TOOLS AND TRACKERS

European Strategy for Data Overview

Published
Last updated

Contributors:

Isabelle Roccia

CIPP/E

Managing Director, Europe

IAPP

Joe Jones

Research and Insights Director

IAPP

Andrew Folks

CIPP/E, CIPP/US, CIPM, FIP

Privacy & Data Attorney

Frankfurt, Kurnit, Klein & Selz

Laura Pliauškaitė

European Operations Coordinator

IAPP

This series offers an introduction to the expanding suite of EU digital regulations emerging under the European Strategy for Data. It provides an at‑a‑glance guide to major legislative initiatives. Each resource in the series outlines the purpose, scope, key requirements, enforcement mechanisms, and oversight structures of different laws, helping readers quickly orient themselves within a rapidly evolving regulatory landscape.

The series highlights how the EU aims to build a trustworthy, competitive, and innovation‑driven digital economy grounded in strong protections for data, security, and fundamental rights.

Series Overview

AI Act
The AI Act lays down a comprehensive legal framework for the development, marketing and use of AI in the EU in conformity with EU values. It promotes the uptake of human-centric and trustworthy AI while ensuring a high level of protection of health, safety and fundamental rights, including democracy, the rule of law and environmental protections.
Click to View

Cyber Resilience Act
The Cyber Resilience Act establishes uniform cybersecurity requirements for products with digital elements across the EU. It seeks to enhance the internal market's functioning and ensure a high level of cybersecurity through secure products by harmonizing requirements and complementing the NIS2 cybersecurity framework.
Click to View

Data Act
The Data Act creates new rules on who can access and use data generated in the EU across all economic sectors. It aims to ensure fairness in the allocation of value from data, stimulate a competitive data market, open opportunities for data-driven innovation and make data more accessible to all users.
Click to View

Data Governance Act
The DGA seeks to foster public sector information reuse; to create a supervisory framework for the provision of data sharing services; and to establish a framework for voluntary registration of entities which collect and process data made available for altruistic purposes.
Click to View

Digital Markets Act
The DMA creates new obligations for big technology platforms acting as “gatekeepers providing core platform services” to create a fairer environment for business users that rely on gatekeepers, and to ensure consumers have access to better services and can easily switch providers.
Click to View

Digital Services Act
The DSA aims to harmonize conditions for the provision of intermediary services and increases transparency requirements for online intermediaries.
Click to View

NIS2 Directive
This chart explores the NIS2 Directive on measures for a high common level of cybersecurity across the EU, which further improves the resilience and incident response capacities of the public and private sectors, and the EU as a whole.
Click to View

Product Liability Directive
The EU Product Liability Directive reform sets rules that govern compensation for damage suffered due to a product defect by establishing a strict liability regime.
Click to View

CPE credit badge

This content is eligible for Continuing Professional Education credits. Please self-submit according to CPE policy guidelines.

Submit for CPEs

Contributors:

Isabelle Roccia

CIPP/E

Managing Director, Europe

IAPP

Joe Jones

Research and Insights Director

IAPP

Andrew Folks

CIPP/E, CIPP/US, CIPM, FIP

Privacy & Data Attorney

Frankfurt, Kurnit, Klein & Selz

Laura Pliauškaitė

European Operations Coordinator

IAPP

Tags:

Frameworks and standardsInternational data transfersLaw and regulationGovernmentTechnologyGDPRPrivacy

Related resources