UK Cyber Regulation Tracker

UK Cyber Regulation Tracker — Every Framework, Every Deadline, Always Current

A single, maintained calendar of every UK and EU cyber, data protection, and technology regulation affecting UK businesses. Updated within 24 hours of any regulatory change. No more searching government websites, subscribing to 15 newsletters, or discovering a new obligation after the deadline has passed.

• Regulatory Calendar: All major UK and EU cyber/data/technology regulatory deadlines in one view — filterable by sector and applicability
• 24-Hour Update: New regulations, amendments, guidance updates, and enforcement actions — added within 24 hours of publication
• Applicability Filter: Select your sectors, size, and jurisdictions — see only the regulations that apply to you
• Impact Assessment: Each new regulation with plain-English summary: what it means, who it affects, what you must do, and by when
• Deadline Alerts: 90/30/7-day reminders for applicable regulatory deadlines — via email and Telegram
• Parliamentary Progress: Bills in progress (CS&R Bill, DUA Act) — tracked through readings, committee, Royal Assent with impact analysis at each stage
• Enforcement Tracker: ICO, FCA, HMRC, HSE enforcement actions — what regulators are actually enforcing this quarter
• Board Briefing: Monthly one-page regulatory landscape summary — what changed, what is coming, what the board should know

⚠️ Legal disclaimer (COMPLIANCE): This product is provided for information and compliance documentation only; it is not regulatory advice. Read the full disclaimer below or in our Terms of Service before purchase.

NIS2 Annex I + Article 21/23 Tracking Coverage

This tracker monitors regulatory updates across all NIS2 Directive 2022/2555 Annex I cybersecurity measures and emits alerts when official guidance, national transposition rules, or technical standards change. Tracked dimensions include:

• (a) Risk analysis + information system security policy — National competent authority guidance updates on risk methodology expectations
• (b) Incident handling — ENISA reporting taxonomy updates, national CSIRT process changes
• (c) Business continuity + crisis management — National contingency planning guideline changes
• (d) Supply chain security — Cyber supply chain risk register format changes, Article 22 risk assessment updates
• (e) Network + information system security — Technical baseline standard updates (ENISA, BSI, NCSC)
• (g) Cyber hygiene + training — Awareness programme requirement changes by member state
• (h) Cryptography + encryption — Approved cryptographic standard updates
• (i) Access control — Identity management requirement changes
• (j) Multi-factor + emergency comms — MFA enforcement timeline changes by sector

Article 21 governance tracking: Director personal liability case law tracker, board accountability requirement changes by member state.

Article 23 reporting tracking: National CSIRT reporting form changes, 24-hour early warning template updates, 72-hour formal notification format changes — alerts when reporting windows or formats are updated by the national competent authority.