The 2025–2027 European Cloud Regulation Timeline

What's enforceable, what's coming, and what it means for your stack. A reference for CISOs, CTOs, compliance leads, legal, finance, and board stakeholders.

Last verified: March 2026 · Sources: Official EU legislation, ESA publications, European Commission, DLA Piper GDPR Survey, ECSO NIS2 Tracker

Non-product reference material · Designed for broad internal circulation
Sources: Regulation (EU) 2022/2554 (DORA) · Directive (EU) 2022/2555 (NIS2) · Regulation (EU) 2016/679 (GDPR) · Regulation (EU) 2024/1689 (AI Act) · Regulation (EU) 2024/2847 (CRA)
ESA publications · European Commission transposition trackers · DLA Piper GDPR Fines and Data Breach Survey 2025 · ECSO NIS2 Transposition Tracker
© 2026 emma · This timeline does not constitute legal advice