Cybersecurity is now a leadership responsibility. EU requirements depend on sector, role and national implementation.
Laws differ across jurisdictions. Organizations within scope must identify obligations, document risk, test controls and maintain evidence. The selected country determines the legal framework shown below.
Change jurisdiction while keeping the language
European Union · European AI Office / national competent authorities
EU AI Act
In force · 2024-08-01
A risk-based framework with obligations varying by AI use, system category and operator role.
Business impact
Identify provider or deployer roles and the applicable implementation phase.
Entry into force is not the application date for every obligation. Phased dates and any enacted amendments must be checked for each provision; no single fine or deadline applies to all AI systems.
Applicability and obligation register
Risk assessment, control testing and evidence
Incident response, reporting and supplier processes
Last verified:
European Union · European Supervisory Authorities / national competent authorities
DORA
In force · 2025-01-17
DORA governs digital operational resilience for financial entities within its scope.
Business impact
Manage ICT risk, incidents, resilience testing and ICT third-party dependencies.
Scope and application / Audit focus
Regulation (EU) 2022/2554 — Digital Operational Resilience Act
Application date shown. Entity exemptions, proportionality and technical standards matter; DORA is sector-specific in relation to overlapping NIS2 requirements.
Applicability and obligation register
Risk assessment, control testing and evidence
Incident response, reporting and supplier processes
General information. Assess scope, sector, thresholds and transitional provisions for each organization. The official text controls.
Country selection changes the legal information shown; it does not change governing contract law or the provider’s privacy documents.
Do you accept cookies?
We use mandatory cookies for secure use and analytics cookies for visitor measurement only with your consent. Even if you decline, you can use the site. Cookie Policy · Personal data notice (Turkey — KVKK)