Tools · Updated July 2026
How long is left on each deadline.
The deadlines we track, in date order. The days are counted in your browser against today’s date: the page does not age, and dates already passed stay on the list.
These are the same deadlines as the guide on documentation duties: each one asks for a dated document, not a statement of intent. What is added here is the count of days, recalculated on every visit.
An information tool, not legal advice and not a conformity assessment. The references are the ones cited entry by entry; the text that counts is the official one.
-
ACN cloud rules: the transitional tolerance is over
Concerns Public administration
- Rule
- ACN regulation on digital infrastructure and cloud services for public administration, art. 11(10)
- Who it concerns
- Public administrations and bodies handling critical or strategic data.
-
Cyber Resilience Act: the reporting duty
Concerns Companies
- Rule
- Regulation (EU) 2024/2847, art. 14
- Who it concerns
- Manufacturers of products with digital elements — connected or connectable hardware and software — including products already on the market.
-
ICT census: public bodies declare what is in the machine room
Concerns Public administration
- Rule
- Article 33-septies(1-ter) of Decree-Law 179/2012; AgID survey opened on 22 July 2026
- Who it concerns
- Public administrations required to answer the questionnaire on their ICT estate.
-
NIS2: the baseline security measures, evidenced
A per-subject deadline: eighteen months from the notice of inclusion in the list, received by the first wave from 12 April 2025 onwards. The count here starts from 12 October 2026, the earliest possible day.
Concerns Companies and public bodies
- Rule
- Italian Legislative Decree 138 of 4 September 2024, arts. 23, 24 and 29, with the deadline set by art. 42(1)(c) and by ACN determination 379907/2025
- Who it concerns
- Essential and important entities in the first wave: registered between December 2024 and February 2025, they received their listing notification from 12 April 2025 onwards.
-
Tracking pixels in email: consent and notice, in writing
Concerns Companies and public bodies
- Rule
- Italian Data Protection Authority, measure no. 284 of 17 April 2026 — guidelines on the use of tracking pixels in email communications, published in Official Gazette no. 98 of 29 April 2026
- Who it concerns
- Anyone placing tracking pixels in email: controllers sending marketing and newsletters, email service providers, operators of bulk email platforms.
-
Product liability: documentation as a defence
Concerns Companies
- Rule
- Directive (EU) 2024/2853
- Who it concerns
- Anyone placing on the market, or integrating, software and AI systems in a product or service under their own brand.
-
Machinery Regulation: the manual decides the CE marking
Concerns Companies
- Rule
- Regulation (EU) 2023/1230, which repeals Machinery Directive 2006/42/EC on the same date
- Who it concerns
- Manufacturers of machinery and partly completed machinery, importers and distributors placing products on the Union market.
-
Data centres: the annual sustainability report
Concerns Companies and public bodies
- Rule
- Directive (EU) 2023/1791, art. 12, and Delegated Regulation (EU) 2024/1364, art. 3(1)
- Who it concerns
- Owners and operators of data centres in the Union with an installed information technology power demand of at least 500 kW: enterprise, colocation and co-hosting.
-
Pay transparency: the first report on the gap
Concerns Companies
- Rule
- Italian Legislative Decree 96 of 7 May 2026, arts. 9, 10 and 11
- Who it concerns
- Companies with at least 250 employees, reporting annually, and companies between 150 and 249, with the same first deadline and then every three years. Between 100 and 149 the start is 7 June 2031.
-
Cyber Resilience Act: technical file and software bill of materials
Concerns Companies
- Rule
- Regulation (EU) 2024/2847, arts. 13, 28, 30, 31 and 32, Annexes I and VII
- Who it concerns
- Manufacturers of products with digital elements placed on the Union market.
The full calendar, in a machine-readable form.
The JSON file holds the ten deadlines on this page plus the ones that sit in the other guide — the AI Act dates and Italy’s law 132/2025 — with dates, audiences, links to the notes and the primary source each entry was checked against. Useful to anyone tracking them in their own calendar or handing them to an assistant.
The two AI Act dates rest on the same documents.
On 2 December 2027 the obligations on Annex III high-risk systems apply; on 2 August 2028 those on systems embedded in already regulated products, the Machinery Regulation included. The full calendar sits in the dedicated guide.
Coming soon
The reminder that arrives before the deadline.
We are opening a free reminder service for institutions and companies: a monthly summary of the deadlines that concern you, and an alert when one of them enters the thirty-day window. Subscription will be on request and subject to approval.
Write to us to be notified at launch →
Free information service, with no obligation on either side. Not legal advice: always check the primary source before acting.
The first step
Operational from week one.
A real use case, on your data, in production. Then it grows, week after week.
It starts with a session with our engagement expert. Your data stays yours, always.