77 officer roles, all coveredArt. 33 GDPR, 72 hours to report a breach93 controls under ISO/IEC 27001:2022905 ready-to-run audit templates in the workspace§ 130 OWiG, supervisory duty of the management boardOfficer appointment letter, signed, filed, evidencedOne workspace for tasks, trainings, audits, documentationDIN 14095 fire protection plans, standardisedEU AI Act, the first horizontal AI regulation worldwide77 officer roles, all coveredArt. 33 GDPR, 72 hours to report a breach93 controls under ISO/IEC 27001:2022905 ready-to-run audit templates in the workspace§ 130 OWiG, supervisory duty of the management boardOfficer appointment letter, signed, filed, evidencedOne workspace for tasks, trainings, audits, documentationDIN 14095 fire protection plans, standardisedEU AI Act, the first horizontal AI regulation worldwide
Blank spiral-bound desk calendar next to a stack of white paper and a black coffee cup on a wooden desk by a window
Governance & Compliance

Monitoring legal changes: from which day a change applies, why publication is not the key date, and who owns it inside the company

23 September 20268 min readBy CIVAC Redaktion
CIVAC

Legal monitoring is usually sold as a news feed. The source itself is free: the Federal Law Gazette is issued on recht.bund.de, and Section 5 VkBkmG requires a free notification service. What is missing is the translation of a publication into a key date and an owner. This article reads Article 82(2) of the Basic Law and Articles 288 and 297 TFEU in their wording and shows the three places where publication is not the day on which the duty begins.

The source is not the bottleneck

The Federal Law Gazette is published electronically. Section 2 Para. 1 Sentence 1 VkBkmG provides: „Das Bundesgesetzblatt wird vom Bundesamt für Justiz auf der Internetseite www.recht.bund.de ausgegeben.“ The Federal Law Gazette is issued by the Federal Office of Justice on recht.bund.de. Section 5 Sentence 1 VkBkmG adds: „Für das Bundesgesetzblatt ist ein unentgeltlicher elektronischer Benachrichtigungsdienst bereitzustellen, der über jede Ausgabe einer neuen Nummer und deren Inhalt informiert.“ A free electronic notification service has to be provided that reports every new issue and its contents.

Any company can therefore learn at no cost that a law has been promulgated. Monitoring that only reports what has appeared delivers less than it promises. The effort lies in two other questions: from when the change applies, and whom in the company it concerns.

Place 1: the law names its day, or the Basic Law names it

Article 82(2) of the Basic Law reads in the official translation: “Every law or statutory instrument shall specify the date on which it shall take effect. In the absence of such a provision, it shall take effect on the fourteenth day after the day on which the Federal Law Gazette containing it was published.” The rule is the express provision in the law itself, usually in the last article of an amending act. The fourteen-day period is the fallback. Anyone who records only the date of promulgation is wrong in both cases.

EU law follows the same pattern with a different number. Article 297(1) third subparagraph TFEU reads for legislative acts: “They shall enter into force on the date specified in them or, in the absence thereof, on the twentieth day following that of their publication.” Article 297(2) TFEU repeats the rule for non-legislative regulations, directives and decisions published in the Official Journal.

Place 2: in force is not applicable

Many provisions enter into force before their duties apply. An example from German law: Section 18 Para. 3 ChemBiozidDV provides „Die §§ 10 bis 13 sind erst ab dem 1. Januar 2025 anzuwenden.“, so Sections 10 to 13 apply only from 1 January 2025. Other parts of the same ordinance had long applied by then; for its Part 2 Section 18 Para. 1 ChemBiozidDV names 1 January 2022. The duties on supplying biocidal products nonetheless began only three years later. EU regulations regularly use the same split and name, besides entry into force, one or more later dates of application, often staggered by chapter.

For monitoring this means every item needs two date fields, not one. Entry into force says from when the provision exists. The date of application says by when a task has to be done. Only the second belongs in a task plan.

Place 3: a directive binds through the implementing act

Article 288 third paragraph TFEU reads: “A directive shall be binding, as to the result to be achieved, upon each Member State to which it is addressed, but shall leave to the national authorities the choice of form and methods.” A regulation, by contrast, under Article 288 second paragraph TFEU “shall be binding in its entirety and directly applicable in all Member States”.

For a company, the publication of a directive in the Official Journal is therefore the start of observation, not of a duty. The duty begins with the German law that implements the directive, and that law in turn has its own dates under places 1 and 2. Entering the directive as the key date either plans too early or misses that the German law goes beyond the directive.

ItemQuestionBasis
Federal law promulgatedDoes it name a day? Otherwise fourteenth day after publication of the GazetteArt. 82(2) Basic Law
EU regulation publishedDoes it name a day? Otherwise twentieth day after publication; plus its own dates of applicationArt. 297 TFEU, Art. 288 second para. TFEU
EU directive publishedWhen and how does the German legislator implement it?Art. 288 third para. TFEU
Provision in force, duty laterWhich date of application is in the final provisions?e.g. Section 18 Para. 3 ChemBiozidDV

The second half: who owns the change?

A legal change assigned to nobody is read by everyone and implemented by no one. Companies with 20 to 500 employees rarely have a legal department to take this on. The natural owners are the appointed officers: a change in data protection law belongs to the data protection officer, a change to the Hazardous Substances Ordinance to the person who keeps the hazardous substances register.

The Rechtsradar on the CIVAC platform is built on this principle. It does not work as a news feed; on request it compiles, for a chosen officer role, a checklist of the applicable duties and recent legal developments. Every item names its legal basis and is phrased as “Verify that …”, and every item can be turned directly into a task for that role. The platform costs 49 euros per officer role per month.

No obligation

Sounds like a lot of work?

Officer duties, deadlines, paperwork — that's exactly what we take off your hands. Say hello and we'll show you how.

Turn this into a mandate.

Let us carry the operational weight. External officer, templates and documentation in one workspace. No obligation.

Related articles