# Trusq > Trusq monitors EU regulation and maps every relevant change to the registered AI systems it affects, the next action and sourced evidence for human review. Public intelligence covers AI, data, cyber and sector rules; transport & logistics is the first sector covered in depth. Publisher: YRproject B.V. (Netherlands, EU-hosted). Not legal advice. ## Free tools - [Article 50 transparency check](https://trusq.io/ai-act/article-50-check/): five questions, ~2 minutes, no sign-up and no contact details before the full result. Maps a chatbot, AI-generated content, emotion recognition, biometric categorisation or deep-fake use case to the Article 50 transparency duties that apply since 2 August 2026, quoting the official text and linking EUR-Lex per paragraph. - [Free System Snapshot](https://trusq.io/snapshot/): map one real system and its measurable workload automatically. The result can be published as a dated public attestation. - [Impact & opportunity scan](https://trusq.io/scan/): which EU frameworks and obligations attach to your AI footprint. - [Business case calculator](https://trusq.io/business-case/): measure current manual regulatory work. - [Join the private expert network](https://trusq.io/experts/): register a non-public profile for manual review and assignment matching. No public profiles or network counts. - [Find a European regulatory expert](https://trusq.io/find-expert/): submit structured assignment parameters for private, staff-reviewed matching without automated ranking. ## EU AI Act — questions answered from the official text - [Do you have to tell people they are talking to an AI?](https://trusq.io/regels/ai-act/chatbot-disclosure/): Article 50(1) — the provider design duty, the objective 'reasonably observant person' test, and the two carve-outs. - [Do you have to label AI-generated content?](https://trusq.io/regels/ai-act/labelling-ai-generated-content/): Article 50(2) machine-readable marking (provider) versus 50(4) disclosure of deep fakes and public-interest text (deployer), and the narrow postponement of 50(2) to 2 December 2026 for systems placed on the market before 2 August 2026. - [Are you a provider or a deployer?](https://trusq.io/regels/ai-act/provider-or-deployer/): the Article 3 definitions and the three routes in Article 25 by which a deployer becomes a provider. ## EU AI Act — official text as adopted (not consolidated) > IMPORTANT — these pages are NOT a consolidated text. They reproduce Regulation (EU) 2024/1689 as adopted. It has since been amended by Regulation (EU) 2026/1744 (in force 27 July 2026, https://eur-lex.europa.eu/eli/reg/2026/1744/oj), affecting 38 provisions. Every affected page carries a notice and links the amending act. Do not quote an amended provision from these pages as current law without reading the amending act. The amended dates and duties are tracked at https://trusq.io/ai-act/deadlines/. - [All 113 articles](https://trusq.io/ai-act/articles/): the enacting terms of Regulation (EU) 2024/1689 **as adopted**, one stable page per article, each linked to EUR-Lex. Amended provisions carry a notice naming the amending act. - [Annexes](https://trusq.io/ai-act/annexes/): including Annex III (high-risk use cases). - [Recitals](https://trusq.io/ai-act/recitals/): the full recitals, individually addressable. - [AI Act deadlines](https://trusq.io/ai-act/deadlines/): every dated obligation with its source and current status. - [What changed in the AI Act timeline](https://trusq.io/ai-act/timeline-changes/): the dated effects of Regulation (EU) 2026/1744, old value next to new, each with the provision that sets the date. Machine-readable twin: https://trusq.io/ai-act/timeline-changes.json. Useful if you hold a timeline compiled before 27 July 2026. ## Product and commercial - [Product](https://trusq.io/product/): register, monitor, map impact, act and maintain evidence. - [Solutions](https://trusq.io/solutions/): value for compliance, legal, product, AI governance and audit. - [Pricing](https://trusq.io/pricing/): Free forever, a 14-day evaluation at €0, Team €295/month and Business from €750/month as prepaid annual contracts. - [About Trusq](https://trusq.io/about.html): who operates it and why. - [Trust & data](https://trusq.io/trust.html): EU-only processing, sub-processors, security posture. ## Public intelligence - [Regulatory changelog](https://trusq.io/changelog.html): dated, sourced log of EU AI law, guidance, enforcement and case-law. Auto-published at detection from the primary EU sources; each entry is labelled 'editorially verified' or 'not yet editorially verified' (auto-summarised) and links its primary source. - [EU regulatory deadlines calendar](https://trusq.io/deadlines/): every dated EU obligation Trusq tracks, source-verified (AI Act, customs/ICS2, CBAM, Data Act, eFTI, EMSWe). Subscribe (.ics): https://trusq.io/deadlines/trusq-eu-deadlines.ics - [Latest regulatory changes](https://trusq.io/updates/): dated, sourced log of what changed. - [What Trusq monitors](https://trusq.io/monitor/): the primary EU sources under continuous watch. - [Cyberbeveiligingswet — NIS2 in the Netherlands](https://trusq.io/regels/nis2/cyberbeveiligingswet/): **written in Dutch** (the rest of this site is English), because it covers Dutch law, the Dutch supervisor (RDI) and the Dutch reporting point (NCSC). Applies from 15 August 2026 with no transition period: registration duty, duty of care and reporting duty (24h/72h/one month). - [Trusq's own accountability record](https://trusq.io/accountability/): how an AI-operated company publishes, verifies and corrects in public — live counts of automated source checks, changes detected, entries still awaiting human verification, and every correction made after publication. ## Machine-readable feeds - [Feed documentation and licence](https://trusq.io/feeds/): field-by-field description of changelog.json and deadlines.json, including the three distinct timestamps (source published, detected, editorially verified) and the editorial_state flag. Licensed CC BY 4.0 — free for commercial use and modification, attribution to Trusq required. No key, no account, no rate limit. - Changelog RSS: https://trusq.io/changelog.xml (item category = editorial state) - Changelog JSON Feed 1.1: https://trusq.io/changelog.json (_trusq.editorial_state per item) - Deadlines RSS: https://trusq.io/deadlines.xml - Deadlines JSON Feed 1.1: https://trusq.io/deadlines.json (_trusq: eurlex_url, source_version, last_verified per item) - Deadlines iCal: https://trusq.io/deadlines/trusq-eu-deadlines.ics - Sitemap: https://trusq.io/sitemap.xml ## Stable citation URLs Each regulatory change has one permanent URL that never changes: https://trusq.io/changes/-.html, where is derived from the title and is the first 8 characters of the change's immutable id. The URL does not depend on ordering or on any time-varying hash, so it is safe to cite. The changelog index is at https://trusq.io/changelog.html. ## EU regulation — obligations by framework - [EU AI Act](https://trusq.io/regels/ai-act/): obligations and deadlines. - [NIS2](https://trusq.io/regels/nis2/): obligations and deadlines. - [DORA](https://trusq.io/regels/dora/): obligations and deadlines. - [Data Act](https://trusq.io/regels/data-act/): obligations and deadlines. - [Cyber Resilience Act](https://trusq.io/regels/cra/): obligations and deadlines. ## Transport & logistics dossiers (23) Sector hub: https://trusq.io/sectors/transport-logistics/ - [AEO status: what Authorised Economic Operator offers, and what it requires](https://trusq.io/sectors/transport-logistics/aeo/): AEO status marks you as a trusted trader with customs — fewer checks, priority handling, easier access to simplifications. In return you must meet fixed criteria: a clean compliance record, auditable records, solvency and competence. - [EU customs and freight compliance: what is digitalising, what it requires, and where to start](https://trusq.io/sectors/transport-logistics/customs-guide/): The EU is digitalising and tightening customs and freight in parallel: ICS2 import security, AEO trusted-trader status, eFTI freight information, the EMSWe maritime single window, and the 2028 customs reform. This dossier maps each regime to its primary EU legal source, with the obligations and timelines that matter to compliance owners at forwarders, terminals and shippers. - [Customs digitalisation: what the UCC, ICS2 and eFTI require of freight operators](https://trusq.io/sectors/transport-logistics/customs-digitalisation/): The EU is replacing paper customs and freight formalities with mandatory electronic data exchange under three instruments — the Union Customs Code, ICS2 and the eFTI Regulation — on staggered 2024-2025 deadlines that reach forwarders, terminals and shippers. - [Combined transport: quota-free road legs and vehicle-tax relief under Directive 92/106/EEC](https://trusq.io/sectors/transport-logistics/combined-transport/): Combined transport under Directive 92/106/EEC is intermodal freight whose main leg runs by rail, inland waterway or sea and only the short first and last legs by road; qualifying trips free the road legs from EU quota and authorization systems and can trigger vehicle-tax relief. - [Air cargo security: the two EU regimes that decide whether your cargo moves](https://trusq.io/sectors/transport-logistics/air-cargo-security/): Two EU regimes govern air cargo. Aviation security (Commission Implementing Regulation (EU) 2015/1998, under framework Regulation (EC) No 300/2008) decides whether a consignment may enter the secure supply chain and be loaded; the Import Control System 2 (ICS2) decides whether its advance data satisfies customs before the goods cross the EU border. - [The Data Act for transport and logistics: who can access your connected data, and on what terms](https://trusq.io/sectors/transport-logistics/data-act-transport/): Since 12 September 2025 the Data Act (Regulation (EU) 2023/2854) entitles the user of a connected product — from telematics-equipped trucks to reefer sensors and terminal systems — to the data it generates and lets them have it shared with a third party of their choice. It also requires fair, reasonable and non-discriminatory terms for obliged data sharing and phases out the charges for switching cloud providers. - [CBAM import carbon levy: declarant status from 2026, certificate costs from 2027](https://trusq.io/sectors/transport-logistics/cbam-import-levy/): Since 1 January 2026 the definitive CBAM regime (Regulation (EU) 2023/956) requires importers of steel, aluminium, cement, fertilisers, electricity and hydrogen to hold authorised CBAM declarant status. The 2025 Omnibus (Regulation (EU) 2025/2083) exempts importers staying under 50 tonnes a year and defers the first certificate purchases to 2027. - [What EU importers must do under CBAM from 2026](https://trusq.io/sectors/transport-logistics/cbam-importer-obligations/): The CBAM definitive phase applies from 1 January 2026: importers bringing in more than 50 tonnes of covered goods a year must become authorised CBAM declarants. The first annual declaration and certificate surrender fall due by 30 September 2027. - [NCTS phase 5: what changes for customs transit, who must adapt, and by when](https://trusq.io/sectors/transport-logistics/ncts-phase-5/): NCTS phase 5 aligned EU customs transit with the Union Customs Code — UCC data requirements, registration of en route events and upgraded interfaces — with full deployment on 2 December 2024 and a transition until 21 January 2025. Phase 6 adds safety and security data and is rolling out through 2026. - [eIDAS 2 and the e-CMR: the trust layer under digital freight documents](https://trusq.io/sectors/transport-logistics/eidas-ecmr-logistics/): A digital consignment note is only as strong as the identity and signature behind it. eIDAS makes qualified e-signatures legally equal to handwritten ones EU-wide; eIDAS 2 adds identity wallets and verifiable attestations, and eFTI obliges authorities to accept electronic freight data from 9 July 2027. - [NIS2 for transport and logistics: who is in scope and which duties follow](https://trusq.io/sectors/transport-logistics/nis2-logistics/): NIS2 (Directive (EU) 2022/2555) covers medium and large entities in the Annex I transport sector — carriers, airports, ports and terminal operations, rail — plus postal and courier providers under Annex II. Road haulage, freight forwarding and warehousing are not listed as such, but typically meet the rules indirectly through in-scope customers' supply-chain duties. - [eFTI readiness: what operators and authorities must be able to do by 9 July 2027](https://trusq.io/sectors/transport-logistics/efti-readiness/): From 9 July 2027, competent authorities in every Member State must accept statutory freight information made available via certified eFTI platforms — a date fixed by the 30-month clock that started when the first eFTI technical acts entered into force on 9 January 2025. What that requires on the authority side, and what operators need if they want the electronic route. - [ICS2 house filing: who lodges the ENS at house level, and who is liable](https://trusq.io/sectors/transport-logistics/ics2-house-filing/): Under the Union Customs Code the carrier lodges the entry summary declaration (ENS), but ICS2 multiple filing turns issuers of house bills of lading, house air waybills and rail consignment notes into filers of their own dataset when they do not share data upstream. Each party answers for the accuracy and completeness of what it submits. - [Which goods fall under CBAM: the CN-code product groups and how to check an import](https://trusq.io/sectors/transport-logistics/cbam-goods-cn-codes/): CBAM covers six product groups — iron and steel, aluminium, cement, fertilisers, electricity and hydrogen — each identified by Combined Nomenclature (CN) code in Annex I to Regulation (EU) 2023/956. Whether a specific import qualifies is decided by its eight-digit CN code and its origin, not by the sector name; a 50-tonne net-mass exemption applies to the solid goods but never to electricity or hydrogen. - [Who can access your fleet's telematics and vehicle data under the Data Act](https://trusq.io/sectors/transport-logistics/telematics-vehicle-data/): Since 12 September 2025 the Data Act has given the user of a connected truck, trailer or reefer a right to access the data it generates and to have it shared, free of charge, with a service provider of its choice. For fleet operators and lessors it redraws who controls telematics data — and limits what the vehicle manufacturer or telematics provider may do with it. - [The European mobility data space: voluntary today, decisive for logistics data later](https://trusq.io/sectors/transport-logistics/mobility-data-space/): The common European mobility data space (EMDS), set out in Commission Communication COM(2023) 751, is a voluntary framework for linking fragmented transport data across modes and Member States — not a central database and not a legal obligation. It carries no application date today, but its standards and governance are being built now and will likely shape how logistics data is shared later. - [Smart tachograph 2: the retrofit deadlines for existing fleets and what the device now records](https://trusq.io/sectors/transport-logistics/smart-tachograph-deadlines/): The Mobility Package requires vehicles in international road transport to carry the second-generation smart tachograph. Existing fleets retrofitted in stages — by 31 December 2024 and 18 August 2025 — with vans of 2.5-3.5 tonnes added since 1 July 2026, and the device now logs border crossings and loading/unloading automatically. - [The Data Governance Act for logistics: how it enables trusted data sharing, distinct from the Data Act](https://trusq.io/sectors/transport-logistics/data-governance-act-logistics/): The Data Governance Act (Regulation (EU) 2022/868), applicable since 24 September 2023, is the EU's trust layer for data sharing: notified neutral data intermediaries, re-use of protected public-sector data, and data altruism. For logistics it lowers the barrier to sharing sensitive supply-chain data safely — and it is a separate instrument from the Data Act, which decides who may access and use connected-product data. - [What a truck may weigh and measure in the EU, and what the revision changes](https://trusq.io/sectors/transport-logistics/weights-dimensions/): Directive 96/53/EC caps heavy-goods vehicles used in international traffic at 40 tonnes (44 tonnes for intermodal container transport), with harmonised maximum lengths, a 2.55 m width and a 4.00 m height. A 2023 revision (COM(2023) 445) would enlarge the weight allowance for zero-emission vehicles and set clearer rules for cross-border longer and heavier combinations, but it is still in negotiation and not yet in force. - [The EU Mobility Package for road transport: who must comply, the key dates and how it is enforced](https://trusq.io/sectors/transport-logistics/mobility-package-road/): Mobility Package I reshaped EU road-transport law from 2020 — driving and rest times, cabotage limits and the posting of drivers — with dates running on to 2026 and the eight-week vehicle-return rule already struck down by the Court of Justice. - [What the new EU driving licence directive changes for drivers and operators, and by when](https://trusq.io/sectors/transport-logistics/digital-driving-licence/): The EU has adopted Directive (EU) 2025/2205, modernising driving-licence rules with a digital licence in the EU Digital Identity Wallet, accompanied driving from 17 (mandatory for cars, optional for lorries) and a two-year novice probationary period. It entered into force on 25 November 2025, but reaches drivers and operators only as Member States transpose it, which they must do by 26 November 2028, with the rules applying from 26 November 2029. - [Trust and Check trader status: what it requires and how it builds on AEO](https://trusq.io/sectors/transport-logistics/trust-and-check-trader/): Trust and Check is the top tier of trusted trader agreed in the March 2026 EU customs reform: firms give customs real-time data through the EU Customs Data Hub in return for near-frictionless clearance. It is a direct upgrade of AEO, but it is not yet in force and its benefits phase in only as the Data Hub opens to traders between 2028 and 2034. - [Seaport cybersecurity under NIS2 and the Cyber Resilience Act: who is in scope and which duties apply](https://trusq.io/sectors/transport-logistics/seaport-cybersecurity/): Port managing bodies and their port facilities sit in the high-criticality transport sector of the NIS2 Directive (EU) 2022/2555, while the Cyber Resilience Act (Regulation (EU) 2024/2847) sets security requirements for the digital products used across the port chain. This dossier sets out who is in scope, which duties apply, and how the two regimes interact.