EU Legal Order
The key EU instruments framing compliance training and their national transposition across the Member States.
Compliance training in the EU responds to directly applicable regulations and to directives transposed into national law of each Member State.
| Area | EU instrument | National transposition |
|---|---|---|
| Data Protection | GDPR — Regulation (EU) 2016/679 | National laws (PT Law 58/2019, ES LOPDGDD, DE BDSG) |
| Cybersecurity | NIS2 — Directive (EU) 2022/2555 | National transposition (PT Decree-Law 125/2025) |
| Whistleblowing | Directive (EU) 2019/1937 | National transposition (PT Law 93/2021, ES Law 2/2023) |
| Artificial Intelligence | AI Act — Regulation (EU) 2024/1689 | Directly applicable; national authorities to be designated |
| Digital Operational Resilience | DORA — Regulation (EU) 2022/2554 | Directly applicable to the financial sector |
| Anti-Money Laundering | AML package; Regulation (EU) 2024/1624 | AMLA and national supervisors |
| Sustainability | CSRD — Directive (EU) 2022/2464 | National transposition; scope revised by the Omnibus package |
| Pay Transparency | Directive (EU) 2023/970 | To be transposed by Member States by June 2026 |
More information
The information is indicative; EU instruments and their transposition evolve and should be confirmed with the competent authorities. Regulatory map at regimesjuridicos.pt.