Transatlantic Technology Research, home

Research & analysis for U.S. companies in European markets

EU Technology Regulation Timeline & Tracker

Plan your roadmap around real dates, not rumors. This timeline puts the EU rules that affect connected products in one place, shows where each one stands, and links every date to the legal text behind it.

This tool is for planning. It isn’t a legal or compliance determination.

By the editorial teamLast updated Written with the help of AI tools

Timeline

Dates checked against EUR-Lex and European Commission pages on Nov 10, 2026. “Scheduled” marks a date in the future that is already set in law.

Rule
Product type
EU regulatory dates for connected products
DateRuleWhat happensLegal basisStatusPrimary sourceLast checked
Cyber Resilience Act
Regulation (EU) 2024/2847
Entered into forceArt. 71(1)In forceEUR-LexNov 10, 2026
Radio equipment cybersecurity
Delegated Regulation (EU) 2022/30
Applies to radio equipment placed on the marketDelegated Regulation (EU) 2022/30AppliesEUR-LexNov 10, 2026
Cyber Resilience Act
Regulation (EU) 2024/2847
Rules on notifying conformity assessment bodies (Chapter IV) applyArt. 71(2)AppliesEUR-LexNov 10, 2026
Cyber Resilience Act
Regulation (EU) 2024/2847
Reporting obligations (Art. 14) applyArt. 71(2)AppliesEUR-LexNov 10, 2026
EU Data Act
Regulation (EU) 2023/2854
“Access by design” duty applies to connected products placed on the market after this dateArt. 50AppliesEUR-LexNov 10, 2026
Machinery Regulation
Regulation (EU) 2023/1230
AppliesEUR-Lex document informationScheduledEUR-LexNov 10, 2026
Cyber Resilience Act
Regulation (EU) 2024/2847
Main obligations applyArt. 71(2)ScheduledEUR-LexNov 10, 2026
Radio equipment cybersecurity
Delegated Regulation (EU) 2022/30
Repealed from this dateDelegated Regulation (EU) 2026/339ScheduledEUR-LexNov 10, 2026
—Digital Omnibus
COM(2025) 837
Commission proposal, not law—ProposalSource link pendingNov 10, 2026

Change log

No changes since the timeline was published on Nov 10, 2026.

Why it exists

European technology rules arrive in stages. A law enters into force on one date, but its duties can apply in pieces months or years later. Proposals to change it can land along the way. Standards that help you show you comply follow their own schedule. Keeping all of that straight across several rules is hard work, and a missed date can push a product launch or a redesign onto the critical path.

What’s on it

Rules that shape how connected products are built and sold in the EU, including:

  • the Cyber Resilience Act,
  • the EU Data Act,
  • the Machinery Regulation,
  • the radio equipment rules on cybersecurity, and
  • the harmonised standards that support them.

It also tracks proposals that would change these rules, such as the Digital Omnibus. Proposals are always marked "proposal" so no one mistakes them for law.

What each entry shows

  • The date and what happens on it.
  • The legal basis, down to the article where it helps.
  • The status: in force, applies, or proposal.
  • A link to the primary source, such as EUR-Lex, the European Commission or ENISA.
  • When we last checked it.
  • A change log, so you can see what moved and when.

You can filter the timeline by rule or by product type to see only what touches your products.

How we keep it current

Dates are only as good as their last check, so every entry shows the date we last checked it against its primary source.

Read it the right way

The timeline tells you when rules take effect. It doesn’t tell you which ones apply to your product, or what you need to do. For that, start with our practical guide to the Cyber Resilience Act, then talk to your counsel.

This is not a legal or compliance determination. It’s a dated summary of public sources, offered for planning. Always read the source text, and ask your own lawyer what applies to you.

Sources

Each row links its primary source. All accessed 2026-11-10.

  1. Regulation (EU) 2024/2847 (Cyber Resilience Act), OJ L, 2024/2847, 20.11.2024. Cited: Art. 14, 71. EUR-Lex, ELI: http://data.europa.eu/eli/reg/2024/2847/oj
  2. Regulation (EU) 2023/2854 (Data Act), OJ L, 2023/2854, 22.12.2023. Cited: Art. 50. EUR-Lex, ELI: http://data.europa.eu/eli/reg/2023/2854/oj
  3. Regulation (EU) 2023/1230 on machinery, EUR-Lex document information (dates of effect). https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=CELEX:32023R1230
  4. Commission Delegated Regulation (EU) 2022/30 (radio equipment cybersecurity), EUR-Lex. https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=CELEX:32022R0030