EU directive vs EU regulation

Why they differ

A directive must first become national law; a regulation applies directly and the same way in every member state.

Compliance & regulation

A type of EU law that sets goals every member state must reach, but lets each country write its own national law to do it.

Formal

A legal act of the European Union that is binding on each member state as to the result, but leaves the form and method to national authorities; it must be written into national law by a deadline, as with NIS2 and the Danish NIS2 Act.

In plain English

Like a parent telling several teenagers "your rooms must be clean by Sunday" - the goal is fixed, but each decides how to get there.

In practice

The IT department of a Danish region does not read NIS2 itself to find its hospitals' duties; it follows the Danish NIS2 Act, which puts the directive into force and names the Danish authorities.

Why it matters

Because each country writes its own version, details and deadlines can differ between countries, so organisations working across borders must check each national law.

EU regulation

Compliance & regulation

A type of EU law that applies directly and identically in every member state, with no national law needed to bring it in.

Formal

A legal act of the European Union that is binding in full and applies directly in all member states from the date it takes effect - for example GDPR, DORA and the Cyber Resilience Act - although countries may add rules on authorities and fines where it allows.

In plain English

Like a single book of rules for a chess tournament played in many countries - every table follows the same page, and no host country may print its own version.

In practice

A web shop selling to both Denmark and Germany follows one GDPR text for handling customer data, and only checks national rules for details the regulation leaves open.

Why it matters

Knowing whether a rule is a regulation or a directive tells you where to read your duties - in the EU text itself or in your own country's law.

Shared connections

Compliance