Free instrument from GAGE
Four laws. One map.
The GDPR, NIS2, DORA and the EU AI Act are usually read one at a time, in four separate silos, by four separate teams. They were not written that way. Each act names the others in its own text, and those sentences decide which rules apply to you and which give way. This map holds all four, and the space between them.
GDPR
The data protection backbone every other law on this map leans on.
Open the explorer
NIS2
Cybersecurity duties for essential and important entities across the sectors in its annexes.
Open the explorer
DORA
ICT risk, incident reporting, resilience testing and third-party oversight for finance.
Open the explorer
EU AI Act
The newest law in the family, and the one that cites the oldest most often.
Open the AI Act Explorer
What is on the map
A graph of the text, not a summary of it
Every node is a provision of an official text: an article, a recital, an annex, a chapter, a defined term. Every line between two nodes exists because the text puts it there.
Citations
Where an article names another article of its own act. These are read straight out of the text.
Recitals
Where a recital names the article it explains. Where it names none, the map matches it to the closest article by wording and marks the link as inferred, so you always know which is which.
Definitions
Every defined term in the definitions article, as its own node, so you can see which provisions the definition reaches.
The crossover
Where the laws touch
NIS2 scopes itself around the GDPR in its own scope article. DORA overrides NIS2 for financial entities. The AI Act builds its treatment of biometric data on the GDPR's special categories. Each of those is one sentence in an official text, and the crossover map holds every one of them.
Source texts: the Official Journal, through the Publications Office. Study aid, not legal advice.
GDPR 32016R0679NIS2 32022L2555DORA 32022R2554EU AI Act 32024R1689
The EU AI Act has its own full explorer on this site, including the amendments made by the Digital Omnibus. This map holds the three acts it does not yet cover, plus the citations that join all four.
Reading the AI Act itself? Start in the EU AI Act Explorer, or compare jurisdictions in the Global AI Governance Arena.