The dates the regulations set.

Application dates from the instruments themselves, not from commentary. A proposal to postpone parts of the AI Act was under discussion in 2026; plan against the dates as written and treat any delay as extra time.

Coming up

1. 11 September 2026
   CRA reporting obligations apply

   CRAEU regulation
   In 4 days
2. 2 August 2027
   Annex I product-embedded high-risk systems

   EU AI ActEU regulation
   In 329 days
3. 11 December 2027
   CRA applies in full

   CRAEU regulation
   In 460 days

Already in force

1. 2 August 2026
   General application, Annex III high-risk systems

   EU AI ActEU regulation
   36 days ago
2. 31 October 2025
   Transition from ISO 27001:2013 ended

   ISO 27001Certifiable standard
   10 months ago
3. 2 August 2025
   General-purpose AI obligations and penalties apply

   EU AI ActEU regulation
   13 months ago
4. 31 March 2025
   PCI DSS v4.0 future-dated requirements became mandatory

   PCI DSSIndustry standard
   17 months ago
5. 2 February 2025
   Prohibited practices and AI literacy apply

   EU AI ActEU regulation
   19 months ago
6. 17 January 2025
   DORA applies

   DORAEU regulation
   20 months ago
7. 17 October 2024
   Transposition deadline for Member States

   NIS2EU directive
   23 months ago