feat(jurisdiction): add EU / EUDR deforestation regulation card (#181)

* feat(jurisdiction): add EU / EUDR deforestation regulation card

Documents the 30 December 2026 application date confirmed by the
Commission simplification review of 4 May 2026 (COM(2026) 191 final),
and the Article 9 plot-level geolocation obligation: latitude and
longitude to six decimal digits, polygons above four hectares, lodged
centrally in the EU Information System.

Notes that downstream B2B transmission carries a DDS reference number
rather than coordinates, so confidentiality is already a design goal
of the regime.

* docs: reference PR number in CHANGELOG entry

Author: mzf11125

CHANGELOG.md

@@ -5,6 +5,7 @@ All notable changes to the EthSystems Map are documented here.
 ## [Unreleased]
 
 - docs: add Espalier preprint reference to [ZK Proof Systems](patterns/pattern-zk-proof-systems.md), [Post-Quantum Threats](domains/post-quantum.md), and [Safe Proof Delegation](patterns/pattern-safe-proof-delegation.md) `## See also` sections
+- feat(jurisdiction): [EU / EUDR (Deforestation Regulation)](jurisdictions/eu-EUDR.md) -- Article 9 plot-level geolocation and the DDS reference-number model, ahead of the 30 December 2026 application date ([#181](https://github.com/ethsystems/map/pull/181))
 
 ## [0.4.0] - 2026-07-02
 

jurisdictions/eu-EUDR.md

@@ -0,0 +1,33 @@
+---
+title: "Jurisdiction: EU / EUDR (Deforestation Regulation)"
+status: ready
+region: EU
+scope:
+  entities: [operators, traders, downstream operators, importers]
+  activities: [due diligence, geolocation reporting, supply chain traceability]
+key-regulations:
+  - EUDR (Reg. (EU) 2023/1115)
+  - Amending Reg. (EU) 2025/2650
+  - Commission simplification review (COM(2026) 191 final)
+last_reviewed: 2026-08-02
+---
+
+> Developer orientation. Not legal advice.
+
+## At a Glance
+
+The EUDR bars products linked to deforestation after 31 December 2020 from the EU market. It applies from 30 December 2026 to large and medium operators and to micro and small operators in the timber sector, with remaining micro and small operators following on 30 June 2027. Regulation (EU) 2025/2650 set those dates, and the Commission's simplification review of 4 May 2026 confirmed them without further delay. The obligation that matters technically is Article 9: operators collect latitude and longitude to six decimal digits for every plot of land, expressed as a polygon where the plot exceeds four hectares, and lodge that data in a due diligence statement (DDS) in the EU Information System. The regime is settled and already confidentiality aware, because business-to-business transmission downstream carries a DDS reference number rather than the coordinates themselves, but compliance still rests on plot-level geolocation held centrally.
+
+## What to Watch
+
+- A draft Delegated Act amending Annex I on product scope remains open for feedback.
+- Whether hiding geolocation within the Information System satisfies operators that treat plot boundaries as commercially sensitive sourcing data.
+- Smallholder plot polygons can constitute personal data as well as commercial data, which brings GDPR into scope alongside the EUDR.
+- Country benchmarking assigns risk categories that determine how much due diligence each supply chain requires.
+
+## See also
+
+- [Regulation (EU) 2023/1115 (consolidated) – EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A02023R1115-20251226)
+- [Deforestation-free products – European Commission](https://environment.ec.europa.eu/topics/forests/deforestation/regulation-deforestation-free-products_en)
+- [Jurisdiction: EU Data Protection & PETs](./eu-data-protection.md)
+- [Private Supply Chain use case](../use-cases/private-supply-chain.md)