THE PRODUCT WITH DIGITAL ELEMENTS
CHAPTER IV
NOTIFICATION OF CONFORMITY ASSESSMENT BODIES
CHAPTER V
MARKET SURVEILLANCE AND ENFORCEMENT
CHAPTER VI
DELEGATED POWERS AND COMMITTEE PROCEDURE
CHAPTER VII
CONFIDENTIALITY AND PENALTIES
CHAPTER VIII
TRANSITIONAL AND FINAL PROVISIONS
ANNEX I
ESSENTIAL CYBERSECURITY REQUIREMENTS
ANNEX II
INFORMATION AND INSTRUCTIONS TO THE USER
ANNEX III
IMPORTANT PRODUCTS WITH DIGITAL ELEMENTS
ANNEX IV
CRITICAL PRODUCTS WITH DIGITAL ELEMENTS
ANNEX V
EU DECLARATION OF CONFORMITY
ANNEX VI
SIMPLIFIED EU DECLARATION OF CONFORMITY
ANNEX VII
CONTENT OF THE TECHNICAL DOCUMENTATION
ANNEX VIII
CONFORMITY ASSESSMENT PROCEDURES
Recitals
TITLE I
General provisions
CHAPTER I
Mandate and objectives
CHAPTER II
Tasks
CHAPTER III
Organisation of ENISA
CHAPTER IV
Establishment and structure of ENISA’s budget
CHAPTER V
Staff
CHAPTER VI
General provisions concerning ENISA
TITLE III
Cybersecurity certification framework
TITLE IV
Final provisions
ANNEX I
Requirements to be met by conformity assessment bodies
Recitals
CHAPTER I
General provisions
CHAPTER II
ICT risk management
CHAPTER III
ICT-related incident management, classification and reporting
CHAPTER IV
Digital operational resilience testing
CHAPTER V
Managing of ICT third-party risk
CHAPTER VI
Information-sharing arrangements
CHAPTER VII
Competent authorities
CHAPTER VIII
Delegated acts
CHAPTER IX
Transitional and final provisions
Recitals
CHAPTER I
GENERAL PROVISIONS
CHAPTER II
COORDINATED CYBERSECURITY FRAMEWORKS
CHAPTER III
COOPERATION AT UNION AND INTERNATIONAL LEVEL
CHAPTER IV
CYBERSECURITY RISK-MANAGEMENT MEASURES AND REPORTING OBLIGATIONS
CHAPTER V
JURISDICTION AND REGISTRATION
CHAPTER VI
INFORMATION SHARING
CHAPTER VII
SUPERVISION AND ENFORCEMENT
CHAPTER VIII
DELEGATED AND IMPLEMENTING ACTS
CHAPTER IX
FINAL PROVISIONS
ANNEX I
SECTORS OF HIGH CRITICALITY
ANNEX II
OTHER CRITICAL SECTORS
ANNEX III
CORRELATION TABLE
Digital Services & Media
Recitals
CHAPTER I
SUBJECT MATTER, SCOPE AND DEFINITIONS
CHAPTER II
GATEKEEPERS
CHAPTER III
PRACTICES OF GATEKEEPERS THAT LIMIT CONTESTABILITY OR ARE UNFAIR
CHAPTER IV
MARKET INVESTIGATION
CHAPTER V
INVESTIGATIVE, ENFORCEMENT AND MONITORING POWERS
CHAPTER VI
FINAL PROVISIONS
ANNEX A
General
ANNEX B
Active end users
ANNEX C
Active business users
ANNEX D
Submission of information
ANNEX E
Specific definitions
AI & Trust
Recitals
CHAPTER I
GENERAL PROVISIONS
CHAPTER II
PROHIBITED AI PRACTICES
CHAPTER III
HIGH-RISK AI SYSTEMS
CHAPTER IV
TRANSPARENCY OBLIGATIONS FOR PROVIDERS AND DEPLOYERS OF CERTAIN AI SYSTEMS
CHAPTER V
GENERAL-PURPOSE AI MODELS
CHAPTER VI
MEASURES IN SUPPORT OF INNOVATION
CHAPTER VII
GOVERNANCE
CHAPTER VIII
EU DATABASE FOR HIGH-RISK AI SYSTEMS
CHAPTER IX
POST-MARKET MONITORING, INFORMATION SHARING AND MARKET SURVEILLANCE
CHAPTER X
CODES OF CONDUCT AND GUIDELINES
CHAPTER XI
DELEGATION OF POWER AND COMMITTEE PROCEDURE
CHAPTER XII
PENALTIES
CHAPTER XIII
FINAL PROVISIONS
ANNEX I
List of Union harmonisation legislation
ANNEX II
List of criminal offences referred to in Article 5(1), first subparagraph, point (h)(iii)
ANNEX III
High-risk AI systems referred to in Article 6(2)
ANNEX IV
Technical documentation referred to in Article 11(1)
ANNEX V
EU declaration of conformity
ANNEX VI
Conformity assessment procedure based on internal control
ANNEX VII
Conformity based on an assessment of the quality management system and an assessment of the technical documentation
ANNEX VIII
Information to be submitted upon the registration of high-risk AI systems in accordance with Article 49
ANNEX IX
Information to be submitted upon the registration of high-risk AI systems listed in Annex III in relation to testing in real world conditions in accordance with Article 60
ANNEX X
Union legislative acts on large-scale IT systems in the area of Freedom, Security and Justice
ANNEX XI
Technical documentation referred to in Article 53(1), point (a) — technical documentation for providers of general-purpose AI models
ANNEX XII
Transparency information referred to in Article 53(1), point (b) — technical documentation for providers of general-purpose AI models to downstream providers that integrate the model into their AI system
ANNEX XIII
Criteria for the designation of general-purpose AI models with systemic risk referred to in Article 51
Data & Privacy
Recitals
CHAPTER I
GENERAL PROVISIONS
CHAPTER II
BUSINESS TO CONSUMER AND BUSINESS TO BUSINESS DATA SHARING
CHAPTER III
OBLIGATIONS FOR DATA HOLDERS OBLIGED TO MAKE DATA AVAILABLE PURSUANT TO UNION LAW
CHAPTER IV
UNFAIR CONTRACTUAL TERMS RELATED TO DATA ACCESS AND USE BETWEEN ENTERPRISES
CHAPTER V
MAKING DATA AVAILABLE TO PUBLIC SECTOR BODIES, THE COMMISSION, THE EUROPEAN CENTRAL BANK AND UNION BODIES ON THE BASIS OF AN EXCEPTIONAL NEED
CHAPTER VI
SWITCHING BETWEEN DATA PROCESSING SERVICES
CHAPTER VII
UNLAWFUL INTERNATIONAL GOVERNMENTAL ACCESS AND TRANSFER OF NON-PERSONAL DATA
CHAPTER VIII
INTEROPERABILITY
CHAPTER IX
IMPLEMENTATION AND ENFORCEMENT
CHAPTER X
SUI GENERIS RIGHT UNDER DIRECTIVE 96/9/EC
CHAPTER XI
FINAL PROVISIONS
Recitals
CHAPTER I
General provisions
CHAPTER II
Re-use of certain categories of protected data held by public sector bodies
CHAPTER III
Requirements applicable to data intermediation services
CHAPTER IV
Data altruism
CHAPTER V
Competent authorities and procedural provisions
CHAPTER VI
European Data Innovation Board
CHAPTER VII
International access and transfer
CHAPTER VIII
Delegation and committee procedure
CHAPTER IX
Final and transitional provisions
Recitals
CHAPTER I
GENERAL PROVISIONS
CHAPTER II
PRIMARY USE
CHAPTER III
EHR SYSTEMS AND WELLNESS APPLICATIONS
CHAPTER IV
SECONDARY USE
CHAPTER V
ADDITIONAL ACTIONS
CHAPTER VI
EUROPEAN GOVERNANCE AND COORDINATION
CHAPTER VII
DELEGATION OF POWERS AND COMMITTEE PROCEDURE
CHAPTER VIII
MISCELLANEOUS
CHAPTER IX
DEFERRED APPLICATION, TRANSITIONAL AND FINAL PROVISIONS
ANNEX I
Main characteristics of priority categories of personal electronic health data for primary use
ANNEX II
Essential requirements for the harmonised software components of EHR systems and for products for which interoperability with EHR systems has been claimed
ANNEX III
Technical documentation
ANNEX IV
EU declaration of conformity
Recitals
CHAPTER I
General provisions
CHAPTER II
Principles
CHAPTER III
Rights of the data subject
CHAPTER IV
Controller and processor
CHAPTER V
Transfers of personal data to third countries or international organisations
CHAPTER VI
Independent supervisory authorities
CHAPTER VII
Cooperation and consistency
CHAPTER VIII
Remedies, liability and penalties
CHAPTER IX
Provisions relating to specific processing situations
CHAPTER X
Delegated acts and implementing acts
CHAPTER XI
Final provisions