Bernard Frisque
    EU Regulations Hub
    Regulation (EU) 2016/679 · GDPR

    GDPR for Brussels SMEs and horeca

    The General Data Protection Regulation applies to any company that processes personal data of an EU resident — including restaurants, freelancers and Brussels micro-businesses.

    Timeline and scope

    AI Act: transparency on 2 August 2026; Annex III high-risk systems on 2 December 2027; Annex I products on 2 August 2028. The DSA generally applies from 17 February 2024, depending on the service. CSRD does not create a universal obligation for every small business or website.

    Commission · AI Act ↗ · Commission · DSA ↗

    Why this page exists

    Apply these references to the actual scope of your activity. Official sources remain the reference; a technical diagnostic does not replace human legal analysis.

    Official sources