UPDATE ยท AUGUST 2026
The AI Act timeline originally described in this article has been amended by the AI Digital Omnibus, Regulation (EU) 2026/1744, published in the Official Journal on 24 July 2026 and in force since 27 July. From 2 August 2026, the transparency obligations under Article 50 apply, and governance and enforcement are fully operational. The obligations for high-risk systems, however, have been postponed to 2 December 2027 (Annex III) and 2 August 2028 (systems integrated into products covered by Annex I, machinery included). The text below has been updated accordingly.
In an increasingly unstable and fastโevolving geopolitical landscape, the data confirms a clear trend: the European Union is becoming an ever more frequent target of cyberattacks. In 2025, DDoS attacks across Europe increased by 75%, highlighting persistent and critical pressure on essential infrastructures. (source: here)
In parallel, a record average of 443 dataโbreach notifications per day was reported, marking a 22% increase compared to the previous year. (source: here)
This trend is not new, and it is no coincidence that in recent years the European Union has developed a series of regulations and directives that will become fully applicable between 2026 and 2028. This new regulatory framework stems from the need to ensure strategic internal security, to protect European citizens and to strengthen the resilience of Europeanโmade products. It is a real and necessary objective โ yet navigating this regulatory and certification maze can be complex and challenging. The main risk is losing orientation. Companies risk becoming blinded to the opportunities ahead of them: improved security (and therefore reduced economic losses due to cyberattacks) or the potential competitive advantage inherent in achieving CE conformity โ a mark that signals a level of quality and maturity that is almost unmatched globally when it comes to safety and data protection.
The challenges to overcome in this maze are the NIS2 Directive, the Cyber Resilience Act, the AI Act and the new Machinery Regulation. In this article, we will untangle their complexity and provide a practical map and an immediate, usable interpretation framework.
(more…)

