Digital transformation affects every sector

The European Union aims to ensure that citizens and businesses benefit optimally from digital transformation through its Digital Decade strategy. This ambition is supported by a series of new or revised laws and regulations that directly impact companies in nearly every sector. Organizations outside the EU that offer digital services or products in the European market also fall under this regulation.

Themes such as privacy, AI, cybersecurity, and data form the legal foundation here. BG.legal assists organizations in navigating this complex wave of legislation.

A selection of important EU legislation

AI Act
Regulates the use of AI based on risk levels. Imposes obligations on developers, providers, and users of AI, with particular attention to GPAI and high-risk applications such as facial recognition.

  • In effect since August 2, 2024
  • Service: AI Act compliance check

Digital Services Act (DSA)
Requires online platforms to remove harmful content and be transparent about algorithms. 

  • Valid since November 16, 2022 (for smaller platforms since February 17, 2024)
  • Tool: DSA flowchart

Data Act
Regulates fair access to (especially non-personal) data between businesses, governments, and users.

  • In effect since January 11, 2024, mandatory from September 12, 2025

NIS2 Directive
Increases the cybersecurity resilience of vital sectors such as energy, healthcare, and digital infrastructure. Obligation for security measures, incident reporting, and boardroom responsibility.

  • To be transposed into national legislation (Cybersecurity Act); effective date unknown.

GDPR / AVG
Protects personal data within the EU. Imposes rules on organizations for the collection, processing, and storage of data.

  • In effect since 2018
  • Service: AVG compliance check

Data Governance Act
Creates frameworks for secure and transparent data management and encourages the reuse of government and business data.

  •  In effect since 2023

Open Data Directive
Makes government data available for innovation and economic development.

  • Transposed in the Netherlands via the Open Government Act (WOO).

European Accessibility Act
Establishes accessibility requirements for digital products and services for people with disabilities.

  • Mandatory from June 28, 2025.

Product Liability Directive (revision)
Holds producers liable for damage caused by defective (digital) products, focusing on AI and smart technology.

  • A new version is in preparation.

What BG.legal can do for you

We advise organizations on:

  • Implementation and compliance with relevant Digital Decade legislation;
  • Legal risks and contractual obligations;
  • Strategic choices in AI, data, and cybersecurity.

Want to know what the Digital Decade means for your organization? Contact our specialists.

How can we help?

Contact form