JavaScript is off, so parts of this page are not showing. The written analysis is in the HTML and reads normally without scripting. What will not appear: the site navigation in the header, the state-of-play ledger, the regulatory status strips, the compliance calendar, the evidence markers and their drawer, the comparison tables, the interactions view, search and the glossary panel — all of which are rendered from data/*.json at runtime.

Every figure behind them is in that directory and can be read directly. The destinations the header would carry are linked here instead:

Regulatory DNA

Every instrument in the rulebook instantiates the same slots. Fill them in and the differences between the regimes stop being a matter of tone and become a matter of record. Nine of these eleven dimensions are stored on the instrument; competent authority and key dates are derived from the institutions and timeline records, because storing them twice is how two copies of one fact come to disagree.

Instruments

Dimensions

Loading the comparison…

How to read this

Sanctions are ceilings, not tariffs. A percentage of global turnover is the maximum a regulator may impose, and the brief's own argument is that announced figures and collected figures are very different quantities.

Competent authority is not one answer. The Commission supervises the DSA only for VLOPs and VLOSEs; national Digital Services Coordinators supervise everything below that tier. The DMA is the Commission alone. The AI Act splits between the AI Office for general-purpose models and national authorities for everything else. Those distinctions are visible here because they are stored as separate competence edges rather than flattened into a single field.

Implementation model decides where the date that matters actually is. For a Regulation the application date is European. For a Directive it is national, and the brief records that NIS2 transposition is materially incomplete.

One page per instrument

Each of these instruments has a page of its own: what it does, where it stands, its key dates and provisions, who supervises it, what enforcement it has produced, how it interacts with the others, and the graded evidence behind every statement — read from the same records as the table above.

The dataset also holds thinner records for 9 other instruments, which the pages above refer to but which do not yet carry enough — an objective, dates, evidence — to stand on their own: AI Liability Directive, Chips Act, Cloud and AI Development Act, DGA, e-Commerce Directive, eIDAS2, ePrivacy, GDPR Procedural Regulation, NIS1.