Open EU Compliance Data (JSON)

Dataset	Contents	Get it
EU incident and breach reporting deadlines (GDPR, NIS2, DORA, CRA)	When each reporting clock starts, the deadlines, and who receives the reports.	JSON · Guide
DORA major ICT-related incident classification	The gate test, materiality thresholds and decision rule of Commission Delegated Regulation (EU) 2024/1772.	JSON · Guide
DORA compliance checklist: 59 requirements by article	Core DORA requirements for financial entities with article references and the scope exemptions stated in the regulation.	JSON · Guide
NIS2 minimum cybersecurity risk-management measures (Article 21(2))	The ten measures every essential and important entity must include, plus the related governance and reporting duties.	JSON · Guide
NIS2 scope: sectors, size rule and size-independent cases	Annex I and II sectors, the medium-size rule, the cases covered regardless of size, and the essential/important categories.	JSON · Guide
GDPR fine tiers and the EDPB calculation bands	Article 83 maximums and the starting-point bands and turnover adjustments of EDPB Guidelines 04/2022.	JSON · Guide
Information a GDPR privacy notice must contain (Articles 13 and 14)	Each required item with its article in Art. 13 (data collected from the person) and Art. 14 (data from other sources).	JSON · Guide

Using the data

Licence: CC BY 4.0. Reuse it freely, with attribution to ClevSec and a link to clevsec.one.
Index: /data/index.json lists every dataset; /llms.txt describes the whole site for language models.
Freshness: each file has a verified date. When a rule changes, we update the data, the guides and the tools together, and record it in the changelog.
AI assistants: the same rules are callable as tools through our MCP server.
Not legal advice: the data summarises the official texts; always check the cited sources and your national law.