EU compliance calendar
Every EU compliance deadline that applies to you, in one calendar.
Transposition dates, first reports and recurring obligations under the EU Whistleblowing Directive, the Pay Transparency Directive, NIS2 and CSRD. Dates come from the directives themselves. Your national transposition is what binds you, so check it.
Overview
Most EU reporting rules have the same shape.
Something happens, a clock starts, and you have to prove you responded. Below is every deadline we can date, what triggers it, and who it applies to.
Calendar
The deadlines, regime by regime.
| Regime | Deadline | Recurring obligation | Who it applies to |
|---|---|---|---|
| WhistleblowingEU Whistleblowing Directive (2019/1937)Internal reporting channel for breaches of EU law. Mandatory for 50+ employee organisations. 7-day acknowledgement, 3-month follow-up.Read the compliance guide | 17 December 2021 (transposition) | Acknowledge within 7 days of receipt, feedback within 3 months | Employers with 50 or more employees |
| Pay transparencyEU Pay Transparency Directive (2023/970)Gender pay-gap reporting, individual pay information rights and joint assessment at 5%. Transposition by 7 June 2026, first reports 7 June 2027.See what employers must do | 7 June 2026 (transposition), first reports 7 June 2027 | Pay-gap report annually (250+ employees), every 3 years (150โ249), from 7 June 2031 (100โ149) | From 100 employees, phased by size |
| Incident responseNIS2 Directive (2022/2555)24-hour early warning / 72-hour notification / one-month final report for cybersecurity incidents at essential and important entities.See NIS2 incident reporting | October 2024 (transposition) | Early warning within 24 hours, incident notification within 72 hours, final report within 1 month | Essential and important entities |
| SustainabilityCSRD (EU 2022/2464)Sustainability disclosures including the workforce, value-chain and ethics topics covered by ESRS S1, S2 and G1.See CSRD reporting | Financial years 2024, 2025 and 2026, phased by company type | Annual sustainability statement, including the ESRS G1 whistleblowing disclosures | Large undertakings and listed SMEs |
Recurring deadlines
The dates that come back with every report.
Whistleblowing and incident-reporting obligations are not annual filings. The clocks start the moment something arrives, which is why they are the ones teams miss.
Caveats
Three things to know about these dates.
The directive date is the floor
Member States set their own national transposition dates and can add requirements. The date that binds you is the one in your national law.
Deadlines are maximums
A 7-day acknowledgement window means you have up to 7 days. Acknowledging in 2 days is compliant and better for the reporter.
Two clocks per report
Whistleblowing has two: 7 days to acknowledge, 3 months to give feedback on the follow-up. Both run per report, not per year.
Where Ashio fits
The record that proves you hit your dates.
Ashio runs the reporting channel and keeps the authoritative timeline: when a report arrived, when it was acknowledged, when feedback went out and what happened in between. Export it for an auditor, a works council or a regulator.
Questions
Deadlines, in practice.
What is the 7-day whistleblowing deadline?+
Under Directive (EU) 2019/1937 the organisation must acknowledge receipt of a report to the reporter within 7 days. The 7 days start when the report arrives, not when someone opens it.
What is the 3-month deadline?+
You must give the reporter feedback on the follow-up to their report within 3 months of the acknowledgement. It is measured from the acknowledgement, not from the report.
When do the first pay transparency reports fall due?+
Employers with 250 or more workers report annually from 7 June 2027. Employers with 150โ249 report every three years from the same date, and those with 100โ149 from 7 June 2031.
Do these deadlines apply if we are outside the EU?+
The directives bind organisations operating in the EU, including non-EU groups with EU subsidiaries or employees. National transposition decides the exact thresholds that apply to each entity.
How does Ashio help meet these dates?+
Ashio timestamps every event on a report, shows the acknowledgement and feedback deadlines in the case list, and keeps an immutable log you can export. It does not file pay-gap reports or NIS2 notifications for you.
Start the clock with a channel that already tracks it.
14-day free trial, end-to-end encrypted, and the 7-day and 3-month timers start on day one.