Regulation Decoded

Updates

The public change log for Regulation Decoded books, and the policy behind it. No registration. No paywall.

Regulatory books date. This page is where we say so.

When the law covered by one of our books changes materially, a dated change note is published here — stating what changed, and which chapters and templates it affects. The log is public and open to every reader, whether or not they bought the book from us.

This is a commitment to tell you what changed. It is not a commitment to revise the book, and it is not legal advice.

Change log

Current status

No change notices have been issued yet. This page was established alongside the first edition carrying the update commitment; notices will appear below, newest first, as and when a trigger is met.

Most months, nothing will be posted here. That is the intended state: a notice means an obligation moved, not that a commentator had an opinion.

Change notices, newest first.
Date Instrument What changed, and what it affects
No notices issued to date.

Update policy

The commitment has three levels. Every book states the first. Books in the regulatory series carry all three.

1 · A currency statement

Every book states the date at which it sets out the law, and what falls outside that statement — typically delegated acts, implementing acts, harmonised standards and regulatory guidance adopted after that date.

2 · A change notice

Where the law covered by a book changes materially before the next edition, a dated note is published on this page naming what changed and which chapters and templates it affects.

3 · Updated templates

Where a change makes a template or decision rule in the book out of date, the affected file is reissued with a version line and a changelog entry.

Why the log is public rather than emailed. A commitment printed in a book should not sit behind a marketing list. You bought the book; the notice belongs to you without a further transaction. The log stays open, and subscribing is never a condition of receiving what the book promised.

If you would rather be told than check. Send an email to tiina@regulationdecoded.com with the word notify and the book or instrument you are following. Your address is used for change notices only — not for marketing — and you can ask to be removed at any time, in one line, with no reason given.

What counts as a material change

A notice is issued when one of these occurs:

No notice is issued for: supervisory guidance and Q&As that do not change an obligation, news coverage, consultancy commentary, or corrections of typographical errors. Those may be interesting. They do not change what you have to do.

Rhythm. Monitoring runs monthly. Publication is event-driven, not scheduled.

How long the commitment runs

The commitment attaches to an edition and runs until a stated end date, printed in that book. It is not tied to the date you bought the book, and it is not described as lifetime — a promise that cannot be kept for twenty years should not be made for one.

An end date can be extended. It cannot be introduced after the fact, so each book carries its own from the day it is printed. Check the About This Edition page at the front of your copy for the date that applies to it.

End dates for editions currently in print.
Edition States the law as at Change notices until
CRA, Decoded — first edition, 2026 6 August 2026 31 December 2028

Which books carry it

What is monitored

Monitoring is organised by instrument rather than by book, which is why it can be sustained across a growing catalogue: several books can depend on the same instrument, and one check serves all of them.

Currently tracked: the Cyber Resilience Act (Regulation (EU) 2024/2847), NIS2 (Directive (EU) 2022/2555), DORA (Regulation (EU) 2022/2554), the EU AI Act (Regulation (EU) 2024/1689), and the GDPR (Regulation (EU) 2016/679), together with the delegated and implementing acts made under them. The list grows with the catalogue.

Limits

Who gives this commitment

This commitment is given by Regulation Decoded, the publisher, and by the author of the book in question. It is independent of Amazon, Kindle Direct Publishing, and any other retailer or platform through which a copy was bought. Retailers neither administer nor guarantee it, and no purchase receipt is needed to use this page.

Privacy

This page collects nothing. There is no registration, no login, no analytics, no advertising and no tracking cookies. You can read the change log without identifying yourself in any way, which is the point of publishing it here rather than sending it.

Should a notification list be offered in future, it will be separate from this page and consent-based: a single purpose stated at sign-up, no bundling of the change service with marketing consent, one-click unsubscribe, and no sale or sharing of addresses. The controller for any such processing is Regulation Decoded, Hämeenlinna, Finland; data subject requests under Articles 15 to 21 GDPR can be made to the address below and are answered within one month.