NIS2 vs DORA vs AI Act and Which One Applies to You
NIS2 vs DORA vs AI Act explained by scope. Which one covers you, why DORA overrides NIS2 for financial firms, and who falls under all three.
NIS2 vs DORA vs AI Act explained by scope. Which one covers you, why DORA overrides NIS2 for financial firms, and who falls under all three.
NIS2 Germany transposition is complete. The law took effect 6 December 2025 with fines up to €10 million. Who must register with the BSI and by when.
The 50-employee rule is only half the NIS2 test. Sector, group structure and size-blind exemptions decide NIS2 scope, and catch firms that assume otherwise.
The chatbot notice belongs to your supplier and the high-risk delay belongs to companies you are not. Three duties reach a deployer on 2 August 2026.
The AI Act transparency requirements in Article 50 apply from 2 August 2026. Articles 4 and 5 have applied since February 2025 and carry bigger fines.
The Commission referred Ireland, Spain, France and the Netherlands to the CJEU on 8 July 2026, escalating NIS2 enforcement. What changes for your company.
Focus Keyword: nis2 enforcement cjeu
Spain fined Amadeus 14.4M for reusing booking data it could collect but not repurpose. Plus Vodafone, Emirates, and July’s deadline pileup before 2 August.
Last updated: 29 June 2026 Eight EU regulations now set the compliance workload for most mid-sized European companies, and they share no deadline, no penalty cap and no single enforcer between them. This EU compliance regulations comparison puts GDPR, NIS2, the AI Act, DORA, CSRD, CBAM, the Cyber Resilience Act and EUDR side by side,…
DORA compliance requirements cover five pillars, from ICT risk management to third-party oversight. What financial institutions must do now that enforcement has started.
Commission published the AI labelling Code of Practice on 10 June. CBAM adds 180 downstream products. Elkjøp fined €1.85M for loyalty programme consent.