The August Calendar: What Enters Into Force While Brussels Pretends to Be on Holiday

There is a particular Brussels convention according to which nothing important happens in August. The convention is polite fiction. On 3 August, the Berlaymont published a factsheet listing the entry into force or application of EU legislation between 1 August and 15 September. It is a document written in the driest possible register — dates, article numbers, official journal references — and it is, if you know how to read it, the single most consequential item on my desk this week.

Entry into force is where the political theatre ends and the compliance officer begins her Monday morning. A regulation adopted in trilogue eighteen months ago, celebrated in a press point by three commissioners and forgotten by the wires the following Tuesday, becomes on a specific summer date a binding obligation with penalties attached. The gap between adoption and application is where lobbyists live. The moment of application is where they lose.

Consider the institutional choreography. Co-legislators — Council and Parliament — set a delayed application date precisely because industry asks for it. Eighteen months. Twenty-four. Sometimes thirty-six for the more architecturally ambitious files. Member states use that runway to transpose, where transposition is required; the Commission uses it to draft implementing and delegated acts, which is where the actual operational content of most regulations lives. By the time the application date arrives, the political attention has migrated to whichever file is currently in trilogue, and the file that is about to bite is the file nobody is writing about. This is a feature, not a bug. It is also why enforcement, when it comes, tends to surprise the very industries that lobbied for the delay.

Which brings me to the Gulf transmission. Corporate legal departments in Riyadh, Abu Dhabi, and Doha now maintain what one might charitably call a Brussels calendar — a running list of EU application dates that trigger obligations for any entity offering services to Union users, processing Union data, or trading with Union counterparties. The extraterritorial reach of recent EU digital and sustainability legislation means that a date buried in an August factsheet in Brussels is a date circled in red in a compliance memo in the DIFC. Gulf sovereign wealth funds with European portfolio exposure track these milestones with more discipline than most MEPs. I have seen the spreadsheets. They are impressive.

The question the factsheet does not answer, and which is the question that matters, is enforcement capacity. A regulation that applies on 1 September and is enforced by a national competent authority that has neither the headcount nor the technical expertise to audit compliance is a regulation that exists on paper. The Digital Services Act taught us that the Commission itself, when it chose to enforce directly against very large online platforms, could move with a speed that surprised the platforms. National authorities have not, on the whole, matched that tempo. The AI Act's application phases, staggered as they are, will test whether the AI Office in Brussels can replicate the DSA enforcement posture, or whether we will discover that the Union has legislated faster than it has resourced.