From Regulation to Readiness: Operational Gaps in AI Governance under the EU AI Act, NIS2 and GDPR

Journal article

Karolina Grenda PhD
European Cybersecurity Journal, vol. 11(1), 2026 May, pp. 24-36

Cite

APA Click to copy
PhD, K. G. (2026). From Regulation to Readiness: Operational Gaps in AI Governance under the EU AI Act, NIS2 and GDPR. European Cybersecurity Journal, 11(1), 24–36.

Chicago/Turabian Click to copy
PhD, Karolina Grenda. “From Regulation to Readiness: Operational Gaps in AI Governance under the EU AI Act, NIS2 and GDPR.” European Cybersecurity Journal 11, no. 1 (May 2026): 24–36.

MLA Click to copy
PhD, Karolina Grenda. “From Regulation to Readiness: Operational Gaps in AI Governance under the EU AI Act, NIS2 and GDPR.” European Cybersecurity Journal, vol. 11, no. 1, May 2026, pp. 24–36.

BibTeX Click to copy

@article{karolina2026a,
  title = {From Regulation to Readiness: Operational Gaps in AI Governance under the EU AI Act, NIS2 and GDPR},
  year = {2026},
  month = may,
  issue = {1},
  journal = {European Cybersecurity Journal},
  pages = {24-36},
  volume = {11},
  author = {PhD, Karolina Grenda},
  month_numeric = {5}
}

This article examines the implementation gap in EU AI governance emerging at the intersection of the AI Act, GDPR and NIS2. It argues that regulatory adoption does not ensure institutional readiness to supervise, enforce and operationalize compliance. Focusing on overlapping incident-reporting duties, fragmented oversight and the burdens placed on public bodies and SMEs, the article shows how regulatory complexity may weaken both legal certainty and innovation capacity.