The best foundational tool.
Every EU regulation that matters to your work — annotated, cross-referenced, pin-cited. The reference layer you build on, not the only tool you use.
Browse the editionsWhat Annotated is
Annotated brings each regulation into the context that makes it useful. The current statute text together with its drafting history and forthcoming amendments. The official guidance, the national implementing law of European rules, the supervisory-authority decisions, and the court judgments that interpret it. Pin-cited to paragraph and point.
This is the work practitioners do anyway — assembled once, kept current, so you read the law instead of reassembling the sources every time.
The editions
One reference layer across the regulations that matter to your work.
Milestone calendar → What applies in the next 90 days across the editions, and what took effect in the past year.
-
GDPR
General Data Protection Regulation The European Union's data-protection regulation — the rules for processing personal data. -
AI Act
Artificial Intelligence Act The European Union's regulation on artificial intelligence — risk-based rules for AI systems. -
NIS2
Network and Information Security Directive 2 The European Union's cybersecurity directive — security and incident-reporting obligations for essential and important entities. -
DSA
Digital Services Act The European Union's regulation for online intermediaries and platforms. -
DMA
Digital Markets Act The European Union's regulation on contestable and fair markets in the digital sector — designating large platforms as gatekeepers and imposing do's and don'ts on their core platform services. -
DORA
Digital Operational Resilience Act The European Union's regulation on digital operational resilience for the financial sector — ICT risk management, incident reporting, and oversight of critical ICT third-party providers. -
CRA
Cyber Resilience Act The European Union's regulation on horizontal cybersecurity requirements for products with digital elements — secure-by-design obligations, vulnerability handling, conformity assessment, and market surveillance across the product lifecycle. -
Data Act
Data Act The European Union's regulation on harmonised rules on fair access to and use of data — covering IoT/connected-product data sharing, B2B and B2G data access, cloud switching, and safeguards against unlawful third-country data transfers. -
ePrivacy
Directive on privacy and electronic communications (ePrivacy Directive) The European Union's directive on privacy in the electronic communications sector — confidentiality of communications, traffic and location data, the cookie-consent rule (Art 5(3)), and unsolicited direct marketing. As amended by Directive 2009/136/EC. -
eIDAS
Regulation on electronic identification and trust services (eIDAS), as amended by the European Digital Identity Framework Regulation The EU framework for electronic identification, the European Digital Identity Wallet, and trust services (electronic signatures, seals, time stamps, registered delivery, website authentication, electronic ledgers and attestation of attributes). Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS 2.0) and Directive (EU) 2022/2555 (NIS2). -
CSA
Cyber Solidarity Act The European Union's regulation strengthening solidarity and capacities to detect, prepare for and respond to cyber threats and incidents — the European Cybersecurity Alert System (cross-border cyber hubs), the Cybersecurity Emergency Mechanism, and the European Cybersecurity Incident Review Mechanism. -
e-Evidence
Regulation (EU) 2023/1543 on European Production Orders and European Preservation Orders for electronic evidence in criminal proceedings and for the execution of custodial sentences following criminal proceedings (e-Evidence Regulation) The European Union's regulation establishing European Production Orders and European Preservation Orders, enabling a judicial authority in one Member State to compel a service provider offering services in the Union — wherever established — to produce or preserve electronic evidence (subscriber, traffic, content data) for criminal proceedings. Regulation (EU) 2023/1543, accompanied by Directive (EU) 2023/1544 on the appointment of legal representatives. Applies since 18 August 2026. -
CER
In progress Directive (EU) 2022/2557 of the European Parliament and of the Council of 14 December 2022 on the resilience of critical entities and repealing Council Directive 2008/114/EC (Critical Entities Resilience Directive) The European Union's directive on the physical resilience of critical entities — the companion to NIS2 (both adopted 14 December 2022). It obliges Member States to adopt national resilience strategies, carry out risk assessments and identify critical entities in eleven sectors, and obliges the identified entities to assess risks, take resilience measures and notify significant incidents. Repeals the 2008 European Critical Infrastructure Directive. Transposed in the Netherlands by the Wet weerbaarheid kritieke entiteiten (Stb. 2026, 188; in force 15 August 2026).