Last updated: 29 June 2026 Eight EU regulations now set the compliance workload for most mid-sized European companies, and they share no deadline, no penalty cap and no single enforcer between them. This EU compliance regulations comparison puts GDPR, NIS2, the AI Act, DORA, CSRD, CBAM, the Cyber Resilience Act and EUDR side by side,…
Commission published the AI labelling Code of Practice on 10 June. CBAM adds 180 downstream products. Elkjøp fined €1.85M for loyalty programme consent.
The Commission published 148 pages on AI Act high-risk classification. CNIL fined IQVIA €5M for health data warehouses. Finland passed the first CRA law.
Parliament and Council extended AI Act high-risk by 16 months to 2 December 2027, but formal adoption must clear before 2 August. Also: ESRS cut 70%, Yango fined €100M.
EP adopts AI Act high-risk delay with 569 votes. CBAM authorisation deadline 31 March. CSRD Omnibus narrows scope. CRA guidance open for feedback.
CSRD scope narrowed. CBAM deadline 31 March. NIS2 audits starting. A triage guide for compliance officers at mid-sized EU companies.