The EU data catalogue

EU rules and EU data

• The AI Act in practice

  The regulation sorts systems by risk and puts the requirements on roles, not on companies. The same company can be a provider in one system and a deployer in another. This page goes through the roles, the requirements and the dates, and every row points at the article in the register.

• Data protection in the EU

  Data protection rests on three questions that return in every audit: who decides the purpose, where does the data end up, and who supervises. This page goes through all three, with a path to the articles in the register.

• Data and data governance in the EU

  The two acts treat the same matter from opposite ends: the Data Act decides who gets data out of a product or a service, the Data Governance Act organises sharing where data is not free. This page goes through the duties and the roles.

• Cybersecurity in the EU

  Three regimes reach the same company from different directions. NIS2 addresses the entity, DORA the financial sector and its IT suppliers, the Cyber Resilience Act the product. This page separates them so the right duty lands on the right desk.

• Sustainability in EU law

  The sustainability rules connect in three steps: the taxonomy defines what counts, reporting requires it to be disclosed, and due diligence requires something to be done about what is disclosed. This page takes the steps one at a time.

• Digital services and digital markets

  The two acts split the work: the DSA is about what happens inside the service, the DMA about what happens in the market around it. This page goes through the duties on both sides and points at the articles in the register.

• Copyright and AI in the EU

  Training on protected material is lawful in the EU under an exception, not without conditions. This page collects the three rules that settle the question: the text and data mining exception, the reservation a rightholder may make, and the obligations the AI Act places on anyone releasing a general-purpose model.

• Product safety and liability

  When software becomes part of the product, liability moves with it. Three frameworks govern the question in the EU: the general product safety regulation, the machinery regulation for machines with control systems, and the revised product liability directive, which expressly counts software as a product.

• Digital consumer protection

  Selling digital content or a digital service to consumers in the EU means meeting four layers: contract law in the digital content and sale of goods directives, the information duties of the consumer rights directive, the ban on unfair practices, and the specific design rules in the Digital Services Act.

• Procuring AI

  A public body buying AI is usually a deployer under the AI Act, sometimes a provider. That difference decides the requirements. This page sets out what belongs in the tender, which clauses are commonly used, and which evidence can actually be checked.

• Market surveillance and CE marking

  Rules mean little without someone testing them. The market surveillance regulation gives authorities their powers, notified bodies handle assessment in some cases, and the penalty rules decide what a failure costs. This page sets out the chain.

• The timeline

  The hard part of EU law is rarely what applies, but when. Entry into force and application are two different things, and several acts arrive in stages. This page gathers the dates that drive planning and links to the act behind each line.

• EU recitals as open data

  Recitals explain why an article reads the way it does, and they are cited daily in questions of interpretation. Here they sit as an open surface: every recital has a number, a heading, an address, a hash and a reading date, enough to cite correctly and to notice when something changed.

• EU timelines as open data

  A requirement that does not apply yet is planned differently from one that applies today. This surface gives the dates: when each part of an act starts to apply, which article carries the date, and where it is published.

• EU obligations as open data

  The same act places different duties on different roles. This surface makes that searchable: each row is one duty, tied to a role, an act and an article, with the address where the requirement is published.