What applies to me?

A quick matrix for founders and developers who need the right starting point.

Open matrix

Deadline watchlist

Track date-backed CRA, consumer-rights, Data Act, DSA, product-liability, UK PSTI, and FTC Safeguards milestones from official sources.

Open deadlines

Operating in Luxembourg?

CNPD, CSSF digital circulars, Legilux, and ILNAS add Luxembourg-specific obligations beyond EU-level guidance.

Luxembourg hub

Source registry

Official sources monitored across Luxembourg, EU, UK, US, and technical security authorities.

53

monitored sources

4

Luxembourg priority sources

Open source registry
LUSeeded

CNPD

Luxembourg national DPA. Luxembourg companies must monitor CNPD in addition to EU-level EDPB guidance.

GDPRePrivacy
LUSeeded

CSSF

Luxembourg financial regulator for ICT risk, DORA alignment, virtual assets, and digital finance circulars.

DORAMiCAAML/VASP
LUSeeded

Legilux

Official publication of Luxembourg law, including national transpositions of EU digital directives.

Luxembourg lawNIS2eIDAS
LUSeeded

ILNAS

Luxembourg standards body relevant to cybersecurity standards and NIS2 implementation.

NIS2Standardisation
EUSeeded

EU AI Office

EU-level AI Act policy, implementation, and AI Office guidance.

EU AI Act
EUSeeded

European Commission CRA

Official Commission CRA policy and summary pages for software, hardware, vulnerability reporting, conformity assessment, and implementation dates.

Cyber Resilience Act