Compliance Deadlines Calendar 2026–2028

Every dated privacy, cybersecurity and AI obligation through 2028: EU AI Act, CRA, DORA, NIS2, state privacy laws, DPDP, and more, grouped by quarter.

Upcoming (19)

DateRegulationJurisdictionStatus
Chile Personal Data Protection Law (Law No. 21.719)ChileUpcoming
EU AI Act - Synthetic Media Transparency and New Prohibitions (2 Dec 2026)European UnionUpcoming
EU Product Liability Directive (Directive (EU) 2024/2853)European UnionUpcoming
Australia Children's Online Privacy CodeAustraliaUpcoming
eIDAS 2.0 and the EU Digital Identity WalletEuropean UnionUpcoming
Louisiana Data Privacy Act (HB 977)LouisianaUpcoming
Oklahoma Act Relating to Data Privacy (SB 546)OklahomaUpcoming
Vermont Data Privacy and Online Surveillance Act (Act 145)VermontUpcoming
California Digital Age Assurance Act (AB 1043)CaliforniaUpcoming
Colorado Automated Decision-Making Technology Act (SB 26-189)ColoradoUpcoming
New York Responsible AI Safety and Education (RAISE) ActNew YorkUpcoming
Washington Companion Chatbot Safeguards (HB 2225)WashingtonUpcoming
Oregon Companion Chatbot Disclosure Act (SB 1546)OregonUpcoming
EU Data Act - Cloud Switching Charges Abolished (12 Jan 2027)European UnionUpcoming
GDPR Procedural Regulation (Regulation (EU) 2025/2518)European UnionUpcoming
Alabama Personal Data Protection Act (HB 351)AlabamaUpcoming
EU AI Act - Annex III High-Risk System Requirements (2 Dec 2027)European UnionUpcoming
EU Cyber Resilience Act (CRA)European UnionPhased
EU AI Act - Annex I High-Risk Systems (2 Aug 2028)European UnionUpcoming

Already in effect (83)

DateRegulationJurisdictionStatus
Connecticut SB 4 (2026) Privacy AmendmentsConnecticutUpcoming
EU Cyber Resilience Act - Vulnerability and Incident Reporting (11 Sep 2026)European UnionActive
Netherlands NIS2 Transposition (Cyberbeveiligingswet)NetherlandsActive
EU Digital Omnibus on AI (Regulation (EU) 2026/1744)European UnionActive
Louisiana App Store Accountability Act (HB 570)LouisianaActive
Maryland HB 711 (2026) MODPA AmendmentsMarylandActive
New Jersey A 5328 - Sensitive Data Sale Ban and Data Broker RegistryNew JerseyActive
Colorado Artificial Intelligence Act (SB 24-205)ColoradoSuperseded
SEC Regulation S-P Amendments (Customer Data Incident Response)United StatesActive
TAKE IT DOWN ActUnited StatesActive
Utah App Store Accountability Act (SB 142)UtahPhased
COPPA Rule 2025 AmendmentsUnited StatesActive
Vietnam Law on Artificial IntelligenceVietnamActive
UK Data Use and Access Act (DUAA)United KingdomPhased
South Korea AI Basic Act (Framework Act on AI Development and Trust)South KoreaActive
Sweden NIS2 Transposition (Cybersäkerhetslagen)SwedenActive
Taiwan Artificial Intelligence Basic ActTaiwanActive
Australia Cyber Security Act 2024 (Ransomware Payment Reporting)AustraliaActive
Hong Kong Protection of Critical Infrastructures (Computer Systems) OrdinanceHong KongActive
Vietnam Law on Digital Technology IndustryVietnamActive
Vietnam Personal Data Protection Law (Law No. 91/2025/QH15)VietnamActive
China Cybersecurity Law (2025 Amendments)ChinaActive
California Transparency in Frontier Artificial Intelligence Act (SB 53)CaliforniaActive
Texas App Store Accountability Act (SB 2420)TexasActive
California CPPA Regulations - ADMT, Risk Assessments and Cybersecurity AuditsCaliforniaPhased
EU Adequacy Decision for BrazilEuropean UnionActive
Rhode Island Data Transparency and Privacy Protection ActRhode IslandActive
Indiana Consumer Data Protection Act (INCDPA)IndianaActive
Texas Responsible Artificial Intelligence Governance Act (TRAIGA, HB 149)TexasActive
Kentucky Consumer Data Protection Act (KCDPA)KentuckyActive
Executive Order 14365 - Ensuring a National Policy Framework for Artificial IntelligenceUnited StatesActive
Australia Online Safety Amendment (Social Media Minimum Age) Act 2024AustraliaActive
Cybersecurity Maturity Model CertificationUnited StatesPhased
Czech Republic NIS2 Transposition (Cybersecurity Act 2025)Czech RepublicActive
NYDFS Cybersecurity RegulationNew YorkActive
Maryland Online Data Privacy Act (MODPA)MarylandActive
EU Data ActEuropean UnionPhased
China Measures for Labeling AI-Generated ContentChinaActive
Japan AI Promotion Act (Act on Promotion of Research, Development and Utilization of AI-Related Technologies)JapanActive
EU AI Act - GPAI Model Obligations (2 Aug 2025) and Enforcement (2 Aug 2026)European UnionActive
Minnesota Consumer Data Privacy Act (HF 2309)MinnesotaActive
Estonia NIS2 Transposition (Cybersecurity Act amendments)EstoniaActive
Tennessee Information Protection Act (TIPA)TennesseeActive
Malaysia Personal Data Protection (Amendment) Act 2024MalaysiaActive
PCI DSS v4.0.1 (Payment Card Industry Data Security Standard)GlobalActive
Bulgaria NIS2 TranspositionBulgariaActive
EU AI Act - Prohibited Practices Phase 1European UnionActive
Digital Operational Resilience Act (DORA)European UnionActive
New Jersey Data Privacy Act (Senate Bill 332)New JerseyActive
Delaware Personal Data Privacy Act (DPDPA)DelawareActive
Iowa Consumer Data Protection Act (ICDPA)IowaActive
Nebraska Data Privacy Act (NDPA)NebraskaActive
New Hampshire Privacy Act (NHPA)New HampshireActive
Australia Privacy and Other Legislation Amendment Act 2024AustraliaActive
Greece NIS2 Transposition (Law 5160/2024)GreeceActive
Belgium NIS2 TranspositionBelgiumActive
Indonesia Personal Data Protection Law (UU PDP)IndonesiaActive
Italy NIS2 Transposition (Legislative Decree 138/2024)ItalyActive
Montana Consumer Data Privacy Act (MCDPA)MontanaActive
FTC Health Breach Notification Rule 2024 UpdateUnited StatesActive
Oregon Consumer Privacy Act (OCPA)OregonActive
Texas Data Privacy and Security Act (TDPSA)TexasActive
NIST Cybersecurity Framework 2.0Technical StandardsActive
Utah Consumer Privacy Act (UCPA)UtahActive
SEC Cybersecurity Disclosure RulesUnited StatesActive
ISO/IEC 42001 AI Management Systems StandardActive
EU Data Governance Act (DGA)European UnionActive
India Digital Personal Data Protection Act (DPDPA)IndiaPhased
Colorado Privacy Act (CPA)ColoradoActive
Connecticut Data Privacy Act (CTDPA)ConnecticutActive
NIST AI Risk Management Framework (AI RMF 1.0)United StatesActive
Virginia Consumer Data Protection Act (VCDPA)VirginiaActive
California Privacy Rights Act (CPRA)CaliforniaActive
NIST SP 800-218 Secure Software Development FrameworkUnited StatesActive
General Data Protection Law (LGPD)BrazilActive
California Consumer Privacy Act AI AmendmentsCaliforniaActive
CCPA Compliance for National CompaniesUnited StatesActive
California Consumer Privacy Act (CCPA)CaliforniaActive
GDPR Compliance for US CompaniesUnited StatesActive
UK GDPRUnited KingdomActive
GDPREuropean UnionActive
Personal Information Protection and Electronic Documents Act (PIPEDA)CanadaActive
HIPAA (Healthcare)United StatesActive