Skip to content

EU regulation

The rules Trusq covers

Five EU frameworks in depth, each with its obligations, deadlines and primary source. Every conclusion links back to the official text on EUR-Lex — no source, no claim. The deadline calendar reaches wider: it also tracks dated obligations under CBAM, customs and ICS2, eFTI and maritime reporting.

EU AI Act

The European regulation for artificial intelligence. Obligations differ per risk category; below are the categories with what they mean and when they apply, each traceable to the legal text.

Regulation (EU) 2024/1689

NIS2 Directive / Dutch Cbw

The NIS2 Directive (Directive (EU) 2022/2555), implemented in the Netherlands by the Dutch Cyberbeveiligingswet (Cbw) since 15 August 2026, obliges organisations in designated sectors to maintain a duty of care, an…

Directive (EU) 2022/2555

DORA (financial sector)

DORA (Regulation (EU) 2022/2554) requires financial entities to manage ICT risk, report major ICT incidents, test their digital operational resilience and manage the risk of their ICT third-party providers; critical…

Regulation (EU) 2022/2554

Data Act (EU Data Regulation)

The Data Act (Regulation (EU) 2023/2854) governs access to and sharing of data from connected products and related services, and has applied since 12 September 2025.

Regulation (EU) 2023/2854

Cyber Resilience Act

EU-wide cybersecurity requirements for products with digital elements (Regulation (EU) 2024/2847): the reporting duty has applied since 11 September 2026, the rules on notified bodies since 11 June 2026, and the…

Regulation (EU) 2024/2847

The AI Act in full

Beyond the summary above, the enacting terms of Regulation (EU) 2024/1689 as adopted are published here article by article: all 113 articles, the annexes (including Annex III) and the recitals — each on a stable URL you can cite, each linked to EUR-Lex. It is not a consolidated text: provisions changed by a later regulation carry a notice naming the amending act, and provisions that Regulation (EU) 2026/1744 inserted — among them Articles 4a, 60a and 75a and Annex XIV — have no page of their own. Dated obligations are on the AI Act deadline register.

NIS2 in the Netherlands Nederlands

The Dutch Cyberbeveiligingswet (Cbw) has applied since 15 August 2026; according to the explanatory memorandum it applies to an estimated 8,100 entities, public bodies not included (Kamerstukken II 2024/25, 36 764, no. 3). For transport and logistics, Trusq's Dutch-language knowledge base answers the practical questions with the article text: Cbw/NIS2 voor transport en logistiek. The Cbw-check indicates in six questions whether the Cbw likely applies to your company.

Check one of your own systems

The transparency duties in Article 50 have applied since 2 August 2026. The Article 50 check takes about two minutes, asks no contact details before showing the full result, and quotes the official text for every answer.
← Back to Trusq

Independent expertise

Need a specialist for this work?

Describe the framework, location and assignment parameters. Trusq reviews every request and makes the selection by hand; profiles are not public and no automated ranking is used.

Request an expert

Are you an expert?