European Union: Cybersecurity requirements for "high-risk AI systems" in Digital Omnibus on AI Regulation (Regulation 2026/174)
Progress
Scope
Timeline of events
Digital Omnibus on AI Regulation aligning AI Act cybersecurity requirement with Cyber Resilience Act becomes applicable
On 2 August 2026, a new provision on Cyber Resilience Act compliance, inserted by the Regulation on the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI Regulation), becomes applicable. Under…
Digital Omnibus on AI Regulation including cybersecurity requirements for "high-risk AI systems" entered into force with grace period
On 27 July 2026, the Regulation on the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI Regulation) entered into force with grace period. The cybersecurity requirement under Article 15 of the…
Council of the European Union adopted Digital Omnibus on AI Regulation (2025/0359) including cybersecurity requirements for "high-risk AI systems"
On 29 June 2026, the Council of the European Union adopted the Regulation on the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI Regulation). The Regulation would set fixed application dates…
European Parliament passed Digital Omnibus on AI Regulation (2025/0359) including cybersecurity requirements for "high-risk AI systems"
On 16 June 2026, the European Parliament passed a Regulation on the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI Regulation). The vote passed with 423 votes in favour, 57 against, and 174…
European Parliament and Council of the EU reached provisional agreement on Digital Omnibus on AI Regulation (2025/0359) including cybersecurity requirements for high-risk AI systems
On 7 May 2026, the European Parliament and the Council of the EU reached a provisional agreement on the Digital Omnibus on AI Regulation (2025/0359). The Digital Omnibus on AI Regulation would set fixed application dates for cybersecurity obligation…
European Commission announced Proposal for Digital Omnibus on AI Regulation (2025/0359) including cybersecurity requirements for "high-risk AI systems"
On 19 November 2025, the European Commission announced a Proposal for the Digital Omnibus on AI Regulation (2025/0359), which amends the EU AI Act by altering the implementation timeline of cybersecurity requirements for high-risk AI systems. The im…