Italy NIS2: basic security measures due in October 2026
Entities on Italy's 2025 NIS list have 18 months to adopt ACN's basic security measures, ending in October 2026. Those listed in 2026 have until July 2027.
Dazr Compliance news
Short, sourced updates on EU and national rules for cybersecurity, privacy, AI and operational resilience: what changed, what comes next and when.
GDPR enforcement in 2026: large fines and new procedures
Google fined EUR 403 million over location data, faster cross-border procedures from April 2027, and GDPR changes that are still only proposals.
AI Act after the Digital Omnibus: the new dates
Regulation (EU) 2026/1744 moved the AI Act's high-risk rules to December 2027 and August 2028. Transparency duties have applied since 2 August 2026.
Austria: the NISG 2026 applies from 1 October 2026
Austria's NIS2 law has applied since 1 October 2026 to about 4,000 organisations. Registration, self-declaration and reporting deadlines at a glance.
Cyber Resilience Act: reporting is live, the rest follows in 2027
Since 11 September 2026 manufacturers report exploited vulnerabilities and severe incidents to ENISA's platform. Full CRA rules apply on 11 December 2027.
Data Act: new duties for connected products, free cloud switching next
The Data Act has applied since 12 September 2025. Design duties for connected products followed in 2026; cloud switching charges end on 12 January 2027.
DORA: the first critical ICT providers are designated
The ESAs designated 19 critical ICT third-party providers under DORA, now under direct EU oversight. What it means for financial entities and suppliers.
NIS2 in October 2026: where transposition stands
Two years after the deadline, four Member States are before the EU Court of Justice, while Germany, the Netherlands and Austria now apply NIS2 laws.