Transport & Logistics: the EU deadlines at a glance
Data Act, eFTI, EMSWe, AI Act, NIS2, CRA and FuelEU Maritime — the EU deadlines affecting transport and logistics, in chronological order with a link to each file. From what already applies to what is coming in 2027.
The EU rules for transport and logistics each have their own timeline. Below they are in chronological order — from what already applies to what is coming. Every entry links to the full file with its primary source.
Already in force
- 17 October 2024 — NIS2. Transposition deadline passed; transport is an
essential sector with cybersecurity and reporting duties. Read the file
- 1 January 2025 — FuelEU Maritime. Declining GHG-intensity limit for
ships >5,000 GT; the EU ETS for shipping phases in alongside (2024–2026). Read the file
- 15 August 2025 — EMSWe. Ship and port reporting via a single national
window, once-only. Read the file
- 12 September 2025 — Data Act. Access to and sharing of connected-product
data; fair sharing terms; cloud switching. Read the file
Coming up
- 11 June 2026 — CRA. Rules on the notification of conformity assessment
bodies. Read the file
- 2 August 2026 — AI Act. Formal application date for high-risk (the
Digital Omnibus shifts Annex III to 2 December 2027). Read the file
- 11 September 2026 — CRA. Reporting duty for actively exploited
vulnerabilities and severe incidents. Read the file
- 9 July 2027 — eFTI. Authorities must accept electronic freight
information via certified platforms. Read the file
- 2 December 2027 — AI Act. Shifted application date for Annex III
(high-risk) via the Digital Omnibus.
- 11 December 2027 — CRA. Full application: essential requirements,
conformity assessment and CE marking. Read the file
Want to know which of these regimes affect your organisation and where your readiness stands? Take the Transport & Logistics scan.
Sources
- https://eur-lex.europa.eu/eli/reg/2023/2854/oj
Regulation (EU) 2023/2854 (Data Act): applicable since 12 September 2025. - https://eur-lex.europa.eu/eli/reg/2020/1056/oj
Regulation (EU) 2020/1056 (eFTI): authorities accept eFTI from 9 July 2027. - https://eur-lex.europa.eu/eli/reg/2024/1689/oj
Regulation (EU) 2024/1689 (AI Act): phased application 2025–2027.
Read next
Securing AI in critical infrastructure: where the AI Act, Cyber Resilience Act and NIS2 meet
A single AI system in a port often falls under three frameworks at once: the AI Act (Art. 15) secures the AI system itself, the Cyber Resilience Act the product, and NIS2 obliges the operator as an essential entity. This piece explains how they meet and who is responsible for what.
Cyber Resilience Act: which deadline applies when?
The CRA (Regulation (EU) 2024/2847) entered into force on 12 November 2024. Key dates: notification of conformity bodies 11 June 2026, reporting obligation 11 September 2026, full application 11 December 2027.
Which EU deadlines are coming in 2027 for transport and logistics?
In 2027 three EU deadlines apply to transport and logistics: the eFTI acceptance duty (9 July), the AI Act high-risk Annex III obligations (2 December) and the Cyber Resilience Act (11 December). ETS2 follows in 2028.