{"collection":"events","total":80,"returned":50,"rows":[{"id":"pld-adoption-1985","date":"1985-07-25","date_precision":"day","instrument":"Product Liability Directive (Dir 85/374/EEC)","instrument_short":"PLD 1985","area":"policy-law","type":"adoption","title_en":"Council adopts Product Liability Directive 85/374/EEC","title_es":"El Consejo adopta la Directiva 85/374/CEE sobre responsabilidad por productos defectuosos","summary_en":"The Council adopted Directive 85/374/EEC on 25 July 1985, making producers strictly liable for damage caused by defective products; the injured person proves damage, defect and causation, without proving fault. Signed at Brussels on 25 July 1985 and published in OJ L 210 of 7 August 1985, it anchored EU product liability for four decades and is the baseline the AI-era reform of 2024 rewrote, since it was drafted for industrially produced tangible goods.","summary_es":"El Consejo adoptó la Directiva 85/374/CEE el 25 de julio de 1985, estableciendo la responsabilidad objetiva del productor por los daños causados por productos defectuosos; el perjudicado prueba el daño, el defecto y la relación causal, sin necesidad de probar culpa. Firmada en Bruselas el 25 de julio de 1985 y publicada en el DO L 210 de 7 de agosto de 1985, ancló la responsabilidad por productos en la UE durante cuatro décadas y es la base que la reforma de la era de la IA reescribió en 2024, porque fue redactada para bienes tangibles de producción industrial.","grading":"verified","not_tested":"The 1985 regime reached tangible movables and electricity; standalone software, digital services and AI systems as such sat outside it, and it never regulated product safety before harm occurred.","not_tested_es":"El régimen de 1985 alcanzaba los bienes muebles tangibles y la electricidad; el software autónomo, los servicios digitales y los sistemas de IA como tales quedaban fuera, y nunca reguló la seguridad de los productos antes de producirse el daño.","sources":[{"label":"EUR-Lex, Council Directive 85/374/EEC (CELEX 31985L0374)","url":"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:31985L0374","accessed":"2026-08-19"}],"related":["pld-2024-adoption","pld-2024-transposition-deadline"],"proposed":false,"cards":[]},{"id":"eprivacy-directive-adoption-2002","date":"2002-07-12","date_precision":"day","instrument":"ePrivacy Directive (Dir 2002/58/EC)","instrument_short":"ePrivacy Directive","area":"policy-law","type":"adoption","title_en":"ePrivacy Directive adopted","title_es":"Adoptada la Directiva sobre la privacidad y las comunicaciones electrónicas","summary_en":"Directive 2002/58/EC was adopted on 12 July 2002 and published in OJ L 201 of 31 July 2002. It set privacy rules for the electronic communications sector, including confidentiality of communications and traffic data, as a lex specialis to Directive 95/46/EC.","summary_es":"La Directiva 2002/58/CE se adoptó el 12 de julio de 2002 y se publicó en el DO L 201 de 31 de julio de 2002. Fijó las normas de privacidad del sector de las comunicaciones electrónicas, incluida la confidencialidad de las comunicaciones y de los datos de tráfico, como lex specialis respecto de la Directiva 95/46/CE.","grading":"verified","not_tested":"Directive 2002/58/EC binds providers in the electronic communications sector and leaves general personal data processing to the horizontal data protection rules.","not_tested_es":"La Directiva 2002/58/CE vincula a los proveedores del sector de las comunicaciones electrónicas y deja el tratamiento general de datos personales a las normas horizontales de protección de datos.","sources":[{"label":"Publications Office of the EU, Directive 2002/58/EC (CELEX 32002L0058)","url":"http://publications.europa.eu/resource/celex/32002L0058","accessed":"2026-08-19"}],"related":["eprivacy-directive-amendment-2009","eprivacy-regulation-proposal-2017"],"proposed":false,"cards":[]},{"id":"eprivacy-directive-amendment-2009","date":"2009-11-25","date_precision":"day","instrument":"ePrivacy Directive (Dir 2002/58/EC), amended by Dir 2009/136/EC","instrument_short":"ePrivacy Directive","area":"policy-law","type":"amendment","title_en":"Cookie consent amendment to the ePrivacy Directive adopted","title_es":"Adoptada la modificación que introduce el consentimiento de cookies en la Directiva 2002/58/CE","summary_en":"Directive 2009/136/EC of 25 November 2009 amended Directive 2002/58/EC. Its point 5 replaced Article 5(3), which since then permits storing information, or gaining access to information already stored, in a user's terminal equipment only with informed consent: the basis of EU cookie consent practice.","summary_es":"La Directiva 2009/136/CE, de 25 de noviembre de 2009, modificó la Directiva 2002/58/CE. Su punto 5 sustituyó el artículo 5, apartado 3, que desde entonces solo permite almacenar información, o acceder a información ya almacenada, en el equipo terminal de un usuario con consentimiento informado: la base de la práctica europea del consentimiento de cookies.","grading":"verified","not_tested":"Article 5(3) binds storing of and access to information on terminal equipment and leaves the content of online services regulated elsewhere.","not_tested_es":"El artículo 5, apartado 3, vincula el almacenamiento de información y el acceso a la información en el equipo terminal, y deja el contenido de los servicios en línea regulado en otras normas.","sources":[{"label":"Publications Office of the EU, Directive 2009/136/EC (CELEX 32009L0136)","url":"http://publications.europa.eu/resource/celex/32009L0136","accessed":"2026-08-19"}],"related":["eprivacy-directive-adoption-2002","digital-omnibus-gdpr-proposal-2025"],"proposed":false,"cards":[]},{"id":"vis-operational-2011","date":"2011-10-11","date_precision":"day","instrument":"Visa Information System (Reg 767/2008)","instrument_short":"VIS","area":"policy-law","type":"application","title_en":"Visa Information System starts operations","title_es":"El Sistema de Información de Visados entra en funcionamiento","summary_en":"The VIS started operations on 11 October 2011 under Regulation 767/2008, recording short-stay visa applications with fingerprints and facial images. Deployment then proceeded region by region until February 2016.","summary_es":"El VIS entró en funcionamiento el 11 de octubre de 2011 con arreglo al Reglamento 767/2008, registrando las solicitudes de visados de corta duración con impresiones dactilares e imágenes faciales. El despliegue avanzó después región por región hasta febrero de 2016.","grading":"verified","not_tested":"The 2011 start covered only the first consular rollout region; the VIS did not reach worldwide coverage of Schengen consulates until February 2016.","not_tested_es":"El arranque de 2011 cubrió solo la primera región consular del despliegue; el VIS no alcanzó la cobertura mundial de los consulados Schengen hasta febrero de 2016.","sources":[{"label":"European Commission press release IP/11/1169, More efficient and secure visa system goes live","url":"https://ec.europa.eu/commission/presscorner/detail/en/ip_11_1169","accessed":"2026-08-19"},{"label":"eu-LISA, Report on the technical functioning of the VIS (2019)","url":"https://www.eulisa.europa.eu/sites/default/files/documents/2019%20VIS%20Report.pdf","accessed":"2026-08-19"}],"related":[],"proposed":false,"cards":[]},{"id":"gdpr-proposal-2012","date":"2012-01-25","date_precision":"day","instrument":"GDPR (Reg 2016/679)","instrument_short":"GDPR","area":"policy-law","type":"proposal","title_en":"Commission proposes the General Data Protection Regulation","title_es":"La Comisión propone el Reglamento General de Protección de Datos","summary_en":"The European Commission tabled COM(2012) 11 final in Brussels on 25 January 2012, a proposal for a General Data Protection Regulation to replace Directive 95/46/EC. The proposal opened procedure 2012/0011(COD).","summary_es":"La Comisión Europea presentó en Bruselas, el 25 de enero de 2012, el COM(2012) 11 final, una propuesta de Reglamento General de Protección de Datos llamado a sustituir la Directiva 95/46/CE. La propuesta abrió el procedimiento 2012/0011(COD).","grading":"verified","not_tested":"The 2012 proposal bound nobody; Directive 95/46/EC continued to govern personal data processing until 25 May 2018.","not_tested_es":"La propuesta de 2012 no vinculaba a nadie; la Directiva 95/46/CE siguió rigiendo el tratamiento de datos personales hasta el 25 de mayo de 2018.","sources":[{"label":"Publications Office of the EU, COM(2012) 11 final (CELEX 52012PC0011)","url":"http://publications.europa.eu/resource/celex/52012PC0011","accessed":"2026-08-19"}],"related":["gdpr-adoption-2016","gdpr-application-2018"],"proposed":false,"cards":[]},{"id":"crr-crdiv-application-2014","date":"2014-01-01","date_precision":"day","instrument":"Capital Requirements Regulation (Reg 575/2013) and CRD IV (Dir 2013/36)","instrument_short":"CRR/CRD IV","area":"policy-law","type":"application","title_en":"CRR applies; CRD IV single rulebook takes effect","title_es":"Se aplica el CRR; el código normativo único de la CRD IV surte efecto","summary_en":"Regulation 575/2013 (CRR) applied from 1 January 2014, alongside national transposition of Directive 2013/36/EU (CRD IV), bringing the Basel III single rulebook for bank capital into effect.","summary_es":"El Reglamento 575/2013 (CRR) se aplicó desde el 1 de enero de 2014, junto con la transposición nacional de la Directiva 2013/36/UE (CRD IV), haciendo efectivo el código normativo único de Basilea III para el capital bancario.","grading":"verified","not_tested":"Binds bank capital, liquidity and reporting; it does not classify AI systems, and AI Act high-risk duties for banks arrive through separate creditworthiness use cases.","not_tested_es":"Vincula el capital, la liquidez y la información de los bancos; no clasifica sistemas de IA, y los deberes de alto riesgo del Reglamento de IA para la banca llegan por los casos de uso de solvencia crediticia, que son separados.","sources":[{"label":"Publications Office of the EU, Regulation (EU) No 575/2013, Article 521 (CELEX 32013R0575)","url":"http://publications.europa.eu/resource/celex/32013R0575","accessed":"2026-08-19"}],"related":["ssm-application-2014"],"proposed":false,"cards":[]},{"id":"ssm-application-2014","date":"2014-11-04","date_precision":"day","instrument":"SSM Regulation (Council Reg 1024/2013)","instrument_short":"SSM","area":"policy-law","type":"application","title_en":"ECB assumes bank supervision under the SSM Regulation","title_es":"El BCE asume la supervisión bancaria bajo el Reglamento del MUS","summary_en":"Under Council Regulation 1024/2013 of 15 October 2013 the ECB assumed direct prudential supervision of significant euro area banks on 4 November 2014, the start date fixed in Article 33(2).","summary_es":"En virtud del Reglamento (UE) n.º 1024/2013 del Consejo, de 15 de octubre de 2013, el BCE asumió el 4 de noviembre de 2014 la supervisión prudencial directa de los bancos significativos de la zona del euro, la fecha de inicio fijada en el artículo 33, apartado 2.","grading":"verified","not_tested":"Allocates supervisory competence over euro area banks to the ECB; it sets no product conformity regime and does not itself regulate the AI model.","not_tested_es":"Atribuye al BCE la competencia supervisora sobre los bancos de la zona del euro; no establece ningún régimen de conformidad de producto y no regula por sí mismo el modelo de IA.","sources":[{"label":"Publications Office of the EU, Council Regulation (EU) No 1024/2013, Article 33 (CELEX 32013R1024)","url":"http://publications.europa.eu/resource/celex/32013R1024","accessed":"2026-08-19"}],"related":["crr-crdiv-application-2014"],"proposed":false,"cards":[]},{"id":"solvency2-application-2016","date":"2016-01-01","date_precision":"day","instrument":"Solvency II (Dir 2009/138)","instrument_short":"Solvency II","area":"policy-law","type":"application","title_en":"Solvency II applies after postponement to 2016","title_es":"Solvencia II se aplica tras el aplazamiento a 2016","summary_en":"Directive 2009/138/EC (Solvency II) applied from 1 January 2016. Directive 2013/58/EU moved transposition to 31 March 2015 and shifted the application date from 1 January 2014 to 1 January 2016.","summary_es":"La Directiva 2009/138/CE (Solvencia II) se aplicó desde el 1 de enero de 2016. La Directiva 2013/58/UE trasladó la transposición al 31 de marzo de 2015 y desplazó la fecha de aplicación del 1 de enero de 2014 al 1 de enero de 2016.","grading":"verified","not_tested":"Binds insurers' capital, governance and reporting; it is no Annex I conformity regime under the AI Act and does not itself regulate the AI model.","not_tested_es":"Vincula el capital, la gobernanza y la información de las aseguradoras; no es un régimen de conformidad del anexo I del Reglamento de IA y no regula por sí misma el modelo de IA.","sources":[{"label":"Publications Office of the EU, Directive 2013/58/EU amending Solvency II (CELEX 32013L0058)","url":"http://publications.europa.eu/resource/celex/32013L0058","accessed":"2026-08-19"}],"related":["idd-application-2018"],"proposed":false,"cards":[]},{"id":"gdpr-adoption-2016","date":"2016-04-27","date_precision":"day","instrument":"GDPR (Reg 2016/679)","instrument_short":"GDPR","area":"policy-law","type":"adoption","title_en":"GDPR adopted by Parliament and Council","title_es":"El Parlamento y el Consejo adoptan el RGPD","summary_en":"The European Parliament and the Council adopted Regulation (EU) 2016/679 on 27 April 2016. Under Article 99 it entered into force on the twentieth day after publication in the Official Journal, with application deferred to 25 May 2018.","summary_es":"El Parlamento Europeo y el Consejo adoptaron el Reglamento (UE) 2016/679 el 27 de abril de 2016. Conforme a su artículo 99, entró en vigor a los veinte días de su publicación en el Diario Oficial, con la aplicación diferida al 25 de mayo de 2018.","grading":"verified","not_tested":"Adoption on 27 April 2016 created no enforceable obligations, because Article 99 deferred application to 25 May 2018.","not_tested_es":"La adopción del 27 de abril de 2016 no creó obligaciones exigibles, porque el artículo 99 difirió la aplicación al 25 de mayo de 2018.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2016/679 (CELEX 32016R0679)","url":"http://publications.europa.eu/resource/celex/32016R0679","accessed":"2026-08-19"}],"related":["gdpr-proposal-2012","gdpr-application-2018","led-adoption-2016"],"proposed":false,"cards":[]},{"id":"led-adoption-2016","date":"2016-04-27","date_precision":"day","instrument":"Law Enforcement Directive (Dir 2016/680)","instrument_short":"LED","area":"policy-law","type":"adoption","title_en":"Law Enforcement Directive adopted alongside the GDPR","title_es":"Adoptada junto al RGPD la Directiva sobre datos en el ámbito penal","summary_en":"Directive (EU) 2016/680 was adopted on 27 April 2016, the same day as the GDPR. It covers processing of personal data by competent authorities for the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties.","summary_es":"La Directiva (UE) 2016/680 se adoptó el 27 de abril de 2016, el mismo día que el RGPD. Cubre el tratamiento de datos personales por las autoridades competentes con fines de prevención, investigación, detección o enjuiciamiento de infracciones penales o de ejecución de sanciones penales.","grading":"verified","not_tested":"Directive 2016/680 covers processing by competent authorities for criminal law enforcement purposes and leaves general commercial processing to the GDPR.","not_tested_es":"La Directiva 2016/680 cubre el tratamiento por autoridades competentes con fines penales y deja el tratamiento comercial general al RGPD.","sources":[{"label":"Publications Office of the EU, Directive (EU) 2016/680 (CELEX 32016L0680)","url":"http://publications.europa.eu/resource/celex/32016L0680","accessed":"2026-08-19"}],"related":["gdpr-adoption-2016","led-transposition-2018"],"proposed":false,"cards":[]},{"id":"eprivacy-regulation-proposal-2017","date":"2017-01-10","date_precision":"day","instrument":"ePrivacy Regulation (proposal COM(2017) 10)","instrument_short":"ePrivacy Regulation","area":"policy-law","type":"proposal","title_en":"Commission proposes the ePrivacy Regulation","title_es":"La Comisión propone el Reglamento sobre la privacidad y las comunicaciones electrónicas","summary_en":"The Commission tabled COM(2017) 10 final on 10 January 2017, a proposed Regulation on Privacy and Electronic Communications intended to repeal Directive 2002/58/EC and complement the GDPR. It opened procedure 2017/0003(COD).","summary_es":"La Comisión presentó el 10 de enero de 2017 el COM(2017) 10 final, una propuesta de Reglamento sobre la privacidad y las comunicaciones electrónicas destinada a derogar la Directiva 2002/58/CE y a complementar el RGPD. Abrió el procedimiento 2017/0003(COD).","grading":"verified","not_tested":"The proposal never became law; providers remained bound by Directive 2002/58/EC as transposed nationally throughout the negotiations.","not_tested_es":"La propuesta nunca llegó a ser ley; los proveedores siguieron vinculados por la Directiva 2002/58/CE, tal como fue transpuesta nacionalmente, durante toda la negociación.","sources":[{"label":"Publications Office of the EU, COM(2017) 10 final (CELEX 52017PC0010)","url":"http://publications.europa.eu/resource/celex/52017PC0010","accessed":"2026-08-19"}],"related":["eprivacy-directive-adoption-2002","eprivacy-regulation-withdrawal-2025"],"proposed":false,"cards":[]},{"id":"led-transposition-2018","date":"2018-05-06","date_precision":"day","instrument":"Law Enforcement Directive (Dir 2016/680)","instrument_short":"LED","area":"policy-law","type":"application","title_en":"Transposition deadline for the Law Enforcement Directive","title_es":"Plazo de transposición de la Directiva sobre datos en el ámbito penal","summary_en":"Article 63(1) of Directive (EU) 2016/680 required Member States to adopt and publish the laws needed to comply by 6 May 2018, and to apply those provisions from 6 May 2018.","summary_es":"El artículo 63, apartado 1, de la Directiva (UE) 2016/680 exigía a los Estados miembros adoptar y publicar las disposiciones necesarias para cumplirla a más tardar el 6 de mayo de 2018, y aplicarlas desde esa misma fecha.","grading":"verified","not_tested":"The 6 May 2018 deadline bound Member State legislators; a directive imposes no directly applicable obligations on private parties.","not_tested_es":"El plazo del 6 de mayo de 2018 vinculaba a los legisladores de los Estados miembros; una directiva no impone obligaciones directamente aplicables a los particulares.","sources":[{"label":"Publications Office of the EU, Directive (EU) 2016/680, Article 63 (CELEX 32016L0680)","url":"http://publications.europa.eu/resource/celex/32016L0680","accessed":"2026-08-19"}],"related":["led-adoption-2016","gdpr-application-2018"],"proposed":false,"cards":[]},{"id":"gdpr-application-2018","date":"2018-05-25","date_precision":"day","instrument":"GDPR (Reg 2016/679)","instrument_short":"GDPR","area":"policy-law","type":"application","title_en":"GDPR becomes applicable across the EU","title_es":"El RGPD pasa a ser aplicable en toda la UE","summary_en":"Regulation (EU) 2016/679 applied from 25 May 2018 under Article 99(2), repealing Directive 95/46/EC and binding controllers and processors directly in all Member States.","summary_es":"El Reglamento (UE) 2016/679 se aplicó desde el 25 de mayo de 2018 conforme a su artículo 99, apartado 2, derogando la Directiva 95/46/CE y vinculando directamente a responsables y encargados del tratamiento en todos los Estados miembros.","grading":"verified","not_tested":"The GDPR governs personal data and leaves anonymised data and non-personal industrial data outside its reach.","not_tested_es":"El RGPD rige los datos personales y deja fuera de su alcance los datos anonimizados y los datos industriales no personales.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2016/679, Article 99 (CELEX 32016R0679)","url":"http://publications.europa.eu/resource/celex/32016R0679","accessed":"2026-08-19"}],"related":["gdpr-adoption-2016","led-transposition-2018","digital-omnibus-gdpr-proposal-2025"],"proposed":false,"cards":[]},{"id":"etias-adopted-2018","date":"2018-09-12","date_precision":"day","instrument":"European Travel Information and Authorisation System (Reg 2018/1240)","instrument_short":"ETIAS","area":"policy-law","type":"adoption","title_en":"ETIAS Regulation adopted","title_es":"Adoptado el Reglamento ETIAS","summary_en":"Regulation 2018/1240 establishing ETIAS was adopted on 12 September 2018. Once live, it will require visa-exempt travellers to obtain a travel authorisation before entering the Schengen area.","summary_es":"El Reglamento 2018/1240, por el que se crea el ETIAS, se adoptó el 12 de septiembre de 2018. Cuando entre en servicio, exigirá a los viajeros exentos de visado obtener una autorización de viaje antes de entrar en el espacio Schengen.","grading":"verified","not_tested":"Adoption in September 2018 fixed no launch date; the regulation binds no traveller until the Commission sets a start of operations, which had still not happened by August 2026.","not_tested_es":"La adopción en septiembre de 2018 no fijó ninguna fecha de puesta en marcha; el reglamento no vincula a ningún viajero hasta que la Comisión fije el inicio de operaciones, algo que en agosto de 2026 seguía sin ocurrir.","sources":[{"label":"European Commission, Migration and Home Affairs, European Travel Information and Authorisation System policy page","url":"https://home-affairs.ec.europa.eu/policies/schengen-borders-and-visa/smart-borders/european-travel-information-authorisation-system_en","accessed":"2026-08-19"}],"related":["etias-delay-2026"],"proposed":false,"cards":[]},{"id":"idd-application-2018","date":"2018-10-01","date_precision":"day","instrument":"Insurance Distribution Directive (Dir 2016/97)","instrument_short":"IDD","area":"policy-law","type":"application","title_en":"IDD applies after postponement to 1 October 2018","title_es":"La IDD se aplica tras el aplazamiento al 1 de octubre de 2018","summary_en":"Directive 2016/97 on insurance distribution applied from 1 October 2018. Directive (EU) 2018/411 postponed the application date from 23 February 2018 and moved transposition to 1 July 2018.","summary_es":"La Directiva 2016/97 sobre la distribución de seguros se aplicó desde el 1 de octubre de 2018. La Directiva (UE) 2018/411 aplazó la fecha de aplicación, fijada antes en el 23 de febrero de 2018, y trasladó la transposición al 1 de julio de 2018.","grading":"verified","not_tested":"Binds insurance sales conduct and product oversight; it certifies no products and does not itself regulate the AI model.","not_tested_es":"Vincula la conducta de venta de seguros y la vigilancia de productos; no certifica productos y no regula por sí misma el modelo de IA.","sources":[{"label":"Publications Office of the EU, Directive (EU) 2018/411 amending the IDD (CELEX 32018L0411)","url":"http://publications.europa.eu/resource/celex/32018L0411","accessed":"2026-08-19"}],"related":["solvency2-application-2016"],"proposed":false,"cards":[]},{"id":"reg-2018-1725-adoption-2018","date":"2018-10-23","date_precision":"day","instrument":"Regulation (EU) 2018/1725 (data protection in EU institutions)","instrument_short":"Reg 2018/1725","area":"policy-law","type":"adoption","title_en":"Reg 2018/1725 adopted for EU institutions and bodies","title_es":"Adoptado el Reglamento 2018/1725 para las instituciones y organismos de la UE","summary_en":"Regulation (EU) 2018/1725 was adopted on 23 October 2018, aligning the data protection regime for Union institutions, bodies, offices and agencies with the GDPR and repealing Regulation (EC) No 45/2001. Under Article 101 it entered into force on the twentieth day after publication in the Official Journal.","summary_es":"El Reglamento (UE) 2018/1725 se adoptó el 23 de octubre de 2018, alineando con el RGPD el régimen de protección de datos de las instituciones, órganos y organismos de la Unión y derogando el Reglamento (CE) n.º 45/2001. Conforme a su artículo 101, entró en vigor a los veinte días de su publicación en el Diario Oficial.","grading":"verified","not_tested":"Regulation 2018/1725 binds Union institutions, bodies, offices and agencies only; national authorities and companies stay under the GDPR or Directive 2016/680.","not_tested_es":"El Reglamento 2018/1725 vincula únicamente a las instituciones, órganos y organismos de la Unión; las autoridades nacionales y las empresas siguen bajo el RGPD o la Directiva 2016/680.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2018/1725 (CELEX 32018R1725)","url":"http://publications.europa.eu/resource/celex/32018R1725","accessed":"2026-08-19"}],"related":["gdpr-application-2018"],"proposed":false,"cards":[]},{"id":"cybersecurity-act-adoption-2019","date":"2019-04-17","date_precision":"day","instrument":"Regulation (EU) 2019/881 on ENISA and on ICT cybersecurity certification (Cybersecurity Act)","instrument_short":"Cybersecurity Act","area":"policy-law","type":"adoption","title_en":"Cybersecurity Act adopted, creating EU certification framework","title_es":"Adoptado el Reglamento de Ciberseguridad, que crea el marco europeo de certificación","summary_en":"The European Parliament and the Council signed Regulation (EU) 2019/881 at Strasbourg on 17 April 2019. It gives ENISA a permanent mandate and establishes the European cybersecurity certification framework under which candidate schemes such as EUCS are prepared.","summary_es":"El Parlamento Europeo y el Consejo firmaron el Reglamento (UE) 2019/881 en Estrasburgo el 17 de abril de 2019. Da a ENISA un mandato permanente y establece el marco europeo de certificación de la ciberseguridad bajo el cual se preparan esquemas candidatos como el EUCS.","grading":"verified","not_tested":"The framework it creates is voluntary, so no provider must certify and no buyer must demand a certificate.","not_tested_es":"El marco que crea es voluntario, así que ningún proveedor está obligado a certificarse y ningún comprador está obligado a exigir un certificado.","sources":[{"label":"Publications Office of the EU, full text of Regulation (EU) 2019/881 (CELEX 32019R0881)","url":"https://publications.europa.eu/resource/celex/32019R0881","accessed":"2026-08-19"}],"related":["cybersecurity-act-entry-into-force-2019","eucs-candidate-scheme-2020"],"proposed":false,"cards":["certs"]},{"id":"cybersecurity-act-entry-into-force-2019","date":"2019-06-27","date_precision":"day","instrument":"Regulation (EU) 2019/881 on ENISA and on ICT cybersecurity certification (Cybersecurity Act)","instrument_short":"Cybersecurity Act","area":"policy-law","type":"entry-into-force","title_en":"Cybersecurity Act enters into force","title_es":"El Reglamento de Ciberseguridad entra en vigor","summary_en":"Published in Official Journal L 151 on 7 June 2019, Regulation (EU) 2019/881 entered into force on the twentieth day after publication, 27 June 2019. Under Article 69(2), Articles 58, 60, 61, 63, 64 and 65 applied from 28 June 2021.","summary_es":"Publicado en el Diario Oficial L 151 de 7 de junio de 2019, el Reglamento (UE) 2019/881 entró en vigor a los veinte días de su publicación, el 27 de junio de 2019. Conforme al artículo 69, apartado 2, los artículos 58, 60, 61, 63, 64 y 65 se aplicaron desde el 28 de junio de 2021.","grading":"verified","not_tested":"Entry into force armed the legal basis only; without a scheme adopted by implementing act, nothing could yet be certified.","not_tested_es":"La entrada en vigor armó solo la base jurídica; sin un esquema adoptado por acto de ejecución, todavía no podía certificarse nada.","sources":[{"label":"Publications Office of the EU, full text of Regulation (EU) 2019/881 (CELEX 32019R0881, OJ L 151, 7.6.2019)","url":"https://publications.europa.eu/resource/celex/32019R0881","accessed":"2026-08-19"}],"related":["cybersecurity-act-adoption-2019","eucs-candidate-scheme-2020"],"proposed":false,"cards":[]},{"id":"dma-proposal-2020","date":"2020-12-15","date_precision":"day","instrument":"Digital Markets Act (Reg 2022/1925)","instrument_short":"DMA","area":"policy-law","type":"proposal","title_en":"Commission proposes the Digital Markets Act","title_es":"La Comisión propone la Ley de Mercados Digitales","summary_en":"The Commission tabled COM(2020) 842 final, a proposal for a Regulation on contestable and fair markets in the digital sector (Digital Markets Act), in Brussels on 15 December 2020. It formed one package with the Digital Services Act proposal presented the same day.","summary_es":"La Comisión presentó en Bruselas, el 15 de diciembre de 2020, el COM(2020) 842 final, una propuesta de Reglamento sobre mercados disputables y equitativos en el sector digital (Ley de Mercados Digitales). Formó un solo paquete con la propuesta de Ley de Servicios Digitales presentada el mismo día.","grading":"verified","not_tested":"The proposal bound nobody; conduct by large platforms remained subject only to case-by-case competition enforcement under Articles 101 and 102 TFEU.","not_tested_es":"La propuesta no vinculaba a nadie; la conducta de las grandes plataformas siguió sujeta únicamente a la aplicación caso por caso del derecho de la competencia bajo los artículos 101 y 102 del TFUE.","sources":[{"label":"Publications Office of the EU, COM(2020) 842 final (CELEX 52020PC0842)","url":"http://publications.europa.eu/resource/celex/52020PC0842","accessed":"2026-08-19"}],"related":["dsa-proposal-2020","dma-adoption-2022"],"proposed":false,"cards":[]},{"id":"dsa-proposal-2020","date":"2020-12-15","date_precision":"day","instrument":"Digital Services Act (Reg 2022/2065)","instrument_short":"DSA","area":"policy-law","type":"proposal","title_en":"Commission proposes the Digital Services Act","title_es":"La Comisión propone la Ley de Servicios Digitales","summary_en":"The Commission tabled COM(2020) 825 final, a proposal for a Regulation on a Single Market for Digital Services (Digital Services Act) amending Directive 2000/31/EC. It was presented in Brussels on 15 December 2020 as part of one package with the Digital Markets Act proposal.","summary_es":"La Comisión presentó el COM(2020) 825 final, una propuesta de Reglamento relativo a un mercado único de servicios digitales (Ley de Servicios Digitales) que modifica la Directiva 2000/31/CE. Se presentó en Bruselas el 15 de diciembre de 2020 como parte de un solo paquete con la propuesta de Ley de Mercados Digitales.","grading":"verified","not_tested":"The proposal bound nobody; intermediaries continued to operate under the liability regime of Directive 2000/31/EC until the final act applied.","not_tested_es":"La propuesta no vinculaba a nadie; los intermediarios siguieron operando bajo el régimen de responsabilidad de la Directiva 2000/31/CE hasta que el acto final se aplicó.","sources":[{"label":"Publications Office of the EU, COM(2020) 825 final (CELEX 52020PC0825)","url":"http://publications.europa.eu/resource/celex/52020PC0825","accessed":"2026-08-19"}],"related":["dma-proposal-2020","dsa-adoption-2022"],"proposed":false,"cards":[]},{"id":"eucs-candidate-scheme-2020","date":"2020-12-22","date_precision":"day","instrument":"EUCS, candidate European Cybersecurity Certification Scheme for Cloud Services under Regulation (EU) 2019/881","instrument_short":"EUCS","area":"policy-law","type":"proposal","title_en":"ENISA publishes draft EUCS candidate scheme for consultation","title_es":"ENISA publica a consulta el borrador del esquema candidato EUCS","summary_en":"ENISA published its draft candidate cybersecurity certification scheme for cloud services, prepared under the Cybersecurity Act, and opened a public consultation running from 22 December 2020 to 7 February 2021. The first draft set three assurance levels (basic, substantial, high) and demanded transparency about data location and applicable law rather than localisation or ownership requirements.","summary_es":"ENISA publicó su borrador de esquema candidato de certificación de ciberseguridad para servicios en la nube, preparado bajo el Reglamento de Ciberseguridad, y abrió una consulta pública del 22 de diciembre de 2020 al 7 de febrero de 2021. El primer borrador fijaba tres niveles de garantía (básico, sustancial, alto) y exigía transparencia sobre la ubicación de los datos y el derecho aplicable, no requisitos de localización ni de propiedad.","grading":"verified","not_tested":"A candidate text confers no certificates: nothing can be certified until the Commission adopts the scheme by implementing act.","not_tested_es":"Un texto candidato no confiere certificados: nada puede certificarse hasta que la Comisión adopte el esquema por acto de ejecución.","sources":[{"label":"ENISA, EUCS Cloud Services Scheme publication page (22 December 2020)","url":"https://www.enisa.europa.eu/publications/eucs-cloud-service-scheme","accessed":"2026-08-19"}],"related":["cybersecurity-act-adoption-2019","cybersecurity-act-entry-into-force-2019","eucs-sovereignty-criteria-2023","eucs-sovereignty-criteria-dropped-2024","eucs-stalled-2026","cada-proposal-2026"],"proposed":false,"cards":["certs"]},{"id":"ai-act-proposal-2021","date":"2021-04-21","date_precision":"day","instrument":"AI Act (Reg 2024/1689; proposed as COM(2021) 206)","instrument_short":"AI Act","area":"policy-law","type":"proposal","title_en":"Commission tables AI Act proposal COM(2021) 206","title_es":"La Comisión presenta la propuesta del Reglamento de IA, COM(2021) 206","summary_en":"The Commission tabled COM(2021) 206 final in Brussels on 21 April 2021: a proposal for a regulation laying down harmonised rules on artificial intelligence, opening procedure 2021/0106(COD).","summary_es":"La Comisión presentó en Bruselas, el 21 de abril de 2021, el COM(2021) 206 final: una propuesta de reglamento por el que se establecen normas armonizadas en materia de inteligencia artificial, abriendo el procedimiento 2021/0106(COD).","grading":"verified","not_tested":"A proposal binds no one; providers and deployers faced no obligations until adoption in 2024 and the staged application dates from 2025.","not_tested_es":"Una propuesta no vincula a nadie; proveedores y responsables del despliegue no afrontaron obligaciones hasta la adopción en 2024 y las fechas de aplicación escalonadas desde 2025.","sources":[{"label":"Publications Office (CELLAR), COM(2021) 206 final","url":"http://publications.europa.eu/resource/celex/52021PC0206","accessed":"2026-08-19"}],"related":["ai-act-political-agreement-2023","ai-act-adoption-2024"],"proposed":false,"cards":[]},{"id":"mdr-application-2021","date":"2021-05-26","date_precision":"day","instrument":"Medical Device Regulation (Reg 2017/745)","instrument_short":"MDR","area":"policy-law","type":"application","title_en":"MDR applies after a one year Covid delay","title_es":"El MDR se aplica tras un año de retraso por la covid","summary_en":"Regulation 2017/745 became applicable on 26 May 2021, one year later than planned. Regulation (EU) 2020/561 of 23 April 2020 postponed the date from 26 May 2020 because of the Covid-19 pandemic.","summary_es":"El Reglamento 2017/745 pasó a ser aplicable el 26 de mayo de 2021, un año más tarde de lo previsto. El Reglamento (UE) 2020/561, de 23 de abril de 2020, aplazó la fecha desde el 26 de mayo de 2020 a causa de la pandemia de covid-19.","grading":"verified","not_tested":"A sector conformity regime the AI Act plugs into for high-risk classification of device software; the MDR application date does not itself regulate the AI model.","not_tested_es":"Un régimen sectorial de conformidad al que el Reglamento de IA se conecta para la clasificación de alto riesgo del software de dispositivos; la fecha de aplicación del MDR no regula por sí misma el modelo de IA.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2020/561 (CELEX 32020R0561)","url":"http://publications.europa.eu/resource/celex/32020R0561","accessed":"2026-08-19"}],"related":["ivdr-application-2022","msr-application-2021"],"proposed":false,"cards":[]},{"id":"msr-application-2021","date":"2021-07-16","date_precision":"day","instrument":"Market Surveillance Regulation (Reg 2019/1020)","instrument_short":"MSR","area":"policy-law","type":"application","title_en":"Market Surveillance Regulation becomes applicable","title_es":"El Reglamento de Vigilancia del Mercado pasa a ser aplicable","summary_en":"Regulation 2019/1020 on market surveillance and compliance of products became applicable on 16 July 2021, with Articles 29 to 33 and 36 applying from 1 January 2021.","summary_es":"El Reglamento 2019/1020, relativo a la vigilancia del mercado y la conformidad de los productos, pasó a ser aplicable el 16 de julio de 2021, con los artículos 29 a 33 y 36 aplicándose desde el 1 de enero de 2021.","grading":"verified","not_tested":"Governs enforcement infrastructure for harmonised products; it creates no product requirements of its own and does not itself regulate the AI model.","not_tested_es":"Rige la infraestructura de ejecución para los productos armonizados; no crea requisitos de producto propios y no regula por sí mismo el modelo de IA.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2019/1020 (CELEX 32019R1020)","url":"http://publications.europa.eu/resource/celex/32019R1020","accessed":"2026-08-19"}],"related":["mdr-application-2021","ivdr-application-2022","machinery-regulation-adoption-2023"],"proposed":false,"cards":[]},{"id":"whistleblower-transposition-2021","date":"2021-12-17","date_precision":"day","instrument":"Whistleblower Directive (Dir 2019/1937)","instrument_short":"Whistleblower Dir","area":"policy-law","type":"application","title_en":"Whistleblower Directive transposition deadline","title_es":"Plazo de transposición de la Directiva de protección del denunciante","summary_en":"Member States had to transpose Directive 2019/1937 of 23 October 2019 on the protection of persons reporting breaches of Union law by 17 December 2021; private entities with 50 to 249 workers had until 17 December 2023.","summary_es":"Los Estados miembros debían transponer la Directiva 2019/1937, de 23 de octubre de 2019, relativa a la protección de las personas que informen sobre infracciones del Derecho de la Unión, a más tardar el 17 de diciembre de 2021; las entidades privadas de 50 a 249 trabajadores tuvieron hasta el 17 de diciembre de 2023.","grading":"verified","not_tested":"Obliges Member States to protect reporting persons; it imposes no product conformity regime and does not itself regulate the AI model.","not_tested_es":"Obliga a los Estados miembros a proteger a las personas informantes; no impone ningún régimen de conformidad de producto y no regula por sí misma el modelo de IA.","sources":[{"label":"Publications Office of the EU, Directive (EU) 2019/1937, Article 26 (CELEX 32019L1937)","url":"http://publications.europa.eu/resource/celex/32019L1937","accessed":"2026-08-19"}],"related":[],"proposed":false,"cards":[]},{"id":"ivdr-application-2022","date":"2022-05-26","date_precision":"day","instrument":"In Vitro Diagnostic Medical Devices Regulation (Reg 2017/746)","instrument_short":"IVDR","area":"policy-law","type":"application","title_en":"IVDR becomes applicable across the EU","title_es":"El IVDR pasa a ser aplicable en toda la UE","summary_en":"Regulation 2017/746 on in vitro diagnostic medical devices became applicable on 26 May 2022, replacing Directive 98/79/EC, with staggered transition periods for legacy devices.","summary_es":"El Reglamento 2017/746, sobre los productos sanitarios para diagnóstico in vitro, pasó a ser aplicable el 26 de mayo de 2022, sustituyendo a la Directiva 98/79/CE, con periodos transitorios escalonados para los productos heredados.","grading":"verified","not_tested":"A sector conformity regime the AI Act plugs into for high-risk classification of diagnostic software; the IVDR application date does not itself regulate the AI model.","not_tested_es":"Un régimen sectorial de conformidad al que el Reglamento de IA se conecta para la clasificación de alto riesgo del software de diagnóstico; la fecha de aplicación del IVDR no regula por sí misma el modelo de IA.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2017/746 (CELEX 32017R0746)","url":"http://publications.europa.eu/resource/celex/32017R0746","accessed":"2026-08-19"}],"related":["mdr-application-2021","msr-application-2021"],"proposed":false,"cards":[]},{"id":"dga-adoption-2022","date":"2022-05-30","date_precision":"day","instrument":"Data Governance Act (Reg 2022/868)","instrument_short":"DGA","area":"policy-law","type":"adoption","title_en":"Data Governance Act adopted as Regulation (EU) 2022/868","title_es":"Adoptada la Ley de Gobernanza de Datos como Reglamento (UE) 2022/868","summary_en":"The European Parliament and the Council adopted Regulation (EU) 2022/868 on European data governance, signed at Brussels on 30 May 2022. It frames re-use of protected public sector data, a notification regime for data intermediation services and a registration regime for data altruism organisations, applying from 24 September 2023.","summary_es":"El Parlamento Europeo y el Consejo adoptaron el Reglamento (UE) 2022/868, relativo a la gobernanza europea de datos, firmado en Bruselas el 30 de mayo de 2022. Enmarca la reutilización de datos protegidos del sector público, un régimen de notificación para los servicios de intermediación de datos y un régimen de registro para las organizaciones de cesión altruista de datos, aplicándose desde el 24 de septiembre de 2023.","grading":"verified","not_tested":"Adoption bound nobody before the 24 September 2023 application date; the regime also leaves the GDPR untouched as the basis for processing personal data.","not_tested_es":"La adopción no vinculó a nadie antes de la fecha de aplicación del 24 de septiembre de 2023; el régimen deja además intacto el RGPD como base para el tratamiento de datos personales.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2022/868 (CELEX 32022R0868)","url":"http://publications.europa.eu/resource/celex/32022R0868","accessed":"2026-08-19"}],"related":["dga-application-2023","data-act-adoption-2023"],"proposed":false,"cards":[]},{"id":"dma-adoption-2022","date":"2022-09-14","date_precision":"day","instrument":"Digital Markets Act (Reg 2022/1925)","instrument_short":"DMA","area":"policy-law","type":"adoption","title_en":"Digital Markets Act adopted as Regulation (EU) 2022/1925","title_es":"Adoptada la Ley de Mercados Digitales como Reglamento (UE) 2022/1925","summary_en":"The European Parliament and the Council adopted Regulation (EU) 2022/1925 on contestable and fair markets in the digital sector, signed at Strasbourg on 14 September 2022. Under Article 54 the Regulation applied from 2 May 2023, opening the notification and designation machinery.","summary_es":"El Parlamento Europeo y el Consejo adoptaron el Reglamento (UE) 2022/1925, sobre mercados disputables y equitativos en el sector digital, firmado en Estrasburgo el 14 de septiembre de 2022. Conforme al artículo 54, el Reglamento se aplicó desde el 2 de mayo de 2023, abriendo la maquinaria de notificación y designación.","grading":"verified","not_tested":"Adoption created the regime on paper only; the Regulation applied from 2 May 2023 and bound no firm before the Commission designated it a gatekeeper.","not_tested_es":"La adopción creó el régimen solo sobre el papel; el Reglamento se aplicó desde el 2 de mayo de 2023 y no vinculó a ninguna empresa antes de que la Comisión la designara guardián de acceso.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2022/1925 (CELEX 32022R1925)","url":"http://publications.europa.eu/resource/celex/32022R1925","accessed":"2026-08-19"}],"related":["dma-proposal-2020","dma-gatekeeper-designation-2023"],"proposed":false,"cards":[]},{"id":"aild-proposal-2022","date":"2022-09-28","date_precision":"day","instrument":"AI Liability Directive (proposal COM(2022) 496 final, 2022/0303(COD))","instrument_short":"AILD","area":"policy-law","type":"proposal","title_en":"Commission proposes AI Liability Directive","title_es":"La Comisión propone la Directiva de responsabilidad en materia de IA","summary_en":"The Commission tabled the proposal for a directive on adapting non-contractual civil liability rules to artificial intelligence (COM(2022) 496 final, procedure 2022/0303(COD)) in Brussels on 28 September 2022. It would have eased fault-based claims for AI-caused damage through court-ordered disclosure of evidence on high-risk AI systems and rebuttable presumptions of causality, following a minimum harmonisation approach.","summary_es":"La Comisión presentó en Bruselas, el 28 de septiembre de 2022, la propuesta de directiva sobre la adaptación de las normas de responsabilidad civil extracontractual a la inteligencia artificial (COM(2022) 496 final, procedimiento 2022/0303(COD)). Habría facilitado las reclamaciones por culpa por daños causados por IA mediante la exhibición de pruebas ordenada judicialmente sobre sistemas de IA de alto riesgo y presunciones refutables de causalidad, con un enfoque de armonización mínima.","grading":"verified","not_tested":"A proposal binds nobody; even if adopted it would have harmonised only evidence rules (disclosure and presumptions) in fault-based claims, leaving strict liability, fault standards and compensable damage to national law.","not_tested_es":"Una propuesta no vincula a nadie; incluso adoptada habría armonizado solo normas probatorias (exhibición y presunciones) en reclamaciones por culpa, dejando la responsabilidad objetiva, los estándares de culpa y el daño indemnizable al derecho nacional.","sources":[{"label":"EUR-Lex, proposal COM(2022) 496 final with metadata (CELEX 52022PC0496)","url":"https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=CELEX:52022PC0496","accessed":"2026-08-19"}],"related":["aild-withdrawal-2025","pld-2024-adoption"],"proposed":false,"cards":[]},{"id":"dsa-adoption-2022","date":"2022-10-19","date_precision":"day","instrument":"Digital Services Act (Reg 2022/2065)","instrument_short":"DSA","area":"policy-law","type":"adoption","title_en":"Digital Services Act adopted as Regulation (EU) 2022/2065","title_es":"Adoptada la Ley de Servicios Digitales como Reglamento (UE) 2022/2065","summary_en":"The European Parliament and the Council adopted Regulation (EU) 2022/2065 on a Single Market for Digital Services, signed at Strasbourg on 19 October 2022. Article 93 staged its effect: certain provisions applied from 16 November 2022, with the bulk deferred to 17 February 2024.","summary_es":"El Parlamento Europeo y el Consejo adoptaron el Reglamento (UE) 2022/2065, relativo a un mercado único de servicios digitales, firmado en Estrasburgo el 19 de octubre de 2022. El artículo 93 escalonó su efecto: ciertas disposiciones se aplicaron desde el 16 de noviembre de 2022, con el grueso diferido al 17 de febrero de 2024.","grading":"verified","not_tested":"Adoption fixed the text without imposing duties on any provider; obligations reached firms only through the staged application dates from 16 November 2022 onwards.","not_tested_es":"La adopción fijó el texto sin imponer deberes a ningún proveedor; las obligaciones alcanzaron a las empresas solo por las fechas de aplicación escalonadas desde el 16 de noviembre de 2022.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2022/2065 (CELEX 32022R2065)","url":"http://publications.europa.eu/resource/celex/32022R2065","accessed":"2026-08-19"}],"related":["dsa-proposal-2020","dsa-vlop-designation-2023","dsa-full-application-2024"],"proposed":false,"cards":[]},{"id":"cer-adoption-2022","date":"2022-12-14","date_precision":"day","instrument":"Critical Entities Resilience Directive (Dir 2022/2557)","instrument_short":"CER","area":"policy-law","type":"adoption","title_en":"Critical Entities Resilience Directive adopted","title_es":"Adoptada la Directiva de resiliencia de las entidades críticas","summary_en":"The European Parliament and the Council adopted Directive (EU) 2022/2557 on the resilience of critical entities on 14 December 2022, repealing Council Directive 2008/114/EC. It was published in the Official Journal (L 333/164) on 27 December 2022, alongside NIS2 and DORA.","summary_es":"El Parlamento Europeo y el Consejo adoptaron la Directiva (UE) 2022/2557, relativa a la resiliencia de las entidades críticas, el 14 de diciembre de 2022, derogando la Directiva 2008/114/CE del Consejo. Se publicó en el Diario Oficial (L 333/164) el 27 de diciembre de 2022, junto a NIS2 y DORA.","grading":"verified","not_tested":"The Directive addresses physical and operational resilience of critical entities; cybersecurity of the same entities runs through NIS2, and no entity was bound before transposition and identification.","not_tested_es":"La Directiva aborda la resiliencia física y operativa de las entidades críticas; la ciberseguridad de esas mismas entidades corre por NIS2, y ninguna entidad quedó vinculada antes de la transposición y la identificación.","sources":[{"label":"Publications Office of the EU (Cellar), Official Journal text of Directive (EU) 2022/2557, CELEX 32022L2557","url":"https://publications.europa.eu/resource/celex/32022L2557","accessed":"2026-08-19"}],"related":["cer-transposition-deadline-2024","nis2-adoption-2022","dora-adoption-2022"],"proposed":false,"cards":[]},{"id":"dora-adoption-2022","date":"2022-12-14","date_precision":"day","instrument":"Digital Operational Resilience Act (Reg 2022/2554)","instrument_short":"DORA","area":"policy-law","type":"adoption","title_en":"DORA (Reg 2022/2554) adopted","title_es":"Adoptado DORA, el Reglamento 2022/2554","summary_en":"The European Parliament and the Council adopted Regulation (EU) 2022/2554 on digital operational resilience for the financial sector on 14 December 2022. It was published in the Official Journal (L 333/1) on 27 December 2022, in the same issue as NIS2 and the CER Directive.","summary_es":"El Parlamento Europeo y el Consejo adoptaron el Reglamento (UE) 2022/2554, sobre la resiliencia operativa digital del sector financiero, el 14 de diciembre de 2022. Se publicó en el Diario Oficial (L 333/1) el 27 de diciembre de 2022, en el mismo número que NIS2 y la Directiva CER.","grading":"verified","not_tested":"Adoption started the clock only; financial entities' ICT risk obligations applied from 17 January 2025, and the cloud providers underneath answer mainly through contract clauses.","not_tested_es":"La adopción solo puso en marcha el reloj; las obligaciones de riesgo de las TIC de las entidades financieras se aplicaron desde el 17 de enero de 2025, y los proveedores de nube por debajo responden principalmente a través de cláusulas contractuales.","sources":[{"label":"Publications Office of the EU (Cellar), Official Journal text of Regulation (EU) 2022/2554, CELEX 32022R2554","url":"https://publications.europa.eu/resource/celex/32022R2554","accessed":"2026-08-19"}],"related":["dora-application-2025","nis2-adoption-2022","cer-adoption-2022"],"proposed":false,"cards":[]},{"id":"nis2-adoption-2022","date":"2022-12-14","date_precision":"day","instrument":"NIS2 Directive (Dir 2022/2555)","instrument_short":"NIS2","area":"policy-law","type":"adoption","title_en":"NIS2 Directive (Dir 2022/2555) adopted","title_es":"Adoptada la Directiva NIS2, la Directiva 2022/2555","summary_en":"The European Parliament and the Council adopted Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union on 14 December 2022. It was published in the Official Journal (L 333/80) on 27 December 2022, in the same issue as the CER Directive and DORA, and covers essential and important entities across critical sectors.","summary_es":"El Parlamento Europeo y el Consejo adoptaron la Directiva (UE) 2022/2555, relativa a las medidas destinadas a garantizar un elevado nivel común de ciberseguridad en toda la Unión, el 14 de diciembre de 2022. Se publicó en el Diario Oficial (L 333/80) el 27 de diciembre de 2022, en el mismo número que la Directiva CER y DORA, y cubre entidades esenciales e importantes de los sectores críticos.","grading":"verified","not_tested":"Adoption alone bound no operator; duties reach essential and important entities only through national transposition, and hardware provenance in those entities' supply chains stays untested.","not_tested_es":"La adopción por sí sola no vinculó a ningún operador; los deberes alcanzan a las entidades esenciales e importantes solo por la transposición nacional, y la procedencia del hardware en las cadenas de suministro de esas entidades queda sin comprobar.","sources":[{"label":"Publications Office of the EU (Cellar), Official Journal text of Directive (EU) 2022/2555, CELEX 32022L2555","url":"https://publications.europa.eu/resource/celex/32022L2555","accessed":"2026-08-19"}],"related":["nis2-transposition-deadline-2024","nis2-cjeu-referral-2026","cer-adoption-2022","dora-adoption-2022"],"proposed":false,"cards":[]},{"id":"sis-renewed-operational-2023","date":"2023-03-07","date_precision":"day","instrument":"Schengen Information System (Reg 2018/1861 and 2018/1862)","instrument_short":"SIS","area":"policy-law","type":"application","title_en":"Renewed Schengen Information System enters into operation","title_es":"El Sistema de Información de Schengen renovado entra en funcionamiento","summary_en":"On 7 March 2023 the upgraded SIS went live in 30 European countries, adding new alert categories and further biometric data. Its legal basis, Regulations 2018/1861 and 2018/1862, was adopted on 28 November 2018.","summary_es":"El 7 de marzo de 2023 el SIS mejorado entró en servicio en 30 países europeos, añadiendo nuevas categorías de descripciones y más datos biométricos. Su base jurídica, los Reglamentos 2018/1861 y 2018/1862, se adoptó el 28 de noviembre de 2018.","grading":"verified","not_tested":"Entry into operation of the renewed SIS did not switch on interoperability with the EES and ETIAS, neither of which was running in March 2023.","not_tested_es":"La entrada en funcionamiento del SIS renovado no activó la interoperabilidad con el SES y el ETIAS, ninguno de los cuales operaba en marzo de 2023.","sources":[{"label":"eu-LISA press release, The renewed Schengen Information System, 7 March 2023","url":"https://www.eulisa.europa.eu/news-and-events/news/renewed-schengen-information-system","accessed":"2026-08-19"}],"related":["ees-operational-2025","etias-adopted-2018"],"proposed":false,"cards":[]},{"id":"dsa-vlop-designation-2023","date":"2023-04-25","date_precision":"day","instrument":"Digital Services Act (Reg 2022/2065)","instrument_short":"DSA","area":"policy-law","type":"application","title_en":"First 19 very large platforms and search engines designated","title_es":"Designadas las primeras 19 plataformas y motores de búsqueda de muy gran tamaño","summary_en":"On 25 April 2023 the Commission adopted the first designation decisions under the DSA, naming 17 very large online platforms and 2 very large online search engines with over 45 million EU users. Under Article 92 the full DSA obligations applied to them within four months of notification, ahead of the general application date.","summary_es":"El 25 de abril de 2023 la Comisión adoptó las primeras decisiones de designación bajo la Ley de Servicios Digitales, nombrando 17 plataformas en línea de muy gran tamaño y 2 motores de búsqueda en línea de muy gran tamaño con más de 45 millones de usuarios en la UE. Conforme al artículo 92, las obligaciones completas de la ley se les aplicaron a los cuatro meses de la notificación, antes de la fecha de aplicación general.","grading":"verified","not_tested":"The decisions bind only the 19 designated services; platforms below the 45 million user threshold owed no DSA duties until 17 February 2024.","not_tested_es":"Las decisiones vinculan solo a los 19 servicios designados; las plataformas por debajo del umbral de 45 millones de usuarios no debían nada bajo la ley hasta el 17 de febrero de 2024.","sources":[{"label":"European Commission press corner, IP/23/2413, DSA: Commission designates first set of Very Large Online Platforms and Search Engines","url":"https://ec.europa.eu/commission/presscorner/detail/en/ip_23_2413","accessed":"2026-08-19"},{"label":"Publications Office of the EU, Regulation (EU) 2022/2065, Article 92 (CELEX 32022R2065)","url":"http://publications.europa.eu/resource/celex/32022R2065","accessed":"2026-08-19"}],"related":["dsa-adoption-2022","dsa-full-application-2024"],"proposed":false,"cards":[]},{"id":"eucs-sovereignty-criteria-2023","date":"2023-05-01","date_precision":"month","instrument":"EUCS, candidate European Cybersecurity Certification Scheme for Cloud Services (revised draft, May 2023)","instrument_short":"EUCS","area":"policy-law","type":"amendment","title_en":"EUCS draft adds immunity from non-EU law at top level","title_es":"El borrador del EUCS añade la inmunidad frente al derecho no europeo en el nivel más alto","summary_en":"A revised ENISA draft of May 2023 introduced explicit sovereignty requirements for the first time: independence of the cloud service from non-EU legislation, EU location of data storage, processing and support, and effective control of the provider, set out in a new Annex J. The draft split assurance level high into evaluation levels CS-EL3 and CS-EL4, reserving the sovereignty criteria for the most sensitive tier; member state non-papers on immunity from non-EU law, modelled on France's SecNumCloud, had pushed this approach since 2021.","summary_es":"Un borrador revisado de ENISA de mayo de 2023 introdujo por primera vez requisitos explícitos de soberanía: independencia del servicio de nube respecto de la legislación no europea, ubicación en la UE del almacenamiento, el tratamiento y el soporte de los datos, y control efectivo del proveedor, recogidos en un nuevo anexo J. El borrador dividió el nivel de garantía alto en los niveles de evaluación CS-EL3 y CS-EL4, reservando los criterios de soberanía para el escalón más sensible; los documentos oficiosos de Estados miembros sobre inmunidad frente al derecho no europeo, inspirados en el SecNumCloud francés, empujaban este enfoque desde 2021.","grading":"reported","not_tested":"The draft criteria graded establishment, ownership and applicable law in a text that never gained legal force, and they stopped before the hardware.","not_tested_es":"Los criterios del borrador graduaban establecimiento, propiedad y derecho aplicable en un texto que nunca adquirió fuerza legal, y se detenían antes del hardware.","sources":[{"label":"Centre for European Policy (cep), cepInput No. 8/2025, EU Cloud Certification at an Impasse, 25 April 2025","url":"https://www.cep.eu/fileadmin/user_upload/cep.eu/cepItalia/cepInput_EU_Cloud_Certification_at_an_Impasse.pdf","accessed":"2026-08-19"}],"related":["eucs-candidate-scheme-2020","eucs-sovereignty-criteria-dropped-2024","csf-procurement-launch-2025","cada-proposal-2026"],"proposed":false,"cards":["certs"]},{"id":"machinery-regulation-adoption-2023","date":"2023-06-14","date_precision":"day","instrument":"Machinery Regulation (Reg 2023/1230)","instrument_short":"Machinery Reg","area":"policy-law","type":"adoption","title_en":"Machinery Regulation adopted; repeals Directive 2006/42","title_es":"Adoptado el Reglamento de Máquinas; deroga la Directiva 2006/42","summary_en":"The European Parliament and the Council adopted Regulation (EU) 2023/1230 on machinery on 14 June 2023, published in OJ L 165 on 29 June 2023. It repeals the Machinery Directive 2006/42/EC with effect from 20 January 2027.","summary_es":"El Parlamento Europeo y el Consejo adoptaron el Reglamento (UE) 2023/1230, relativo a las máquinas, el 14 de junio de 2023, publicado en el DO L 165 de 29 de junio de 2023. Deroga la Directiva de Máquinas 2006/42/CE con efectos desde el 20 de enero de 2027.","grading":"verified","not_tested":"Adoption fixed the text only; no machinery obligations bound manufacturers until the staged application dates, and the regulation does not itself regulate the AI model.","not_tested_es":"La adopción fijó solo el texto; ninguna obligación sobre máquinas vinculó a los fabricantes hasta las fechas de aplicación escalonadas, y el reglamento no regula por sí mismo el modelo de IA.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2023/1230 (CELEX 32023R1230)","url":"http://publications.europa.eu/resource/celex/32023R1230","accessed":"2026-08-19"}],"related":["machinery-regulation-application-2027","msr-application-2021"],"proposed":false,"cards":[]},{"id":"dma-gatekeeper-designation-2023","date":"2023-09-06","date_precision":"day","instrument":"Digital Markets Act (Reg 2022/1925)","instrument_short":"DMA","area":"policy-law","type":"application","title_en":"Commission designates first six gatekeepers under the DMA","title_es":"La Comisión designa los primeros seis guardianes de acceso bajo la Ley de Mercados Digitales","summary_en":"On 6 September 2023 the Commission designated Alphabet, Amazon, Apple, ByteDance, Meta and Microsoft as the first gatekeepers, covering 22 core platform services in total. Under Article 3(10) each firm then had six months to comply with the obligations in Articles 5, 6 and 7.","summary_es":"El 6 de septiembre de 2023 la Comisión designó a Alphabet, Amazon, Apple, ByteDance, Meta y Microsoft como primeros guardianes de acceso, cubriendo 22 servicios básicos de plataforma en total. Conforme al artículo 3, apartado 10, cada empresa tuvo entonces seis meses para cumplir las obligaciones de los artículos 5, 6 y 7.","grading":"verified","not_tested":"Designation binds six named firms across 22 core platform services; companies below the user and turnover thresholds stay outside the regime entirely.","not_tested_es":"La designación vincula a seis empresas nombradas en 22 servicios básicos de plataforma; las compañías por debajo de los umbrales de usuarios y facturación quedan enteramente fuera del régimen.","sources":[{"label":"European Commission press corner, IP/23/4328, Digital Markets Act: Commission designates six gatekeepers","url":"https://ec.europa.eu/commission/presscorner/detail/en/ip_23_4328","accessed":"2026-08-19"},{"label":"Publications Office of the EU, Regulation (EU) 2022/1925, Article 3(10) (CELEX 32022R1925)","url":"http://publications.europa.eu/resource/celex/32022R1925","accessed":"2026-08-19"}],"related":["dma-adoption-2022","dma-compliance-2024"],"proposed":false,"cards":[]},{"id":"dga-application-2023","date":"2023-09-24","date_precision":"day","instrument":"Data Governance Act (Reg 2022/868)","instrument_short":"DGA","area":"policy-law","type":"application","title_en":"Data Governance Act becomes applicable across the EU","title_es":"La Ley de Gobernanza de Datos pasa a ser aplicable en toda la UE","summary_en":"Under Article 38 the DGA applied from 24 September 2023. From that date data intermediation service providers owed notification duties, data altruism organisations could register, and public sector bodies had to follow the conditions for re-use of protected data.","summary_es":"Conforme a su artículo 38, la Ley de Gobernanza de Datos se aplicó desde el 24 de septiembre de 2023. Desde esa fecha los proveedores de servicios de intermediación de datos debían notificar, las organizaciones de cesión altruista de datos podían registrarse, y los organismos del sector público tenían que seguir las condiciones de reutilización de los datos protegidos.","grading":"verified","not_tested":"The DGA disciplines intermediaries, altruism organisations and public sector re-use conditions; it compels no private data holder to share anything, a gap the Data Act later addresses.","not_tested_es":"La ley disciplina a los intermediarios, las organizaciones de cesión altruista y las condiciones de reutilización del sector público; no obliga a ningún titular privado de datos a compartir nada, una laguna que la Ley de Datos aborda después.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2022/868, Article 38 (CELEX 32022R0868)","url":"http://publications.europa.eu/resource/celex/32022R0868","accessed":"2026-08-19"}],"related":["dga-adoption-2022","data-act-application-2025"],"proposed":false,"cards":[]},{"id":"ai-act-political-agreement-2023","date":"2023-12-09","date_precision":"day","instrument":"AI Act (Reg 2024/1689)","instrument_short":"AI Act","area":"policy-law","type":"political-agreement","title_en":"Parliament and Council strike political deal on the AI Act","title_es":"El Parlamento y el Consejo cierran el acuerdo político sobre el Reglamento de IA","summary_en":"Council presidency and European Parliament negotiators concluded the trilogue on the AI Act with a provisional political agreement announced on 9 December 2023. The Council presented it as the first comprehensive rules for AI in the world.","summary_es":"La presidencia del Consejo y los negociadores del Parlamento Europeo concluyeron el trílogo sobre el Reglamento de IA con un acuerdo político provisional anunciado el 9 de diciembre de 2023. El Consejo lo presentó como las primeras normas integrales sobre IA del mundo.","grading":"verified","not_tested":"The trilogue deal bound only the negotiators politically; no legal text was in force and no operator obligation arose until formal adoption in 2024.","not_tested_es":"El acuerdo del trílogo vinculó solo políticamente a los negociadores; ningún texto legal estaba en vigor y ninguna obligación para operadores nació hasta la adopción formal en 2024.","sources":[{"label":"Council of the EU press release, 9 December 2023","url":"https://www.consilium.europa.eu/en/press/press-releases/2023/12/09/artificial-intelligence-act-council-and-parliament-strike-a-deal-on-the-first-worldwide-rules-for-ai/","accessed":"2026-08-19"}],"related":["ai-act-proposal-2021","ai-act-adoption-2024"],"proposed":false,"cards":[]},{"id":"data-act-adoption-2023","date":"2023-12-13","date_precision":"day","instrument":"Data Act (Reg 2023/2854)","instrument_short":"Data Act","area":"policy-law","type":"adoption","title_en":"Data Act adopted as Regulation (EU) 2023/2854","title_es":"Adoptada la Ley de Datos como Reglamento (UE) 2023/2854","summary_en":"The European Parliament and the Council adopted Regulation (EU) 2023/2854 on harmonised rules on fair access to and use of data, signed at Strasbourg on 13 December 2023. It establishes access rights to data from connected products, business-to-government sharing and cloud-switching rules, with application deferred to 12 September 2025.","summary_es":"El Parlamento Europeo y el Consejo adoptaron el Reglamento (UE) 2023/2854, sobre normas armonizadas para un acceso justo a los datos y su utilización, firmado en Estrasburgo el 13 de diciembre de 2023. Establece derechos de acceso a los datos de los productos conectados, el intercambio de empresa a administración y normas de cambio de proveedor de nube, con la aplicación diferida al 12 de septiembre de 2025.","grading":"verified","not_tested":"Adoption imposed nothing immediately; data holders, device makers and cloud providers owed no Data Act duties before 12 September 2025.","not_tested_es":"La adopción no impuso nada de inmediato; titulares de datos, fabricantes de dispositivos y proveedores de nube no debían nada bajo la Ley de Datos antes del 12 de septiembre de 2025.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2023/2854 (CELEX 32023R2854)","url":"http://publications.europa.eu/resource/celex/32023R2854","accessed":"2026-08-19"}],"related":["data-act-application-2025","dga-adoption-2022"],"proposed":false,"cards":[]},{"id":"dsa-full-application-2024","date":"2024-02-17","date_precision":"day","instrument":"Digital Services Act (Reg 2022/2065)","instrument_short":"DSA","area":"policy-law","type":"application","title_en":"Digital Services Act applies in full across the EU","title_es":"La Ley de Servicios Digitales se aplica plenamente en toda la UE","summary_en":"Under Article 93(2) the DSA applied from 17 February 2024 to all intermediary services offered in the EU, from hosting providers to marketplaces. The same date was the deadline for Member States to designate their Digital Services Coordinators.","summary_es":"Conforme al artículo 93, apartado 2, la Ley de Servicios Digitales se aplicó desde el 17 de febrero de 2024 a todos los servicios intermediarios ofrecidos en la UE, desde proveedores de alojamiento hasta mercados en línea. La misma fecha era el plazo para que los Estados miembros designaran a sus coordinadores de servicios digitales.","grading":"verified","not_tested":"The DSA disciplines moderation procedures, transparency and risk management; it leaves the definition of what content is illegal to other EU and national law.","not_tested_es":"La ley disciplina los procedimientos de moderación, la transparencia y la gestión de riesgos; deja la definición de qué contenido es ilícito a otras normas de la UE y nacionales.","sources":[{"label":"Publications Office of the EU, Regulation (EU) 2022/2065, Article 93 (CELEX 32022R2065)","url":"http://publications.europa.eu/resource/celex/32022R2065","accessed":"2026-08-19"}],"related":["dsa-adoption-2022","dsa-vlop-designation-2023"],"proposed":false,"cards":[]},{"id":"eucs-sovereignty-criteria-dropped-2024","date":"2024-03-01","date_precision":"month","instrument":"EUCS, candidate European Cybersecurity Certification Scheme for Cloud Services (draft V1.0.413, March 2024)","instrument_short":"EUCS","area":"policy-law","type":"amendment","title_en":"March 2024 EUCS draft drops the sovereignty requirements","title_es":"El borrador del EUCS de marzo de 2024 retira los requisitos de soberanía","summary_en":"After lengthy discussions and interventions by member state governments, the EUCS draft of March 2024 (V1.0.413) no longer contains the sovereignty requirements, and the split of assurance level high into CS-EL3 and CS-EL4 disappeared with them. Sovereignty conditions were left to national schemes such as France's SecNumCloud and to contractual clauses, allowing non-EU providers to reach the highest certification level.","summary_es":"Tras largas discusiones e intervenciones de gobiernos de Estados miembros, el borrador del EUCS de marzo de 2024 (V1.0.413) ya no contiene los requisitos de soberanía, y la división del nivel de garantía alto en CS-EL3 y CS-EL4 desapareció con ellos. Las condiciones de soberanía quedaron para los esquemas nacionales, como el SecNumCloud francés, y para cláusulas contractuales, permitiendo a proveedores no europeos alcanzar el nivel más alto de certificación.","grading":"reported","not_tested":"The removal settled nothing in law: without an implementing act the scheme still could not issue a certificate at any level.","not_tested_es":"La retirada no zanjó nada en derecho: sin acto de ejecución, el esquema seguía sin poder emitir un certificado en ningún nivel.","sources":[{"label":"Centre for European Policy (cep), cepInput No. 8/2025, EU Cloud Certification at an Impasse, 25 April 2025","url":"https://www.cep.eu/fileadmin/user_upload/cep.eu/cepItalia/cepInput_EU_Cloud_Certification_at_an_Impasse.pdf","accessed":"2026-08-19"}],"related":["eucs-sovereignty-criteria-2023","eucs-candidate-scheme-2020","eucs-stalled-2026","cada-proposal-2026"],"proposed":false,"cards":["certs"]},{"id":"dma-compliance-2024","date":"2024-03-07","date_precision":"day","instrument":"Digital Markets Act (Reg 2022/1925)","instrument_short":"DMA","area":"policy-law","type":"application","title_en":"DMA compliance deadline arrives for the six gatekeepers","title_es":"Vence el plazo de cumplimiento de la Ley de Mercados Digitales para los seis guardianes de acceso","summary_en":"The six-month window under Article 3(10) closed on 7 March 2024, by which date Alphabet, Amazon, Apple, ByteDance, Meta and Microsoft had to comply fully with the DMA obligations for each designated core platform service. The Commission opened its first non-compliance investigations on 25 March 2024.","summary_es":"La ventana de seis meses del artículo 3, apartado 10, se cerró el 7 de marzo de 2024, fecha en la que Alphabet, Amazon, Apple, ByteDance, Meta y Microsoft debían cumplir plenamente las obligaciones de la ley para cada servicio básico de plataforma designado. La Comisión abrió sus primeras investigaciones por incumplimiento el 25 de marzo de 2024.","grading":"verified","not_tested":"The deadline bound the six gatekeepers designated in September 2023; any firm designated later runs its own six-month clock under Article 3(10).","not_tested_es":"El plazo vinculó a los seis guardianes designados en septiembre de 2023; cualquier empresa designada después corre su propio reloj de seis meses bajo el artículo 3, apartado 10.","sources":[{"label":"European Commission press corner, IP/24/1689, Commission opens non-compliance investigations against Alphabet, Apple and Meta under the Digital Markets Act","url":"https://ec.europa.eu/commission/presscorner/detail/en/ip_24_1689","accessed":"2026-08-19"},{"label":"Publications Office of the EU, Regulation (EU) 2022/1925, Article 3(10) (CELEX 32022R1925)","url":"http://publications.europa.eu/resource/celex/32022R1925","accessed":"2026-08-19"}],"related":["dma-gatekeeper-designation-2023"],"proposed":false,"cards":[]},{"id":"interoperable-europe-act-adoption-2024","date":"2024-03-13","date_precision":"day","instrument":"Regulation (EU) 2024/903 laying down measures for a high level of public sector interoperability across the Union (Interoperable Europe Act)","instrument_short":"Interoperable Europe Act","area":"policy-law","type":"adoption","title_en":"Interoperable Europe Act adopted","title_es":"Adoptado el Reglamento de la Europa Interoperable","summary_en":"Regulation (EU) 2024/903 sets binding interoperability assessments for public administrations and mandates sharing of reusable solutions, including open source, through an Interoperable Europe Board and portal. Public sector interoperability reduces vendor lock-in, a core lever of European digital sovereignty.","summary_es":"El Reglamento (UE) 2024/903 establece evaluaciones de interoperabilidad vinculantes para las administraciones públicas y ordena compartir soluciones reutilizables, incluido el código abierto, a través de un Comité y un portal de la Europa Interoperable. La interoperabilidad del sector público reduce la dependencia de proveedores, una palanca central de la soberanía digital europea.","grading":"verified","not_tested":"It binds Union entities and public sector bodies only; private companies carry no interoperability obligations under it.","not_tested_es":"Vincula solo a las entidades de la Unión y a los organismos del sector público; las empresas privadas no cargan con ninguna obligación de interoperabilidad bajo él.","sources":[{"label":"Publications Office of the EU, Official Journal text of Regulation (EU) 2024/903 (CELEX 32024R0903)","url":"https://publications.europa.eu/resource/celex/32024R0903","accessed":"2026-08-19"}],"related":[],"proposed":false,"cards":[]},{"id":"eidas2-adoption-2024","date":"2024-04-11","date_precision":"day","instrument":"Regulation (EU) 2024/1183 amending Regulation (EU) No 910/2014 as regards establishing the European Digital Identity Framework","instrument_short":"eIDAS 2","area":"policy-law","type":"adoption","title_en":"eIDAS 2 adopted, mandating the EU Digital Identity Wallet","title_es":"Adoptado eIDAS 2, que ordena la Cartera Europea de Identidad Digital","summary_en":"Amends Regulation (EU) No 910/2014 to create the European Digital Identity Framework, obliging every member state to offer citizens an EU Digital Identity Wallet. It belongs on a sovereignty timeline because it builds a state-backed European alternative to identity log-ins controlled by non-EU platforms.","summary_es":"Modifica el Reglamento (UE) n.º 910/2014 para crear el Marco Europeo de Identidad Digital, obligando a cada Estado miembro a ofrecer a sus ciudadanos una Cartera Europea de Identidad Digital. Pertenece a una cronología de soberanía porque construye una alternativa europea con respaldo estatal a los inicios de sesión de identidad controlados por plataformas no europeas.","grading":"verified","not_tested":"It obliges states to offer wallets and large platforms to accept them; citizens face no obligation to use one.","not_tested_es":"Obliga a los Estados a ofrecer carteras y a las grandes plataformas a aceptarlas; los ciudadanos no tienen ninguna obligación de usar una.","sources":[{"label":"Publications Office of the EU, Official Journal text of Regulation (EU) 2024/1183 (CELEX 32024R1183)","url":"https://publications.europa.eu/resource/celex/32024R1183","accessed":"2026-08-19"}],"related":[],"proposed":false,"cards":[]},{"id":"eurodac-recast-adopted-2024","date":"2024-05-14","date_precision":"day","instrument":"Eurodac (Reg 2024/1358)","instrument_short":"Eurodac","area":"policy-law","type":"adoption","title_en":"Eurodac recast regulation adopted under the migration pact","title_es":"Adoptada la refundición de Eurodac bajo el pacto migratorio","summary_en":"Regulation 2024/1358, adopted on 14 May 2024 as part of the Pact on Migration and Asylum, recasts Eurodac from a fingerprint database into a wider asylum and migration management system. Article 63 sets its application from 12 June 2026.","summary_es":"El Reglamento 2024/1358, adoptado el 14 de mayo de 2024 como parte del Pacto sobre Migración y Asilo, refunde Eurodac y lo convierte de una base de datos de impresiones dactilares en un sistema más amplio de gestión del asilo y la migración. Su artículo 63 fija la aplicación desde el 12 de junio de 2026.","grading":"verified","not_tested":"Adoption binds no authority in practice until the recast applies from 12 June 2026, with Article 26 applying only from 12 June 2029.","not_tested_es":"La adopción no vincula en la práctica a ninguna autoridad hasta que la refundición se aplique desde el 12 de junio de 2026, con el artículo 26 aplicándose solo desde el 12 de junio de 2029.","sources":[{"label":"Publications Office of the EU, Official Journal text of Regulation (EU) 2024/1358 (CELEX 32024R1358)","url":"https://publications.europa.eu/resource/celex/32024R1358","accessed":"2026-08-19"},{"label":"Council of the EU press release, The Council adopts the EU's pact on migration and asylum, 14 May 2024","url":"https://www.consilium.europa.eu/en/press/press-releases/2024/05/14/the-council-adopts-the-eu-s-pact-on-migration-and-asylum/","accessed":"2026-08-19"}],"related":[],"proposed":false,"cards":[]},{"id":"ai-act-adoption-2024","date":"2024-07-12","date_precision":"day","instrument":"AI Act (Reg 2024/1689)","instrument_short":"AI Act","area":"policy-law","type":"adoption","title_en":"AI Act adopted and published in the Official Journal","title_es":"El Reglamento de IA, adoptado y publicado en el Diario Oficial","summary_en":"Parliament adopted its position on 13 March 2024 and the Council took its decision on 21 May 2024. The act signed on 13 June 2024 was published in the Official Journal as Regulation (EU) 2024/1689 on 12 July 2024.","summary_es":"El Parlamento adoptó su posición el 13 de marzo de 2024 y el Consejo tomó su decisión el 21 de mayo de 2024. El acto firmado el 13 de junio de 2024 se publicó en el Diario Oficial como Reglamento (UE) 2024/1689 el 12 de julio de 2024.","grading":"verified","not_tested":"Publication created no operator obligations; the act entered into force on 1 August 2024 and its first obligations applied from 2 February 2025.","not_tested_es":"La publicación no creó obligaciones para los operadores; el acto entró en vigor el 1 de agosto de 2024 y sus primeras obligaciones se aplicaron desde el 2 de febrero de 2025.","sources":[{"label":"Publications Office (CELLAR), Regulation (EU) 2024/1689, OJ L, 12.7.2024","url":"http://publications.europa.eu/resource/celex/32024R1689","accessed":"2026-08-19"}],"related":["ai-act-political-agreement-2023","ai-act-entry-into-force-2024"],"proposed":false,"cards":[]},{"id":"ai-act-entry-into-force-2024","date":"2024-08-01","date_precision":"day","instrument":"AI Act (Reg 2024/1689)","instrument_short":"AI Act","area":"policy-law","type":"entry-into-force","title_en":"AI Act enters into force","title_es":"El Reglamento de IA entra en vigor","summary_en":"Article 113 sets entry into force on the twentieth day after Official Journal publication. Publication on 12 July 2024 put entry into force at 1 August 2024, starting the staged transition periods.","summary_es":"El artículo 113 fija la entrada en vigor a los veinte días de la publicación en el Diario Oficial. La publicación del 12 de julio de 2024 situó la entrada en vigor el 1 de agosto de 2024, arrancando los periodos transitorios escalonados.","grading":"verified","not_tested":"Entry into force only started the transition clocks; no prohibition, high-risk, GPAI or transparency obligation applied before 2 February 2025.","not_tested_es":"La entrada en vigor solo puso en marcha los relojes de transición; ninguna prohibición ni obligación de alto riesgo, de IA de propósito general o de transparencia se aplicó antes del 2 de febrero de 2025.","sources":[{"label":"Publications Office (CELLAR), Regulation (EU) 2024/1689, Article 113","url":"http://publications.europa.eu/resource/celex/32024R1689","accessed":"2026-08-19"}],"related":["ai-act-adoption-2024","ai-act-prohibitions-application-2025"],"proposed":false,"cards":[]},{"id":"cer-transposition-deadline-2024","date":"2024-10-17","date_precision":"day","instrument":"Critical Entities Resilience Directive (Dir 2022/2557)","instrument_short":"CER","area":"policy-law","type":"application","title_en":"CER Directive transposition deadline","title_es":"Plazo de transposición de la Directiva CER","summary_en":"Article 26 required member states to adopt and publish measures complying with the CER Directive by 17 October 2024 and to apply them from 18 October 2024. Article 6 then gave member states until 17 July 2026 to identify their critical entities in the sectors set out in the Annex.","summary_es":"El artículo 26 exigía a los Estados miembros adoptar y publicar las medidas de cumplimiento de la Directiva CER a más tardar el 17 de octubre de 2024 y aplicarlas desde el 18 de octubre de 2024. El artículo 6 dio después a los Estados miembros hasta el 17 de julio de 2026 para identificar sus entidades críticas en los sectores del anexo.","grading":"verified","not_tested":"The deadline binds member states; a critical entity carries resilience duties only after its state identifies it under Article 6, a step due by 17 July 2026.","not_tested_es":"El plazo vincula a los Estados miembros; una entidad crítica solo carga con deberes de resiliencia después de que su Estado la identifique bajo el artículo 6, un paso previsto a más tardar el 17 de julio de 2026.","sources":[{"label":"Publications Office of the EU (Cellar), Official Journal text of Directive (EU) 2022/2557, Articles 6 and 26, CELEX 32022L2557","url":"https://publications.europa.eu/resource/celex/32022L2557","accessed":"2026-08-19"}],"related":["cer-adoption-2022","nis2-transposition-deadline-2024"],"proposed":false,"cards":[]}]}