BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//ClevSec//EU compliance deadlines//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:EU compliance deadlines (ClevSec)
X-WR-CALDESC:AI Act\, CRA\, DORA\, NIS2 and Data Act dates with article ref
 erences. Source: https://clevsec.one/deadlines/
REFRESH-INTERVAL;VALUE=DURATION:P1D
X-PUBLISHED-TTL:P1D
BEGIN:VEVENT
UID:cra-notified-bodies@clevsec.one
DTSTAMP:20261110T000000Z
DTSTART;VALUE=DATE:20260611
DTEND;VALUE=DATE:20260612
SUMMARY:CRA: conformity assessment body rules apply
DESCRIPTION:CRA rules on conformity assessment bodies apply.\nWho: Notifyin
 g authorities and conformity assessment bodies.\nReference: CRA Art. 71(2)
  (Chapter IV).\nMore: https://clevsec.one/blog/cyber-resilience-act-requir
 ements/\nAll deadlines: https://clevsec.one/deadlines/\nInformational only
 \, not legal advice.
URL:https://clevsec.one/blog/cyber-resilience-act-requirements/
TRANSP:TRANSPARENT
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:In 30 days: CRA: conformity assessment body rules apply
TRIGGER:-P30D
END:VALARM
END:VEVENT
BEGIN:VEVENT
UID:ai-act-general@clevsec.one
DTSTAMP:20261110T000000Z
DTSTART;VALUE=DATE:20260802
DTEND;VALUE=DATE:20260803
SUMMARY:AI Act applies\, incl. Art. 50 transparency duties
DESCRIPTION:AI Act general date of application\, including the Article 50 t
 ransparency obligations.\nWho: Providers and deployers of AI systems that 
 interact with people or generate content.\nReference: AI Act Art. 113\, Ar
 t. 50.\nMore: https://clevsec.one/blog/eu-ai-act-timeline/\nAll deadlines:
  https://clevsec.one/deadlines/\nInformational only\, not legal advice.
URL:https://clevsec.one/blog/eu-ai-act-timeline/
TRANSP:TRANSPARENT
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:In 30 days: AI Act applies\, incl. Art. 50 transparency duties
TRIGGER:-P30D
END:VALARM
END:VEVENT
BEGIN:VEVENT
UID:cra-reporting@clevsec.one
DTSTAMP:20261110T000000Z
DTSTART;VALUE=DATE:20260911
DTEND;VALUE=DATE:20260912
SUMMARY:CRA: vulnerability and incident reporting starts
DESCRIPTION:CRA reporting of actively exploited vulnerabilities and severe 
 incidents starts (24h / 72h / final report).\nWho: Manufacturers of produc
 ts with digital elements\, also for products already on the market.\nRefer
 ence: CRA Art. 14\, Art. 69(3)\, Art. 71(2).\nMore: https://clevsec.one/bl
 og/cyber-resilience-act-reporting/\nAll deadlines: https://clevsec.one/dea
 dlines/\nInformational only\, not legal advice.
URL:https://clevsec.one/blog/cyber-resilience-act-reporting/
TRANSP:TRANSPARENT
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:In 30 days: CRA: vulnerability and incident reporting starts
TRIGGER:-P30D
END:VALARM
END:VEVENT
BEGIN:VEVENT
UID:ai-act-omnibus-dec-2026@clevsec.one
DTSTAMP:20261110T000000Z
DTSTART;VALUE=DATE:20261202
DTEND;VALUE=DATE:20261203
SUMMARY:AI Act: new prohibitions and AI content marking
DESCRIPTION:AI Act: new prohibitions on AI-generated non-consensual intimat
 e imagery and child sexual abuse material\; machine-readable marking for g
 enerative AI placed on the market before 2 August 2026.\nWho: Providers of
  generative AI systems\; everyone (prohibitions).\nReference: AI Act Art. 
 113(a) and Art. 111(4) as amended by Regulation (EU) 2026/1744.\nMore: htt
 ps://clevsec.one/blog/eu-ai-act-timeline/\nAll deadlines: https://clevsec.
 one/deadlines/\nInformational only\, not legal advice.
URL:https://clevsec.one/blog/eu-ai-act-timeline/
TRANSP:TRANSPARENT
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:In 30 days: AI Act: new prohibitions and AI content marking
TRIGGER:-P30D
END:VALARM
END:VEVENT
BEGIN:VEVENT
UID:data-act-switching-charges@clevsec.one
DTSTAMP:20261110T000000Z
DTSTART;VALUE=DATE:20270112
DTEND;VALUE=DATE:20270113
SUMMARY:Data Act: no more cloud switching charges
DESCRIPTION:Data Act: cloud and other data processing services may no longe
 r charge switching fees (including data egress for switching).\nWho: Provi
 ders of data processing services (cloud\, SaaS\, PaaS\, IaaS) and their cu
 stomers.\nReference: Data Act Art. 29(1).\nMore: https://eur-lex.europa.eu
 /eli/reg/2023/2854/oj/eng\nAll deadlines: https://clevsec.one/deadlines/\n
 Informational only\, not legal advice.
URL:https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng
TRANSP:TRANSPARENT
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:In 30 days: Data Act: no more cloud switching charges
TRIGGER:-P30D
END:VALARM
END:VEVENT
BEGIN:VEVENT
UID:dora-register-submission@clevsec.one
DTSTAMP:20261110T000000Z
DTSTART;VALUE=DATE:20270331
DTEND;VALUE=DATE:20270401
SUMMARY:DORA: registers of information due at the ESAs
DESCRIPTION:DORA: competent authorities report the registers of information
  to the ESAs (reference date 31 December of the previous year)\; your nati
 onal deadline is earlier.\nWho: Financial entities in scope of DORA\, thro
 ugh their competent authority.\nReference: DORA Art. 28(3)\; Implementing 
 Regulation (EU) 2024/2956.\nRepeats every year.\nMore: https://clevsec.one
 /blog/dora-register-of-information/\nAll deadlines: https://clevsec.one/de
 adlines/\nInformational only\, not legal advice.
URL:https://clevsec.one/blog/dora-register-of-information/
TRANSP:TRANSPARENT
RRULE:FREQ=YEARLY
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:In 30 days: DORA: registers of information due at the ESAs
TRIGGER:-P30D
END:VALARM
END:VEVENT
BEGIN:VEVENT
UID:nis2-entity-lists-review@clevsec.one
DTSTAMP:20261110T000000Z
DTSTART;VALUE=DATE:20270417
DTEND;VALUE=DATE:20270418
SUMMARY:NIS2: member states review entity lists
DESCRIPTION:NIS2: member states review their lists of essential and importa
 nt entities and report numbers to the Commission.\nWho: Member states\; en
 tities should check their registration details are current.\nReference: NI
 S2 Art. 3(3) and 3(5).\nRepeats every two years.\nMore: https://clevsec.on
 e/blog/nis2-registration-by-country/\nAll deadlines: https://clevsec.one/d
 eadlines/\nInformational only\, not legal advice.
URL:https://clevsec.one/blog/nis2-registration-by-country/
TRANSP:TRANSPARENT
RRULE:FREQ=YEARLY;INTERVAL=2
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:In 30 days: NIS2: member states review entity lists
TRIGGER:-P30D
END:VALARM
END:VEVENT
BEGIN:VEVENT
UID:data-act-legacy-contracts@clevsec.one
DTSTAMP:20261110T000000Z
DTSTART;VALUE=DATE:20270912
DTEND;VALUE=DATE:20270913
SUMMARY:Data Act: unfair-terms rules reach older contracts
DESCRIPTION:Data Act: the unfair-terms rules for B2B data contracts (Chapte
 r IV) also cover older long-term contracts.\nWho: Businesses with data-sha
 ring contracts concluded on or before 12 September 2025 that are of indefi
 nite duration or expire at least ten years from 11 January 2024.\nReferenc
 e: Data Act Art. 50\, Art. 13.\nMore: https://eur-lex.europa.eu/eli/reg/20
 23/2854/oj/eng\nAll deadlines: https://clevsec.one/deadlines/\nInformation
 al only\, not legal advice.
URL:https://eur-lex.europa.eu/eli/reg/2023/2854/oj/eng
TRANSP:TRANSPARENT
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:In 30 days: Data Act: unfair-terms rules reach older contracts
TRIGGER:-P30D
END:VALARM
END:VEVENT
BEGIN:VEVENT
UID:nis2-review@clevsec.one
DTSTAMP:20261110T000000Z
DTSTART;VALUE=DATE:20271017
DTEND;VALUE=DATE:20271018
SUMMARY:NIS2: Commission review of the directive
DESCRIPTION:NIS2: first Commission review of the directive (scope\, sectors
  and size rules)\, then every 36 months.\nWho: European Commission\; may l
 ead to a proposal changing scope.\nReference: NIS2 Art. 40.\nMore: https:/
 /clevsec.one/blog/nis2-directive-explained/\nAll deadlines: https://clevse
 c.one/deadlines/\nInformational only\, not legal advice.
URL:https://clevsec.one/blog/nis2-directive-explained/
TRANSP:TRANSPARENT
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:In 30 days: NIS2: Commission review of the directive
TRIGGER:-P30D
END:VALARM
END:VEVENT
BEGIN:VEVENT
UID:ai-act-high-risk-annex-iii@clevsec.one
DTSTAMP:20261110T000000Z
DTSTART;VALUE=DATE:20271202
DTEND;VALUE=DATE:20271203
SUMMARY:AI Act: high-risk rules for Annex III systems
DESCRIPTION:AI Act high-risk obligations for Annex III systems (for example
  recruitment\, credit scoring\, education\, essential services).\nWho: Pro
 viders and deployers of high-risk AI systems listed in Annex III.\nReferen
 ce: AI Act Art. 113(c)(i) as amended by Regulation (EU) 2026/1744.\nMore: 
 https://clevsec.one/blog/eu-ai-act-timeline/\nAll deadlines: https://clevs
 ec.one/deadlines/\nInformational only\, not legal advice.
URL:https://clevsec.one/blog/eu-ai-act-timeline/
TRANSP:TRANSPARENT
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:In 30 days: AI Act: high-risk rules for Annex III systems
TRIGGER:-P30D
END:VALARM
END:VEVENT
BEGIN:VEVENT
UID:cra-full-application@clevsec.one
DTSTAMP:20261110T000000Z
DTSTART;VALUE=DATE:20271211
DTEND;VALUE=DATE:20271212
SUMMARY:Cyber Resilience Act applies in full
DESCRIPTION:Cyber Resilience Act applies in full: essential requirements (A
 nnex I)\, conformity assessment\, CE marking\, importer and distributor du
 ties.\nWho: Manufacturers\, importers and distributors of products with di
 gital elements.\nReference: CRA Art. 71(2).\nMore: https://clevsec.one/blo
 g/cyber-resilience-act-requirements/\nAll deadlines: https://clevsec.one/d
 eadlines/\nInformational only\, not legal advice.
URL:https://clevsec.one/blog/cyber-resilience-act-requirements/
TRANSP:TRANSPARENT
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:In 30 days: Cyber Resilience Act applies in full
TRIGGER:-P30D
END:VALARM
END:VEVENT
BEGIN:VEVENT
UID:ai-act-high-risk-annex-i@clevsec.one
DTSTAMP:20261110T000000Z
DTSTART;VALUE=DATE:20280802
DTEND;VALUE=DATE:20280803
SUMMARY:AI Act: high-risk rules for Annex I products
DESCRIPTION:AI Act high-risk obligations for AI in products covered by Anne
 x I\, Section A (for example toys\, lifts\, radio equipment\, medical devi
 ces).\nWho: Providers and deployers of AI in regulated products.\nReferenc
 e: AI Act Art. 113(c)(ii) as amended by Regulation (EU) 2026/1744.\nMore: 
 https://clevsec.one/blog/eu-ai-act-timeline/\nAll deadlines: https://clevs
 ec.one/deadlines/\nInformational only\, not legal advice.
URL:https://clevsec.one/blog/eu-ai-act-timeline/
TRANSP:TRANSPARENT
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:In 30 days: AI Act: high-risk rules for Annex I products
TRIGGER:-P30D
END:VALARM
END:VEVENT
END:VCALENDAR