EU Technology Regulation Timeline & Tracker
Plan your roadmap around real dates, not rumors. This timeline puts the EU rules that affect connected products in one place, shows where each one stands, and links every date to the legal text behind it.
This tool is for planning. It isn’t a legal or compliance determination.
Timeline
Dates checked against EUR-Lex and European Commission pages on Nov 10, 2026. “Scheduled” marks a date in the future that is already set in law.
| Date | Rule | What happens | Legal basis | Status | Primary source | Last checked |
|---|---|---|---|---|---|---|
| Cyber Resilience Act Regulation (EU) 2024/2847 | Entered into force | Art. 71(1) | In force | EUR-Lex | Nov 10, 2026 | |
| Radio equipment cybersecurity Delegated Regulation (EU) 2022/30 | Applies to radio equipment placed on the market | Delegated Regulation (EU) 2022/30 | Applies | EUR-Lex | Nov 10, 2026 | |
| Cyber Resilience Act Regulation (EU) 2024/2847 | Rules on notifying conformity assessment bodies (Chapter IV) apply | Art. 71(2) | Applies | EUR-Lex | Nov 10, 2026 | |
| Cyber Resilience Act Regulation (EU) 2024/2847 | Reporting obligations (Art. 14) apply | Art. 71(2) | Applies | EUR-Lex | Nov 10, 2026 | |
| EU Data Act Regulation (EU) 2023/2854 | “Access by design” duty applies to connected products placed on the market after this date | Art. 50 | Applies | EUR-Lex | Nov 10, 2026 | |
| Machinery Regulation Regulation (EU) 2023/1230 | Applies | EUR-Lex document information | Scheduled | EUR-Lex | Nov 10, 2026 | |
| Cyber Resilience Act Regulation (EU) 2024/2847 | Main obligations apply | Art. 71(2) | Scheduled | EUR-Lex | Nov 10, 2026 | |
| Radio equipment cybersecurity Delegated Regulation (EU) 2022/30 | Repealed from this date | Delegated Regulation (EU) 2026/339 | Scheduled | EUR-Lex | Nov 10, 2026 | |
| — | Digital Omnibus COM(2025) 837 | Commission proposal, not law | — | Proposal | Source link pending | Nov 10, 2026 |
Change log
No changes since the timeline was published on Nov 10, 2026.
Why it exists
European technology rules arrive in stages. A law enters into force on one date, but its duties can apply in pieces months or years later. Proposals to change it can land along the way. Standards that help you show you comply follow their own schedule. Keeping all of that straight across several rules is hard work, and a missed date can push a product launch or a redesign onto the critical path.
What’s on it
Rules that shape how connected products are built and sold in the EU, including:
- the Cyber Resilience Act,
- the EU Data Act,
- the Machinery Regulation,
- the radio equipment rules on cybersecurity, and
- the harmonised standards that support them.
It also tracks proposals that would change these rules, such as the Digital Omnibus. Proposals are always marked "proposal" so no one mistakes them for law.
What each entry shows
- The date and what happens on it.
- The legal basis, down to the article where it helps.
- The status: in force, applies, or proposal.
- A link to the primary source, such as EUR-Lex, the European Commission or ENISA.
- When we last checked it.
- A change log, so you can see what moved and when.
You can filter the timeline by rule or by product type to see only what touches your products.
How we keep it current
Dates are only as good as their last check, so every entry shows the date we last checked it against its primary source.
Read it the right way
The timeline tells you when rules take effect. It doesn’t tell you which ones apply to your product, or what you need to do. For that, start with our practical guide to the Cyber Resilience Act, then talk to your counsel.
This is not a legal or compliance determination. It’s a dated summary of public sources, offered for planning. Always read the source text, and ask your own lawyer what applies to you.
Sources
Each row links its primary source. All accessed 2026-11-10.
- Regulation (EU) 2024/2847 (Cyber Resilience Act), OJ L, 2024/2847, 20.11.2024. Cited: Art. 14, 71. EUR-Lex, ELI: http://data.europa.eu/eli/reg/2024/2847/oj
- Regulation (EU) 2023/2854 (Data Act), OJ L, 2023/2854, 22.12.2023. Cited: Art. 50. EUR-Lex, ELI: http://data.europa.eu/eli/reg/2023/2854/oj
- Regulation (EU) 2023/1230 on machinery, EUR-Lex document information (dates of effect). https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=CELEX:32023R1230
- Commission Delegated Regulation (EU) 2022/30 (radio equipment cybersecurity), EUR-Lex. https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=CELEX:32022R0030