Regulation pack roadmap
Which EU frameworks Legalithm tracks today and what is on the candidate list. AI Act dates come from lib/ai_act/enforcement-dates.ts; other packs from lib/regulations/pack-milestones.ts.
Next deadline: 11 September 2026
Cyber Resilience Act — Article 14 reporting obligations apply
EU AI Act
Live
Regulation (EU) 2024/1689 (AI Act)
Classification, obligations, and enforcement timeline — live in Legalithm.
- Article 5 prohibited practices2 February 2025
- Chapter V GPAI obligations2 August 2025
- Article 50 transparency2 August 2026
- Annex III high-risk (standalone)2 December 2027
EAA / BFSG (accessibility)
Enforced
Directive (EU) 2019/882 · BFSG (DE)
European Accessibility Act application date; BFSG is the German transposition for the DE market.
- EAA application (Art 40 Directive 2019/882)28 June 2025
- BFSG application (DE transposition)28 June 2025
Cyber Resilience Act
Reporting
Regulation (EU) 2024/2847
Article 14(2) vulnerability reporting clocks (24h / 72h / 14d) — reference data only.
- CRA entry into force10 December 2024
- Article 14 reporting obligations apply11 September 2026
- General application11 December 2027
EU Data Act
Candidate
Regulation (EU) 2023/2854
Switching and portability obligations — candidate pack, not yet productised.
- Data Act in force (Art 50 Reg 2023/2854)12 September 2025