The road to the EU’s Digital Decade – key legislative initiatives at a glance

Artificial Intelligence Act

The AI Act establishes the first unified legal framework across the EU for the use of artificial intelligence. AI systems are classified according to different risk levels, with each category subject to specific requirements depending on the level of risk.

Who is affected?

Companies that develop, market, or use AI systems within the EU — particularly providers of high-risk AI systems.

Cyber Resilience Act (CRA)

The CRA introduces mandatory cybersecurity requirements for products with digital elements and obliges manufacturers to implement secure development processes and provide regular security updates.

Who is affected?

Manufacturers, importers, and distributors of hardware and software products with digital functionalities.

Data Act (DA)

The Data Act regulates access to and the use of data generated by connected products and services in order to promote innovation and competition within the data economy.

Who is affected?

Manufacturers of IoT devices, providers of digital services, and companies operating data-driven business models.

Data Governance Act (DGA)

The DGA establishes a framework for data sharing, promotes the role of data intermediaries, and facilitates data altruism for research and innovation purposes.

Who is affected?

Organizations acting as data intermediaries, public sector bodies, as well as companies and research institutions that share or use data.

Digital Operations Resilience Act (DORA)

DORA strengthens the digital resilience of the financial sector by introducing requirements for IT security, risk management, and the reporting of IT-related incidents.

Who is affected?

Financial institutions, as well as IT service providers that deliver critical digital services to the financial sector.

Digital Services Act (DSA)

The DSA modernises the rules governing online platforms and requires greater transparency, effective moderation of illegal content, and enhanced protection for users.

Who Is Affected?

Online platforms, hosting services, online marketplaces, and very large online platforms (VLOPs).

Markets in Crypto-Assets (MiCAR)

MiCAR establishes an EU-wide regulatory framework for cryptocurrencies and governs issuers of crypto-assets as well as providers of crypto-related services.

Who is affected?

Crypto exchanges, wallet providers, stablecoin issuers, and other providers of crypto services.

New Deal for Consumers

The New Deal for Consumers strengthens consumer rights across the EU, particularly in the area of online commerce, and increases penalties for violations of consumer protection rules.

Who is affected?

Companies that offer goods or services to consumers within the EU.

NIS 2-Directive

NIS2 expands cybersecurity and incident reporting requirements for critical and important entities.

Who is affected?

Companies operating in critical sectors such as energy, transport, healthcare, digital infrastructure, and other essential services.

New regulations. New challenges.

The pace of digital transformation – and the resulting legal framework – is breathtaking and continues to accelerate. Keeping up while staying competitive poses major challenges for businesses. The EU’s Digital Decade initiative will bring a host of new legislative measures with far‑reaching implications for companies across all sectors. Dealing with these new rules can be both a challenge and an opportunity.

Lawyers who understand the digital landscape

SKW Schwarz is one of Germany’s leading law firms when it comes to digital transformation, innovative technologies and business models. With recognised specialists across all relevant areas of law – including IT & Digital Business, Intellectual Property, Media & Entertainment, Corporate, Employment, and Banking & Finance – we are able to provide you with first‑class legal advice at all times. We also know that you can only deliver truly effective legal advice if you have a deep understanding of the regulatory landscape. That is why we are not only legal experts, but also understand the economic and technological dimensions of topics such as artificial intelligence, e‑commerce, IoT, cloud computing, big data, NFTs and crypto markets, and cybersecurity. For many years, we have been advising companies of all sizes and industries on legal issues related to digital transformation. We understand the legal questions, risks and opportunities associated with the EU’s new legislative initiatives – and can guide you safely through the challenges and opportunities of the Digital Decade.