Skip to content
Reltime

Regulatory dates. What lands, when, who it reaches and what it asks you to prove.

Filter by sector and framework. Each entry links to the official source.

Sector
Framework
Status

16 entries

Always on

Ongoing since 25 May 2018 · ongoing

In force

GDPR

Data protection, data minimisation and accountability

Who it reaches ·
Every organisation processing personal data in the EU/EEA
Evidence example ·
Show which data was used, by whom, on what basis, and that copies were kept to a minimum
Where Reltime fits ·
Proof shared, copy withheld. Access and integrity events anchored without personal data on the network
Official source Discuss this workflowRun the Rail FinderLast reviewed 6 Oct 2026

2024

17 Oct 2024 · transposition deadline, check national law · transposition

In force

NIS2

Cybersecurity risk management and incident reporting

Who it reaches ·
Essential and important entities in 18 sectors
Evidence example ·
Incident timeline, owner, classification and notifications, plus security measures in place
Where Reltime fits ·
Incident rail with owner assignment, escalation and a signed timeline
Official source Discuss this workflowRun the Rail FinderLast reviewed 6 Oct 2026

2025

Applies from 17 Jan 2025 · application

In force

DORA

Digital operational resilience for financial entities

Who it reaches ·
Banks, insurers, investment firms, payment institutions and their critical ICT providers
Evidence example ·
ICT incident handling, third-party register and approvals for changes to critical services
Where Reltime fits ·
Change gating and incident evidence across ICT providers
Official source Discuss this workflowRun the Rail FinderLast reviewed 6 Oct 2026

2026

2 Aug 2026 · phased, with exceptions · phased

In force

AI Act

General application of the AI Act

Who it reaches ·
Providers and deployers, by role and system category
Evidence example ·
Logs tying each output to a model version, inputs reference and responsible role
Where Reltime fits ·
Model version and decision sealed per event
Official source Discuss this workflowRun the Rail FinderLast reviewed 6 Oct 2026

Applies from 11 Sep 2026 · application

In force

Cyber Resilience Act

Reporting of actively exploited vulnerabilities and severe incidents

Who it reaches ·
Manufacturers of products with digital elements, including own-brand retailers
Evidence example ·
When the vulnerability became known, who assessed it, and when the 24h, 72h and final reports went out
Where Reltime fits ·
CRA rail with deadline alerts and reports drafted from the record
Official source Discuss this workflowRun the Rail FinderLast reviewed 6 Oct 2026
Today

Applies from 20 Nov 2026 · via national law · transposition

Upcoming

Consumer Credit Directive 2

New consumer credit rules apply

Who it reaches ·
Lenders and credit intermediaries offering consumer credit
Evidence example ·
Creditworthiness assessment and disclosures per decision
Where Reltime fits ·
Per-decision evidence bound to the rule version
Official source Discuss this workflowRun the Rail FinderLast reviewed 6 Oct 2026

9 Dec 2026 · transposition deadline · transposition

Upcoming

Product Liability Directive

New product liability rules, software included

Who it reaches ·
Producers of products, including software and digital services tied to them
Evidence example ·
Product and software state at release, updates and the decisions behind them
Where Reltime fits ·
Release and update evidence pack ready for disclosure
Official source Discuss this workflowRun the Rail FinderLast reviewed 6 Oct 2026

By 24 Dec 2026 · milestone

Upcoming

eIDAS 2

Every member state offers an EU Digital Identity Wallet

Who it reaches ·
Member states, and every organisation that will accept the wallet
Evidence example ·
Which attestation was received, from which issuer, and when it was checked
Where Reltime fits ·
Verification receipts for wallet-based identity
Official source Discuss this workflowRun the Rail FinderLast reviewed 6 Oct 2026

2027

From 18 Feb 2027 · application

Upcoming

EU Battery Regulation

Digital battery passport

Who it reaches ·
EV and industrial batteries above 2 kWh
Evidence example ·
Origin, composition and chain of custody per battery
Where Reltime fits ·
Machine identities seal custody events, also offline
Official source Discuss this workflowRun the Rail FinderLast reviewed 6 Oct 2026

Applies from 10 Jul 2027 · application

Upcoming

AML Regulation

Single EU rulebook for customer due diligence and ongoing monitoring

Who it reaches ·
Banks, insurers, estate agents, dealers and other obliged entities
Evidence example ·
Article 26 ongoing monitoring. Proof that monitoring actually happened and how deviations were handled
Where Reltime fits ·
Continuous monitoring with real-time alerts and an anchored trail
Official source Discuss this workflowRun the Rail FinderLast reviewed 6 Oct 2026

2 Dec 2027 · after the AI Omnibus · phased

Upcoming

AI Act

High-risk AI rules for Annex III systems

Who it reaches ·
Providers and deployers of Annex III high-risk systems
Evidence example ·
Automatic logging, human oversight and traceability per decision
Where Reltime fits ·
Event log per decision with model version and responsible role
Official source Discuss this workflowRun the Rail FinderLast reviewed 6 Oct 2026

From 11 Dec 2027 · application

Upcoming

Cyber Resilience Act

Main CRA requirements apply

Who it reaches ·
Products with digital elements placed on the EU market
Evidence example ·
Security by design, update process and vulnerability handling per product version
Where Reltime fits ·
Product and version evidence tied to approvals and fixes
Official source Discuss this workflowRun the Rail FinderLast reviewed 6 Oct 2026

By 24 Dec 2027 · milestone

Upcoming

eIDAS 2

Regulated private parties must accept the EU wallet

Who it reaches ·
Private parties legally required to use strong user authentication
Evidence example ·
Accepted wallet attestations and the checks performed
Where Reltime fits ·
Proof-based onboarding with fewer stored copies
Official source Discuss this workflowRun the Rail FinderLast reviewed 6 Oct 2026

2028

2 Aug 2028 · after the AI Omnibus · phased

Upcoming

AI Act

High-risk rules for AI in regulated products (Annex I)

Who it reaches ·
Product-related high-risk AI systems
Evidence example ·
Model version, test evidence and decision logs per product
Where Reltime fits ·
Model release gated on anchored test evidence
Official source Discuss this workflowRun the Rail FinderLast reviewed 6 Oct 2026

2029

March 2029 · phased · phased

Upcoming

EHDS

European Health Data Space, first major phase

Who it reaches ·
Health data holders and providers, by data category
Evidence example ·
Authorised access and integrity of shared health data
Where Reltime fits ·
Access and integrity evidence without patient data on the network
Official source Discuss this workflowRun the Rail FinderLast reviewed 6 Oct 2026

2031

March 2031 · phased · phased

Upcoming

EHDS

European Health Data Space, second major phase

Who it reaches ·
Further health data categories phase in
Evidence example ·
Authorised access and integrity per data category
Where Reltime fits ·
Same rail extended to new data categories
Official source Discuss this workflowRun the Rail FinderLast reviewed 6 Oct 2026

This calendar is editorial guidance on EU-level dates. National transposition and EEA incorporation can differ. It is not a legal applicability assessment.