Compliance deadlines
Tech, data and AI · 78 this year · Subscribe
2026
78 events in Compliance deadlines
| Date | Event | ||||
|---|---|---|---|---|---|
| Coming up | |||||
| Sep 30Wedin 5 days | Data (Use and Access) Act: ICO abolished; Information Commission takes overTech · Compliance deadlines · United Kingdom | United Kingdom | one-off | Regulations | in 5 days |
| Oct 1Thuin 6 days | Connecticut Data Privacy Act (CTDPA): PA 26-64 (SB 4) amendments take effectTech · Compliance deadlines · Connecticut | Connecticut | one-off | Regulations | in 6 days |
| Oct 26Monin 4 weeks | UK Cyber Security and Resilience Bill: Lords report stage scheduledTentativeTech · Compliance deadlines · United Kingdom | United Kingdom | one-off | Regulations | in 31 days |
| Nov 10Tuein 6 weeks | CMMC 2.0: Phase 2: Level 2 C3PAO certificationTech · Compliance deadlines · United States (Federal) | United States (Federal) | one-off | Regulations | in 2 mo |
| Nov 13Friin 7 weeks | India DPDP Act: Consent Manager registration rule in force (12 months)Tech · Compliance deadlines · India | India | one-off | Regulations | in 2 mo |
| Dec 1Tuein 2 months | Chile Personal Data Protection Law (Ley 21.719): Law in forceTech · Compliance deadlines · Chile | Chile | one-off | Regulations | in 2 mo |
| Dec 2Wedin 2 months | EU AI Act: New bans on sexual deepfakes and CSAM generation; Art 50(2) grace period endsTech · Compliance deadlines · European Union | European Union | one-off | Regulations | in 2 mo |
| Dec 9Wedin 2 months | Product Liability Directive: Transposition deadline; old PLD repealedTech · Compliance deadlines · European Union | European Union | one-off | Regulations | in 2 mo |
| Dec 10Thuin 2 months | Australia Privacy Act: Automated decision-making transparency appliesTech · Compliance deadlines · Australia | Australia | one-off | Regulations | in 2 mo |
| in 2 months | Australia Privacy Act: Children's Online Privacy Code must be registeredTech · Compliance deadlines · Australia | Australia | one-off | Regulations | in 2 mo |
| Dec 24Thuin 3 months | eIDAS 2 / EU Digital Identity Wallet: Member States must provide EU Digital Identity WalletsTech · Compliance deadlines · European Union | European Union | one-off | Regulations | in 3 mo |
| Earlier | |||||
| Sep 12Sat13 days ago | EU Data Act: Access-by-design for new connected productsTech · Compliance deadlines · European Union | European Union | one-off | Regulations | 13 days ago |
| Sep 11Fri2 weeks ago | South Korea PIPA: 2026 PIPA amendments take effectTech · Compliance deadlines · South Korea | South Korea | one-off | Regulations | 14 days ago |
| 2 weeks ago | Cyber Resilience Act: Vulnerability and incident reporting obligations applyTech · Compliance deadlines · European Union | European Union | one-off | Regulations | 14 days ago |
| Aug 31Mon3 weeks ago | Digital Services Act: ChatGPT designated as VLOSE; Reddit and Roblox as VLOPsTech · Compliance deadlines · European Union | European Union | one-off | Regulations | 25 days ago |
| Aug 2Sun7 weeks ago | California AI Transparency Act (SB 942): Covered provider duties applyTech · Compliance deadlines · California | California | one-off | Regulations | 2 mo ago |
| 7 weeks ago | EU AI Act: General application: transparency obligations, GPAI fines, most other rulesTech · Compliance deadlines · European Union | European Union | one-off | Regulations | 2 mo ago |
| Aug 1Sat7 weeks ago | California Delete Act / DROP: Data brokers must begin processing DROP deletion requestsTech · Compliance deadlines · California | California | one-off | Regulations | 2 mo ago |
| 7 weeks ago | Connecticut Data Privacy Act (CTDPA): Profiling impact assessments applyTech · Compliance deadlines · Connecticut | Connecticut | one-off | Regulations | 2 mo ago |
| Jul 27Mon2 months ago | EU AI Act: Digital Omnibus on AI enters into forceTech · Compliance deadlines · European Union | European Union | one-off | Regulations | 2 mo ago |
| Jul 17Fri2 months ago | Japan APPI: 2026 APPI amendment act promulgatedTech · Compliance deadlines · Japan | Japan | one-off | Regulations | 2 mo ago |
| Jul 1Wed2 months ago | Connecticut Data Privacy Act (CTDPA): PA 25-113 (SB 1295) amendments take effectTech · Compliance deadlines · Connecticut | Connecticut | one-off | Regulations | 3 mo ago |
| 2 months ago | New Jersey NJDPA: Mandatory 30-day cure period expiresTech · Compliance deadlines · New Jersey | New Jersey | one-off | Regulations | 3 mo ago |
| 2 months ago | Utah UCPA: Right to correct takes effectTech · Compliance deadlines · Utah | Utah | one-off | Regulations | 3 mo ago |
| 2 months ago | Virginia VCDPA: Ban on selling precise geolocation data (SB 338)Tech · Compliance deadlines · Virginia | Virginia | one-off | Regulations | 3 mo ago |
| Jun 30Tue2 months ago | New Jersey NJDPA: A5328 sensitive data sale ban takes effectTech · Compliance deadlines · New Jersey | New Jersey | one-off | Regulations | 3 mo ago |
| 2 months ago | Colorado AI Act: Delayed effective date (superseded)Tech · Compliance deadlines · Colorado | Colorado | one-off | Regulations | 3 mo ago |
| Jun 19Fri3 months ago | Data (Use and Access) Act: Mandatory data protection complaints procedureTech · Compliance deadlines · United Kingdom | United Kingdom | one-off | Regulations | 3 mo ago |
| Jun 16Tue3 months ago | UK Cyber Security and Resilience Bill: Passes House of CommonsTech · Compliance deadlines · United Kingdom | United Kingdom | one-off | Regulations | 3 mo ago |
| Jun 15Mon3 months ago | Canada Bill C-36 (PPCDA): Bill C-36 tabled (first reading)Tech · Compliance deadlines · Canada | Canada | one-off | Regulations | 3 mo ago |
| 3 months ago | Canada Bill C-8 / CCSPA: Royal AssentTech · Compliance deadlines · Canada | Canada | one-off | Regulations | 3 mo ago |
| Jun 11Thu3 months ago | Cyber Resilience Act: Conformity assessment body provisions applyTech · Compliance deadlines · European Union | European Union | one-off | Regulations | 3 mo ago |
| Jun 3Wed3 months ago | SEC Regulation S-P: Smaller entities must complyTech · Compliance deadlines · United States (Federal) | United States (Federal) | one-off | Regulations | 4 mo ago |
| Jun 2Tue3 months ago | Illinois AI in Employment Law (HB 3773): IDHR withdraws and postpones proposed rulesTech · Compliance deadlines · Illinois | Illinois | one-off | Regulations | 4 mo ago |
| May 21Thu4 months ago | eIDAS 2 / EU Digital Identity Wallet: Legacy qualified trust service providers conformity reportTech · Compliance deadlines · European Union | European Union | one-off | Regulations | 4 mo ago |
| May 19Tue4 months ago | TAKE IT DOWN Act: Platform notice-and-removal process requiredTech · Compliance deadlines · United States (Federal) | United States (Federal) | one-off | Regulations | 4 mo ago |
| May 15Fri4 months ago | Illinois AI in Employment Law (HB 3773): IDHR proposed notice rules publishedTech · Compliance deadlines · Illinois | Illinois | one-off | Regulations | 4 mo ago |
| May 14Thu4 months ago | Colorado AI Act: SB 26-189 signed (repeal and reenact)Tech · Compliance deadlines · Colorado | Colorado | one-off | Regulations | 4 mo ago |
| May 1Fri4 months ago | New Zealand Privacy Act: IPP 3A indirect-collection notification appliesTech · Compliance deadlines · New Zealand | New Zealand | one-off | Regulations | 5 mo ago |
| Apr 22Wed5 months ago | COPPA Rule: Full compliance with amended COPPA RuleTech · Compliance deadlines · United States (Federal) | United States (Federal) | one-off | Regulations | 5 mo ago |
| Apr 15Wed5 months ago | NYDFS Cybersecurity Regulation (Part 500): Annual compliance notificationTech · Compliance deadlines · New York | New York | one-off | Regulations | 5 mo ago |
| Apr 11Sat5 months ago | UK Online Safety Act: Fee notification window closes (2026/27)Tech · Compliance deadlines · United Kingdom | United Kingdom | one-off | Regulations | 5 mo ago |
| Apr 1Wed5 months ago | Illinois BIPA: Seventh Circuit: amendment applies retroactivelyTech · Compliance deadlines · Illinois | Illinois | one-off | Regulations | 6 mo ago |
| 5 months ago | Maryland Online Data Privacy Act (MODPA): MODPA applies to personal data processingTech · Compliance deadlines · Maryland | Maryland | one-off | Regulations | 6 mo ago |
| Mar 27Fri6 months ago | NY RAISE Act: Chapter amendment S8828 signedTech · Compliance deadlines · New York | New York | one-off | Regulations | 6 mo ago |
| Mar 17Tue6 months ago | Brazil ECA Digital: ECA Digital in forceTech · Compliance deadlines · Brazil | Brazil | one-off | Regulations | 6 mo ago |
| Mar 10Tue6 months ago | South Korea PIPA: 2026 PIPA amendment promulgated (Act No. 21445)Tech · Compliance deadlines · South Korea | South Korea | one-off | Regulations | 7 mo ago |
| Mar 1Sun6 months ago | Vietnam AI Law: AI Law takes effectTech · Compliance deadlines · Vietnam | Vietnam | one-off | Regulations | 7 mo ago |
| Feb 27Fri7 months ago | Virginia VCDPA: SB 854 preliminarily enjoined (NetChoice v. Jones)Tech · Compliance deadlines · Virginia | Virginia | one-off | Regulations | 7 mo ago |
| Feb 16Mon7 months ago | HIPAA: Notice of Privacy Practices updates (Part 2 alignment)Tech · Compliance deadlines · United States (Federal) | United States (Federal) | one-off | Regulations | 7 mo ago |
| Feb 5Thu7 months ago | Data (Use and Access) Act: Stage 3: main data protection changes commenceTech · Compliance deadlines · United Kingdom | United Kingdom | one-off | Regulations | 8 mo ago |
| 7 months ago | UK GDPR: DUAA amendments to UK GDPR commenceTech · Compliance deadlines · United Kingdom | United Kingdom | one-off | Regulations | 8 mo ago |
| Feb 1Sun7 months ago | Colorado AI Act: Original effective date (superseded)Tech · Compliance deadlines · Colorado | Colorado | one-off | Regulations | 8 mo ago |
| Jan 31Sat7 months ago | Minnesota Consumer Data Privacy Act (MCDPA): 30-day cure period expiresTech · Compliance deadlines · Minnesota | Minnesota | one-off | Regulations | 8 mo ago |
| 7 months ago | California Delete Act / DROP: Annual data broker registration deadlineTech · Compliance deadlines · California | California | one-off | Regulations | 8 mo ago |
| Jan 22Thu8 months ago | South Korea AI Basic Act: AI Basic Act and Enforcement Decree take effectTech · Compliance deadlines · South Korea | South Korea | one-off | Regulations | 8 mo ago |
| Jan 1Thu8 months ago | Australia Cyber Security Act (ransomware reporting): Ransomware reporting moves to compliance phaseTech · Compliance deadlines · Australia | Australia | one-off | Regulations | 9 mo ago |
| 8 months ago | California Delete Act / DROP: DROP opens to consumersTech · Compliance deadlines · California | California | one-off | Regulations | 9 mo ago |
| 8 months ago | California SB 243 (companion chatbots): Chatbot safeguards applyTech · Compliance deadlines · California | California | one-off | Regulations | 9 mo ago |
| 8 months ago | California SB 53 (TFAIA): Frontier developer obligations applyTech · Compliance deadlines · California | California | one-off | Regulations | 9 mo ago |
| 8 months ago | CCPA / CPRA: New CCPA regulations take effectTech · Compliance deadlines · California | California | one-off | Regulations | 9 mo ago |
| 8 months ago | China Cybersecurity Law: 2025 amendments take effectTech · Compliance deadlines · China | China | one-off | Regulations | 9 mo ago |
| 8 months ago | Hong Kong Critical Infrastructure Cyber Ordinance: PCICSO comes into operationTech · Compliance deadlines · Hong Kong | Hong Kong | one-off | Regulations | 9 mo ago |
| 8 months ago | Illinois AI in Employment Law (HB 3773): AI anti-discrimination and notice duties applyTech · Compliance deadlines · Illinois | Illinois | one-off | Regulations | 9 mo ago |
| 8 months ago | Indiana Consumer Data Protection Act (ICDPA): ICDPA takes effectTech · Compliance deadlines · Indiana | Indiana | one-off | Regulations | 9 mo ago |
| 8 months ago | Kentucky Consumer Data Protection Act (KCDPA): KCDPA takes effectTech · Compliance deadlines · Kentucky | Kentucky | one-off | Regulations | 9 mo ago |
| 8 months ago | New Hampshire Privacy Act: Mandatory 60-day cure period expiresTech · Compliance deadlines · New Hampshire | New Hampshire | one-off | Regulations | 9 mo ago |
| 8 months ago | Oregon OCPA: Cure period sunsetsTech · Compliance deadlines · Oregon | Oregon | one-off | Regulations | 9 mo ago |
| 8 months ago | Oregon OCPA: Sale ban on precise geolocation and under-16 data (HB 2008)Tech · Compliance deadlines · Oregon | Oregon | one-off | Regulations | 9 mo ago |
| 8 months ago | Rhode Island RIDTPPA: RIDTPPA takes effectTech · Compliance deadlines · Rhode Island | Rhode Island | one-off | Regulations | 9 mo ago |
| 8 months ago | TRAIGA: TRAIGA takes effectTech · Compliance deadlines · Texas | Texas | one-off | Regulations | 9 mo ago |
| 8 months ago | Vietnam PDPL: PDPL and Decree 356/2025 take effectTech · Compliance deadlines · Vietnam | Vietnam | one-off | Regulations | 9 mo ago |
| 8 months ago | Virginia VCDPA: Under-16 social media time limit (SB 854) takes effectTech · Compliance deadlines · Virginia | Virginia | one-off | Regulations | 9 mo ago |
| 8 months ago | California AB 2013 (AI training data transparency): Training-data documentation dueTech · Compliance deadlines · California | California | one-off | Regulations | 9 mo ago |
| 8 months ago | California AI Transparency Act (SB 942): Original operative date (superseded)Tech · Compliance deadlines · California | California | one-off | Regulations | 9 mo ago |
| 8 months ago | Delaware Personal Data Privacy Act (DPDPA): Opt-out preference signals must be honoredTech · Compliance deadlines · Delaware | Delaware | one-off | Regulations | 9 mo ago |
| 8 months ago | GDPR: GDPR Procedural Regulation enters into forceTech · Compliance deadlines · European Union | European Union | one-off | Regulations | 9 mo ago |
| 8 months ago | Oregon OCPA: Universal opt-out signals must be honoredTech · Compliance deadlines · Oregon | Oregon | one-off | Regulations | 9 mo ago |