Tax and compliance calendar 2027 for companies in the EU
This calendar lists every deadline that applies to a company in the EU in 2027: national tax and reporting duties alongside EU-wide regulations - such as the AI Act, NIS2 and the Cyber Resilience Act - that apply across the whole EU.
Recurring obligations - monthly VAT returns, quarterly filings, annual reports - are expanded into their individual due dates for the year using the rule shown on each deadline's own page. This calendar does not shift dates that fall on a weekend or public holiday; always check the linked official source for the exact filing deadline.
From this date cloud and data-processing providers may no longer charge customers for switching to another provider or for exporting their data (egress). Contracts must already allow termination and migration within 30 days, and providers must offer export in machine-readable formats.
Regulation (EU) 2023/1230 applies to all machinery placed on the EU market from 20 January 2027 with no transition. It adds requirements for software safety, protection against malicious tampering, self-evolving (AI) behaviour, digital instructions, and mandatory third-party assessment for certain high-risk machinery categories.
Under Regulation (EU) 2023/1542 every EV battery, light means of transport battery (e-bikes, scooters) and industrial battery over 2 kWh placed on the market must carry a QR code linking to a digital battery passport with data on chemistry, carbon footprint, recycled content, performance and durability.
Directive (EU) 2023/970 requires employers to publish pay ranges before job interviews, stop asking candidates about salary history, give workers the right to ask about average pay by category, and – for employers with 150 or more staff – report gender pay gap figures for 2026 by June 2027 (250+ annually, 150-249 every three years). Gaps above 5% without objective justification trigger a joint pay assessment.
Micro and small companies dealing in the EUDR commodities (cattle, cocoa, coffee, palm oil, rubber, soy, wood and derived products) get six extra months. Small downstream traders mainly need to collect and pass on upstream due diligence reference numbers; small primary producers in low-risk countries file a simplified declaration.
Payment providers in EU countries outside the euro area must offer euro instant transfers and the free name/IBAN check (Verification of Payee) from July 2027, completing the roll-out across the EU.
General-purpose AI models that were already on the market before 2 August 2025 were given two years to catch up. From this date they must meet the same documentation, copyright and training-data-summary duties as new models.
Companies placing batteries on the EU market must run a due diligence system for raw materials such as cobalt, lithium, nickel and natural graphite: supply-chain policy, risk identification, third-party verification and public reporting. Companies with net turnover below €40M are exempt.
Since 1 January 2026 importers of more than 50 tonnes per year of CBAM goods (iron and steel, aluminium, cement, fertilisers; plus hydrogen and electricity without threshold) must be authorised CBAM declarants and buy CBAM certificates covering the embedded emissions. The first annual declaration and certificate surrender for 2026 imports is due in 2027. Importers under 50 tonnes are exempt but must monitor the threshold.
Since 1 January 2026 crypto-asset service providers (exchanges, brokers, custodial wallet providers, some DeFi front-ends) must collect and verify customer identity and tax residence and record all exchange and transfer transactions of EU users. The first annual report to the tax authority is due in 2027, and data is exchanged between Member States. DAC7 already imposes similar annual reporting (by 31 January) on digital platforms for sellers.
AI used for recruiting and managing workers, credit scoring, insurance pricing, education admissions, biometric identification, critical infrastructure and law enforcement becomes 'high-risk'. Providers need a risk-management system, data governance, technical documentation, logging, human oversight and a conformity assessment; deployers must use the systems as instructed, keep logs and inform affected people.
From this date every product with digital elements placed on the EU market must meet the essential cybersecurity requirements (secure defaults, no known exploitable vulnerabilities, security updates for the support period, SBOM), pass a conformity assessment and carry CE marking. Importers and distributors must check compliance.
Regulation (EU) 2024/3015 bans placing products made with forced labour on the EU market, making them available, or exporting them, anywhere along the supply chain. National authorities and the Commission can investigate suspected products and order withdrawal, donation, recycling or destruction. There is no company-size exemption — only extra guidance and a dedicated SME contact point.
Private companies that are legally required to identify customers with strong authentication – banks, payment and crypto firms, telecoms, energy and utilities, insurers, healthcare providers, transport and very large online platforms – must accept the EU Digital Identity Wallet when a user offers it, in addition to their existing methods.
The Ecodesign for Sustainable Products Regulation (EU) 2024/1781 lets the Commission set durability, repairability, recycled-content and information requirements product group by product group, each with a Digital Product Passport. The first acts (steel, then textiles, tyres, aluminium, furniture) are expected in 2026-2028 and will apply after a transition period. Since 19 July 2026 large companies may also no longer destroy unsold clothing and footwear.
The Commission proposed replacing the Late Payment Directive with a regulation capping B2B and B2G payment terms at 30 days, making late-payment interest automatic and creating national enforcement authorities. The file has not progressed in the Council since 2024, so no date is fixed.
Does this calendar include EU-wide obligations, or only national ones?
Both. It combines every national deadline for this country with EU-wide regulations - such as the AI Act or NIS2 - that apply to companies here regardless of country.
How are recurring deadlines like monthly VAT returns shown?
Each recurring obligation (a monthly VAT return, a quarterly filing) is expanded into its actual due date for every month, quarter or year it applies, using the recurrence rule published on its own deadline page.
How current is this calendar?
Every entry links to its official source and shows a last-verified date. Dates can move, so always confirm against the official source before relying on one.