EU legislative process

This subtopic contains a range of resources relating to EU legislative process, procedures and principles relevant to the types of legislation which fall under the umbrella of EU law, including:

  1. EU Treaties (and all their amendments)

  2. Regulations

  3. Directives

  4. Decisions

  5. Opinions and Recommendations

  6. Tertiary legislation (including implementing and delegated legislation)

EU law is developed further by the case law of the Court of Justice of the European Union and legal principles developed by it.

The EU is based on the rule of law. Actions taken by the EU are founded on Treaties approved voluntarily and democratically by all Member States. Under the principle of conferral, if a policy area is not cited in a treaty, the European Commission cannot propose a law in that area as it is not an EU competence.

There are different types of EU legal documents. A treaty is a binding agreement betweenMember States setting out EU objectives, rules for relevant EU institutions, how decisions are made and the relationship between the EU and its Member States. Amendments allow for EU enlargement, and areas of co-operation.

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

Powered by Lexis+®
Latest EU Law News

Commission launches consultation to revise the EU Cybersecurity Act and strengthen the EU cybersecurity framework

The European Commission launched a call for evidence to support the preparation of a legislative proposal to revise the EU Cybersecurity Act. The initiative aims to strengthen EU cyber resilience, update the mandate of the EU Agency for Cybersecurity (ENISA) and improve the effectiveness of the European Cybersecurity Certification Framework. The Commission noted that the cybersecurity landscape has become significantly more complex and threat‑intensive since the Act’s adoption in 2019, while subsequent EU legislation has expanded ENISA’s tasks beyond its original mandate, creating the need to streamline, simplify and supplement the existing framework to ensure coherence, reduce administrative burdens and improve implementation for businesses and users. The initiative focuses on measures to support a secure and resilient Information and Communication Technology supply chain and the EU cybersecurity industrial base, addresses shortcomings in the certification framework such as slow adoption, unclear roles, limited agility and insufficient clarity on covered risks, including non‑technical factors, and considers alignment with newer instruments such as the Cyber Resilience Act. The Commission outlined policy options ranging from non‑legislative measures to targeted or comprehensive regulatory revision, stating that EU‑level action is required to prevent internal market fragmentation and to secure long‑term economic and social benefits through greater harmonisation, stronger cybersecurity and resilience, more efficient incident response and enhanced protection of fundamental rights, including personal data. The call for evidence will run until 20 June 2025.

View EU Law by content type :

Popular documents