AI and data regulatory calendar

Publication, entry-into-force and application dates for the rules in the registry, soonest first. Each date links to the rule's page, its source and its verification status.

Upcoming dates

November 2026

November 20, 2026European UnionNational measures apply · CCD2 Adopted, applies later
November 20, 2026European UnionHuman intervention, explanation and challenge of automated scoring · CCD2 Adopted, applies later
November 30, 2026PeruAppoint a Personal Data Officer: Annual sales of 1,700 to 2,300 UIT: 2 years from publication · Law 29733 and SD 016-2024-JUS In force

December 2026

December 1, 2026ChileLaw 21,719 amendments apply (unless postponed) · Law 19,628 In force
December 1, 2026ChileLegal effective date · Law 21,719 Adopted, applies later
December 1, 2026ChilePublic data processing policy and legal bases · Law 21,719 Adopted, applies later
December 1, 2026ChileRights regarding automated decisions (art. 8 bis) · Law 21,719 Adopted, applies later
December 1, 2026ChileData protection impact assessment · Law 21,719 Adopted, applies later
December 1, 2026ChileContracts with processors · Law 21,719 Adopted, applies later
December 1, 2026ChileSecurity and breach reporting to the Agency · Law 21,719 Adopted, applies later
December 1, 2026ChileSpecific notice when using biometric data · Law 21,719 Adopted, applies later
December 1, 2026ChileHandle data subject rights · Law 21,719 Adopted, applies later
December 1, 2026ChileInternational data transfers · Law 21,719 Adopted, applies later
December 1, 2026ChileInfringement prevention program and data protection officer · Law 21,719 Regulator guidance
December 2, 2026European UnionNew prohibitions (intimate imagery, child abuse) and end of the technical-marking grace period · AI Act In force
December 2, 2026European UnionNew prohibition: non-consensual intimate imagery and child sexual abuse material · AI Act Adopted, applies later
December 2, 2026European UnionTransposition deadline · Platform Work Directive Adopted, applies later
December 2, 2026European UnionDisclose automated monitoring and decision systems · Platform Work Directive Adopted, applies later
December 2, 2026European UnionHuman oversight and review of algorithmic decisions · Platform Work Directive Adopted, applies later
December 2, 2026European UnionData processing limits and impact assessment · Platform Work Directive Adopted, applies later
December 9, 2026European UnionTransposition and application to new products · Product Liability Directive Adopted, applies later
December 9, 2026European UnionPrepare for claims over software or AI defects · Product Liability Directive Adopted, applies later
December 15, 2026MexicoEnd of the ordinary legislative session · AI bills (Mexico) Bill
December 28, 2026SpainEnd of adaptation period · Law 10/2025 In force
December 28, 2026SpainOffer human service whenever the customer asks · Law 10/2025 Adopted, applies later

January 2027

January 1, 2027CaliforniaADMT obligations for existing uses · CCPA ADMT and risk assessments In force
January 1, 2027CaliforniaPre-use notice for ADMT · CCPA ADMT and risk assessments Adopted, applies later
January 1, 2027CaliforniaOffer an ADMT opt-out or a human appeal · CCPA ADMT and risk assessments Adopted, applies later
January 1, 2027CaliforniaRespond to ADMT access requests · CCPA ADMT and risk assessments Adopted, applies later
January 1, 2027ColoradoObligations begin and deadline for Attorney General rules · Colorado SB 26-189 Adopted, applies later
January 1, 2027ColoradoClear consumer notice of ADMT use · Colorado SB 26-189 Adopted, applies later
January 1, 2027ColoradoExplanation within 30 days after an adverse decision · Colorado SB 26-189 Adopted, applies later
January 1, 2027ColoradoData correction and human review · Colorado SB 26-189 Adopted, applies later
January 1, 2027ColoradoDeveloper technical documentation for deployers · Colorado SB 26-189 Adopted, applies later
January 1, 2027ColoradoKeep compliance records for three years · Colorado SB 26-189 Adopted, applies later
January 1, 2027WashingtonEffective date · Washington HB 2225 Adopted, applies later
January 1, 2027WashingtonDisclose AI at the start and periodically · Washington HB 2225 Adopted, applies later
January 1, 2027WashingtonSelf-harm protocol and public reporting · Washington HB 2225 Adopted, applies later
January 1, 2027WashingtonEnhanced protections for minors · Washington HB 2225 Adopted, applies later
January 12, 2027European UnionEnd of switching charges · Data Act In force
January 28, 2027EcuadorEstimated end of the transition: 12 months from entry into force, counted from signature because the Official Register date is missing · SPDP Res. 2026-0004-R In force

March 2027

March 26, 2027European UnionGeneral application date and deadline for key implementing acts · EHDS Adopted, applies later

July 2027

July 1, 2027CaliforniaFirst annual report to the Office of Suicide Prevention · California SB 243 In force
July 1, 2027CaliforniaAnnual report to the Office of Suicide Prevention · California SB 243 Adopted, applies later
July 1, 2027NebraskaObligations begin · Nebraska LB 525 Adopted, applies later
July 1, 2027NebraskaDisclose that the user is talking to AI · Nebraska LB 525 Adopted, applies later
July 1, 2027NebraskaAdditional safeguards for minors · Nebraska LB 525 Adopted, applies later
July 1, 2027NebraskaProtocol for suicidal ideation or self-harm · Nebraska LB 525 Adopted, applies later
July 1, 2027UtahScheduled sunset · Utah AI Policy Act In force
July 31, 2027ColombiaEnd of 12-month period for providers with telemedicine already enabled · MinSalud Res. 1644/2026 In force

August 2027

August 2, 2027European UnionDeadline for general-purpose models placed on the market before Aug 2025 · AI Act In force

September 2027

September 10, 2027PeruDeadline: transport, commerce, labor and small businesses · Law 31814 and SD 115-2025-PCM In force
September 10, 2027PeruKeep a record for each high-risk AI system: Small business (annual sales above 150 and up to 1,700 UIT): 2-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2027PeruKeep a record for each high-risk AI system: Commerce, transport and labor: 2-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2027PeruKeep a record for each high-risk AI system: Employment uses (hiring, evaluation or staff management): 2-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2027PeruAdopt an internal AI policy: Small business (annual sales above 150 and up to 1,700 UIT): 2-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2027PeruAdopt an internal AI policy: Commerce, transport and labor: 2-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2027PeruAdopt an internal AI policy: Employment uses (hiring, evaluation or staff management): 2-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2027PeruTrain staff on AI risks and responsible use: Small business (annual sales above 150 and up to 1,700 UIT): 2-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2027PeruTrain staff on AI risks and responsible use: Commerce, transport and labor: 2-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2027PeruTrain staff on AI risks and responsible use: Employment uses (hiring, evaluation or staff management): 2-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2027PeruTell people before using high-risk AI: Small business (annual sales above 150 and up to 1,700 UIT): 2-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2027PeruTell people before using high-risk AI: Commerce, transport and labor: 2-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2027PeruTell people before using high-risk AI: Employment uses (hiring, evaluation or staff management): 2-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2027PeruExplain AI decisions that affect people's rights: Small business (annual sales above 150 and up to 1,700 UIT): 2-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2027PeruExplain AI decisions that affect people's rights: Commerce, transport and labor: 2-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2027PeruExplain AI decisions that affect people's rights: Employment uses (hiring, evaluation or staff management): 2-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2027PeruEnsure human oversight that can stop or correct the AI: Small businesses; transport, commerce and labor · Law 31814 and SD 115-2025-PCM In force

October 2027

October 15, 2027ChileNew date if the postponement is enacted · Law 21,719 Adopted, applies later
October 22, 2027PeruAI Officer profile becomes enforceable (12 months later) · Peru AI Strategy 2026-2030 In force

November 2027

November 30, 2027PeruAppoint a Personal Data Officer: Annual sales of 150 to 1,700 UIT: 3 years from publication · Law 29733 and SD 016-2024-JUS In force

December 2027

December 2, 2027European UnionAnnex III high-risk (employment, credit, education, biometrics…) · AI Act In force
December 2, 2027European UnionUsing high-risk systems: human oversight, logs and monitoring · AI Act Adopted, applies later
December 2, 2027European UnionUsing high-risk systems: human oversight, logs and monitoring: Annex III high-risk systems · AI Act Adopted, applies later
December 2, 2027European UnionInform workers and their representatives before using high-risk AI at work · AI Act Adopted, applies later
December 2, 2027European UnionInform and explain to people affected by high-risk decisions · AI Act Adopted, applies later
December 2, 2027European UnionFundamental rights impact assessment (FRIA) · AI Act Adopted, applies later
December 2, 2027European UnionProviders of Annex III high-risk systems · AI Act Adopted, applies later
December 11, 2027European UnionFull application · CRA In force
December 11, 2027European UnionEssential product cybersecurity requirements · CRA Adopted, applies later
December 31, 2027CaliforniaRisk assessments for processing that began before 2026 · CCPA ADMT and risk assessments In force

April 2028

April 1, 2028CaliforniaSubmission of 2026-2027 assessments to the agency with signed attestation · CCPA ADMT and risk assessments In force
April 1, 2028CaliforniaSubmit assessment information to the agency with a signed attestation · CCPA ADMT and risk assessments Adopted, applies later

August 2028

August 2, 2028European UnionAnnex I high-risk (regulated products) · AI Act In force
August 2, 2028European UnionUsing high-risk systems: human oversight, logs and monitoring: Clinical AI that is a high-risk medical device (Annex I) · AI Act Adopted, applies later
August 2, 2028European UnionAI in regulated products (Annex I): medical devices, machinery, toys, vehicles · AI Act Adopted, applies later

September 2028

September 10, 2028PeruDeadline: production, agriculture, energy, mining and microbusinesses · Law 31814 and SD 115-2025-PCM In force
September 10, 2028PeruKeep a record for each high-risk AI system: Microbusiness (annual sales up to 150 UIT): 3-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2028PeruKeep a record for each high-risk AI system: Production, agriculture, energy and mining: 3-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2028PeruAdopt an internal AI policy: Microbusiness (annual sales up to 150 UIT): 3-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2028PeruAdopt an internal AI policy: Production, agriculture, energy and mining: 3-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2028PeruTrain staff on AI risks and responsible use: Microbusiness (annual sales up to 150 UIT): 3-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2028PeruTrain staff on AI risks and responsible use: Production, agriculture, energy and mining: 3-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2028PeruTell people before using high-risk AI: Microbusiness (annual sales up to 150 UIT): 3-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2028PeruTell people before using high-risk AI: Production, agriculture, energy and mining: 3-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2028PeruExplain AI decisions that affect people's rights: Microbusiness (annual sales up to 150 UIT): 3-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2028PeruExplain AI decisions that affect people's rights: Production, agriculture, energy and mining: 3-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2028PeruEnsure human oversight that can stop or correct the AI: Microbusinesses; production, agriculture, energy and mining · Law 31814 and SD 115-2025-PCM In force

November 2028

November 30, 2028PeruAppoint a Personal Data Officer: Annual sales up to 150 UIT: 4 years from publication · Law 29733 and SD 016-2024-JUS In force

January 2029

January 1, 2029EcuadorProfessional program becomes a requirement · SPDP Res. 2025-0028-R In force

March 2029

March 26, 2029European UnionSecondary use and exchange of first data categories begin · EHDS Adopted, applies later
March 26, 2029European UnionPrepare health data for secondary use and EHR systems · EHDS Adopted, applies later

September 2029

September 10, 2029PeruDeadline: all other sectors and uses · Law 31814 and SD 115-2025-PCM In force
September 10, 2029PeruKeep a record for each high-risk AI system: All other sectors and uses: 4-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2029PeruAdopt an internal AI policy: All other sectors and uses: 4-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2029PeruTrain staff on AI risks and responsible use: All other sectors and uses: 4-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2029PeruTell people before using high-risk AI: All other sectors and uses: 4-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2029PeruExplain AI decisions that affect people's rights: All other sectors and uses: 4-year deadline · Law 31814 and SD 115-2025-PCM In force
September 10, 2029PeruEnsure human oversight that can stop or correct the AI: All other sectors · Law 31814 and SD 115-2025-PCM In force

January 2030

January 1, 2030ColoradoMandatory cure period ends · Colorado SB 26-189 Adopted, applies later

August 2030

August 2, 2030European UnionDeadline for high-risk systems already used by public authorities · AI Act In force

March 2031

March 26, 2031European UnionSecond wave of data categories (imaging, lab results, discharge reports) · EHDS Adopted, applies later

Past dates

Show past dates (282)

October 28, 2026ChileSenate approves postponement (Bill 18.623-07); goes to the Chamber · Law 21,719 Adopted, applies later
October 22, 2026PeruAI Officer Directive takes effect · Peru AI Strategy 2026-2030 In force
October 20, 2026United States (federal)Check whether what you sell to federal civilian agencies includes DeepSeek · DHS FASCSA order on DeepSeek In force
October 20, 2026United States (federal)Order notice published in the Federal Register · DHS FASCSA order on DeepSeek In force
October 6, 2026SpainLapses on dissolution of Parliament · Spanish AI bill (lapsed) Lapsed or superseded
October 5, 2026SpainIndividual written notice on algorithmic systems · Royal Decree 723/2026 In force
October 5, 2026SpainEntry into force · Royal Decree 723/2026 In force
September 23, 2026SpainWarning published · AEPD CV-screening warning Regulator guidance
September 15, 2026SpainPublished in the BOE · Royal Decree 723/2026 In force
September 15, 2026EcuadorArchived by the full Assembly · Archived AI bill Lapsed or superseded
September 14, 2026EcuadorGet information about the AI system from the vendor · SPDP AI rule In force
September 14, 2026EcuadorAI vendor duties toward its client · SPDP AI rule In force
September 14, 2026EcuadorFirst public report of the amendment (Official Register date still missing) · SPDP AI rule In force
September 12, 2026European UnionData access by design (Article 3(1)) for new products · Data Act In force
September 11, 2026European UnionReport exploited vulnerabilities and severe incidents within 24/72 hours · CRA In force
September 11, 2026European UnionReporting obligations · CRA In force
September 10, 2026PeruObligations for public bodies that use AI · Law 31814 and SD 115-2025-PCM In force
September 10, 2026PeruEnsure human oversight that can stop or correct the AI: Healthcare, education, justice, security, economy and finance · Law 31814 and SD 115-2025-PCM In force
September 10, 2026PeruEnsure human oversight that can stop or correct the AI · Law 31814 and SD 115-2025-PCM In force
September 10, 2026PeruExplain AI decisions that affect people's rights: Healthcare, education or finance uses in any company: 1-year deadline (passed on Sep 10, 2026) · Law 31814 and SD 115-2025-PCM In force
September 10, 2026PeruExplain AI decisions that affect people's rights: Healthcare, education, justice, security, economy and finance: 1-year deadline (passed on Sep 10, 2026) · Law 31814 and SD 115-2025-PCM In force
September 10, 2026PeruExplain AI decisions that affect people's rights · Law 31814 and SD 115-2025-PCM In force
September 10, 2026PeruTell people before using high-risk AI: Healthcare, education or finance uses in any company: 1-year deadline (passed on Sep 10, 2026) · Law 31814 and SD 115-2025-PCM In force
September 10, 2026PeruTell people before using high-risk AI: Healthcare, education, justice, security, economy and finance: 1-year deadline (passed on Sep 10, 2026) · Law 31814 and SD 115-2025-PCM In force
September 10, 2026PeruTell people before using high-risk AI · Law 31814 and SD 115-2025-PCM In force
September 10, 2026PeruTrain staff on AI risks and responsible use: Healthcare, education or finance uses in any company: 1-year deadline (passed on Sep 10, 2026) · Law 31814 and SD 115-2025-PCM In force
September 10, 2026PeruTrain staff on AI risks and responsible use: Healthcare, education, justice, security, economy and finance: 1-year deadline (passed on Sep 10, 2026) · Law 31814 and SD 115-2025-PCM In force
September 10, 2026PeruTrain staff on AI risks and responsible use · Law 31814 and SD 115-2025-PCM In force
September 10, 2026PeruAdopt an internal AI policy: Healthcare, education or finance uses in any company: 1-year deadline (passed on Sep 10, 2026) · Law 31814 and SD 115-2025-PCM In force
September 10, 2026PeruAdopt an internal AI policy: Healthcare, education, justice, security, economy and finance: 1-year deadline (passed on Sep 10, 2026) · Law 31814 and SD 115-2025-PCM In force
September 10, 2026PeruAdopt an internal AI policy · Law 31814 and SD 115-2025-PCM In force
September 10, 2026PeruKeep a record for each high-risk AI system: Healthcare, education or finance uses in any company: 1-year deadline (passed on Sep 10, 2026) · Law 31814 and SD 115-2025-PCM In force
September 10, 2026PeruKeep a record for each high-risk AI system: Healthcare, education, justice, security, economy and finance: 1-year deadline (passed on Sep 10, 2026) · Law 31814 and SD 115-2025-PCM In force
September 10, 2026PeruKeep a record for each high-risk AI system · Law 31814 and SD 115-2025-PCM In force
September 10, 2026PeruDeadline passed: healthcare, education, justice, security, economy and finance · Law 31814 and SD 115-2025-PCM In force
September 9, 2026EcuadorAmendment SPDP-SPD-2026-0037-R signed · SPDP AI rule In force
September 7, 2026ColombiaPublished in the Official Gazette · MinSalud Res. 1644/2026 In force
September 1, 2026EcuadorBill filed · Pending AI bill Bill
September 1, 2026ChileLatest urgency renewal cited · AI bill (Bulletin 16821-19) Bill
August 26, 2026BrazilClinical use rules: physician decision, patient notice and records · CFM Res. 2,454/2026 In force
August 26, 2026BrazilAI and Telemedicine Commission · CFM Res. 2,454/2026 In force
August 26, 2026BrazilPreliminary risk assessment and classification, with continuous monitoring · CFM Res. 2,454/2026 In force
August 26, 2026BrazilTakes effect · CFM Res. 2,454/2026 In force
August 24, 2026BrazilRapporteur announces a vote after the elections · PL 2338/2023 Bill
August 17, 2026MexicoNew art. 73 amendment bill in the Parliamentary Gazette · AI bills (Mexico) Bill
August 2, 2026European UnionDeployer transparency: deepfakes, public-interest text and emotion recognition · AI Act In force
August 2, 2026European UnionProvider transparency: disclose AI interaction and mark synthetic content · AI Act In force
August 2, 2026European UnionGeneral application: Article 50 transparency, supervision and penalties · AI Act In force
July 31, 2026ColombiaTechnical and clinical validation, and INVIMA registration if it is a medical device · MinSalud Res. 1644/2026 In force
July 31, 2026ColombiaTraceability and audit of AI outputs · MinSalud Res. 1644/2026 In force
July 31, 2026ColombiaAI does not replace clinical judgment · MinSalud Res. 1644/2026 In force
July 31, 2026ColombiaTell patients before using AI in telemedicine · MinSalud Res. 1644/2026 In force
July 31, 2026ColombiaIssued and in force · MinSalud Res. 1644/2026 In force
July 28, 2026ColombiaDo not use AI to impersonate people · Law 2502 of 2025 In force
July 28, 2026ColombiaCriminal aggravating factor takes effect · Law 2502 of 2025 In force
July 27, 2026European UnionDigital Omnibus (Reg. 2026/1744) enters into force · AI Act In force
July 24, 2026MexicoFederal Law bill filed in the Chamber of Deputies · AI bills (Mexico) Bill
July 22, 2026ChileApproved in general by the Chamber (128-2-5) · Deepfakes bill (17795-19) Bill
July 21, 2026United States (federal)CFPB rule removing disparate impact under ECOA takes effect · ECOA / Reg B In force
July 21, 2026ColombiaFiled · House Bill 025/2026 Bill
July 20, 2026European UnionCommission guidelines on Article 50 · AI transparency code Regulator guidance
July 16, 2026ArgentinaFiled in the Chamber of Deputies · Bill 3397-D-2026 Bill
July 14, 2026Mexico60-day deadline to update the LFDA regulation · LFT/LFDA voice and likeness reform In force
July 8, 2026European UnionCommission finds the Code adequate · AI transparency code Regulator guidance
June 23, 2026European UnionPublic consultation closes · High-risk guidelines (Art. 6) Regulator guidance
June 18, 2026ArgentinaBill 2912-D-2026 filed (AI in the public sector) · AI bills (Argentina) Bill
June 12, 2026SpainPublished in the Parliamentary Gazette · Spanish AI bill (lapsed) Lapsed or superseded
June 10, 2026European UnionFinal Code published · AI transparency code Regulator guidance
June 2, 2026IllinoisIDHR withdraws its proposed notice rules · Illinois HB 3773 In force
May 31, 2026PeruFinancial system: highest-risk operational and AML/CFT models (last phase) · SBS Res. 053-2023 In force
May 26, 2026SpainApproved by the Council of Ministers · Spanish AI bill (lapsed) Lapsed or superseded
May 19, 2026European UnionDraft published · High-risk guidelines (Art. 6) Regulator guidance
May 15, 2026MexicoAI clause in contracts with performers · LFT/LFDA voice and likeness reform In force
May 15, 2026MexicoExpress consent to use a person's voice or likeness with AI · LFT/LFDA voice and likeness reform In force
May 15, 2026MexicoTakes effect · LFT/LFDA voice and likeness reform In force
May 15, 2026International standardsEU ratification (first Party) · Council of Europe Framework Convention Bill
May 14, 2026ColoradoSigned · Colorado SB 26-189 Adopted, applies later
May 14, 2026ColoradoReplaced by SB 26-189 · Colorado SB 24-205 Lapsed or superseded
May 14, 2026MexicoPublished in the DOF · LFT/LFDA voice and likeness reform In force
May 2, 2026PeruPrepare the documentation public bodies will ask for · Peru AI Strategy 2026-2030 Regulator guidance
May 2, 2026PeruAI plan, AI Officer and system register in public bodies · Peru AI Strategy 2026-2030 In force
May 2, 2026PeruStrategy takes effect · Peru AI Strategy 2026-2030 In force
April 27, 2026ColoradoCourt blocks enforcement (per secondary sources) · Colorado SB 24-205 Lapsed or superseded
April 22, 2026United States (federal)CFPB publishes disparate-impact rule (91 FR 21620) · ECOA / Reg B In force
April 22, 2026United States (federal)Written information security program · COPPA Rule 2025 In force
April 22, 2026United States (federal)Written data retention policy for children's data · COPPA Rule 2025 In force
April 22, 2026United States (federal)Separate parental consent to share children's data · COPPA Rule 2025 In force
April 22, 2026United States (federal)General compliance date · COPPA Rule 2025 In force
April 14, 2026NebraskaSigned · Nebraska LB 525 Adopted, applies later
April 7, 2026International standardsConcept note for a critical infrastructure profile · NIST AI RMF Voluntary standard
March 24, 2026WashingtonSigned · Washington HB 2225 Adopted, applies later
March 20, 2026United States (federal)White House publishes legislative recommendations · Executive order on state AI laws Regulator guidance
March 10, 2026EcuadorDelete or anonymize data once the purpose is fulfilled · SPDP AI rule In force
March 10, 2026EcuadorAudit AI systems according to their risk level · SPDP AI rule In force
March 10, 2026EcuadorApply security measures to AI systems · SPDP AI rule In force
March 10, 2026EcuadorInclude AI processing in the record of processing activities · SPDP AI rule In force
March 10, 2026EcuadorAI impact assessment when the risk calls for it · SPDP AI rule In force
March 10, 2026EcuadorManage risks before developing or deploying AI · SPDP AI rule In force
March 10, 2026EcuadorTell people their data is processed with AI · SPDP AI rule In force
March 10, 2026EcuadorPublication in the Official Register and entry into force · SPDP AI rule In force
February 27, 2026BrazilPublished in the DOU · CFM Res. 2,454/2026 In force
February 5, 2026ChileLaw 21,806 brings forward the appointment of the Agency's board · Law 21,719 Adopted, applies later
February 3, 2026MexicoArt. 73 amendment bill filed in the Senate (per one source) · AI bills (Mexico) Bill
January 28, 2026EcuadorDocument and register international transfers · SPDP Res. 2026-0004-R In force
January 28, 2026EcuadorRule signed · SPDP Res. 2026-0004-R In force
January 26, 2026BrazilEU recognized as adequate (Res. 32/2026) · ANPD Res. 19/2024 (transfers) In force
January 22, 2026PeruVoluntary impact assessment for high-risk AI · Law 31814 and SD 115-2025-PCM Regulator guidance
January 22, 2026PeruCheck each AI use against the risk categories · Law 31814 and SD 115-2025-PCM In force
January 22, 2026PeruDo not use AI for prohibited purposes · Law 31814 and SD 115-2025-PCM In force
January 22, 2026PeruRegulation takes general effect (date per secondary sources) · Law 31814 and SD 115-2025-PCM In force
January 19, 2026EcuadorAlign the AI policy with the national principles · EFIA-EC Regulator guidance
January 19, 2026EcuadorPublished in the Official Register · EFIA-EC Regulator guidance
January 1, 2026TexasAI-interaction disclosure by public agencies · Texas TRAIGA In force
January 1, 2026TexasAI-use disclosure in health care services · Texas TRAIGA In force
January 1, 2026TexasConsent to capture biometric identifiers · Texas TRAIGA In force
January 1, 2026TexasDo not develop or deploy AI for prohibited purposes · Texas TRAIGA In force
January 1, 2026TexasEffective date · Texas TRAIGA In force
January 1, 2026IllinoisGive notice of AI use in employment decisions · Illinois HB 3773 In force
January 1, 2026IllinoisDo not use AI with discriminatory effect or ZIP codes as a proxy · Illinois HB 3773 In force
January 1, 2026IllinoisEffective date · Illinois HB 3773 In force
January 1, 2026CaliforniaSafeguards for minor users · California SB 243 In force
January 1, 2026CaliforniaProtocol for suicidal ideation and self-harm · California SB 243 In force
January 1, 2026CaliforniaDisclose that the chatbot is AI · California SB 243 In force
January 1, 2026CaliforniaEffective date · California SB 243 In force
January 1, 2026CaliforniaRisk assessment before using ADMT or other high-risk processing · CCPA ADMT and risk assessments In force
January 1, 2026CaliforniaEffective; risk assessments for new processing · CCPA ADMT and risk assessments In force
January 1, 2026PeruInsurers: credit, market and liquidity risk models · SBS Res. 053-2023 In force
December 31, 2025EcuadorAppoint and register a data protection officer · SPDP Res. 2025-0028-R In force
December 31, 2025EcuadorPrivate-sector registration deadline · SPDP Res. 2025-0028-R In force
December 28, 2025SpainEntry into force · Law 10/2025 In force
December 22, 2025United States (federal)FTC sets aside its Rytr order · FTC Act §5 In force
December 22, 2025EcuadorAgreement signed · EFIA-EC Regulator guidance
December 11, 2025United States (federal)Executive order signed · Executive order on state AI laws Regulator guidance
December 2, 2025New York (incl. NYC)State Comptroller audit of enforcement · NYC Local Law 144 In force
November 30, 2025PeruInsurers: operational and AML/CFT risk models · SBS Res. 053-2023 In force
November 30, 2025PeruAppoint a Personal Data Officer: Annual sales above 2,300 UIT: 1 year from publication · Law 29733 and SD 016-2024-JUS In force
November 30, 2025PeruData Officer: deadline for companies with sales above 2,300 UIT · Law 29733 and SD 016-2024-JUS In force
November 20, 2025European UnionTransposition deadline · CCD2 Adopted, applies later
November 7, 2025EcuadorDocument the balancing test when relying on legitimate interest · SPDP Res. 2025-0041-R In force
November 7, 2025EcuadorSigned and in force · SPDP Res. 2025-0041-R In force
November 5, 2025New York (incl. NYC)Notify that it is not a person at the start and periodically · New York AI companions In force
November 5, 2025New York (incl. NYC)Protocol for suicidal ideation or self-harm · New York AI companions In force
November 5, 2025New York (incl. NYC)Effective date · New York AI companions In force
October 30, 2025EcuadorAlgorithm governance, monitoring and explainability in fintech · SB-2025-02323 In force
October 30, 2025EcuadorPublished in Official Register No. 155 · SB-2025-02323 In force
October 13, 2025CaliforniaSigned · California SB 243 In force
October 13, 2025ChilePassed by the Chamber; sent to the Senate · AI bill (Bulletin 16821-19) Bill
October 1, 2025CaliforniaOversee hiring-tool vendors · FEHA automated-decision systems In force
October 1, 2025CaliforniaKeep automated-decision system data for four years · FEHA automated-decision systems In force
October 1, 2025CaliforniaDo not use discriminatory automated-decision systems (anti-bias testing supports a defense) · FEHA automated-decision systems In force
October 1, 2025CaliforniaEffective date · FEHA automated-decision systems In force
September 25, 2025EcuadorIssued · SB-2025-02323 In force
September 22, 2025CaliforniaApproved by the Office of Administrative Law · CCPA ADMT and risk assessments In force
September 12, 2025European UnionProvide access to connected-product data · Data Act In force
September 12, 2025European UnionLet customers switch cloud or AI providers · Data Act In force
September 12, 2025European UnionApplication date · Data Act In force
September 9, 2025PeruRegulation published (SD 115-2025-PCM) · Law 31814 and SD 115-2025-PCM In force
August 23, 2025BrazilDeadline to adopt standard clauses · ANPD Res. 19/2024 (transfers) In force
August 6, 2025European UnionPublished · EIOPA AI Opinion Regulator guidance
August 2, 2025European UnionObligations for general-purpose AI model providers · AI Act In force
August 2, 2025European UnionGeneral-purpose AI model obligations · AI Act In force
July 28, 2025ColombiaLaw enacted · Law 2502 of 2025 In force
June 27, 2025CaliforniaApproved by the Office of Administrative Law · FEHA automated-decision systems In force
June 25, 2025ColombiaPeriodically assess the impact of automated decisions on work · Law 2466 of 2025 In force
June 25, 2025ColombiaExplain to couriers how the algorithms work · Law 2466 of 2025 In force
June 25, 2025ColombiaEnacted and published · Law 2466 of 2025 In force
June 23, 2025United States (federal)Effective date · COPPA Rule 2025 In force
June 22, 2025TexasSigned · Texas TRAIGA In force
June 22, 2025MexicoSecurity and rights over worker data · LFT Ch. IX Bis (platforms) In force
June 22, 2025MexicoHuman review of account blocks and deactivations · LFT Ch. IX Bis (platforms) In force
June 22, 2025MexicoAlgorithmic work management policy · LFT Ch. IX Bis (platforms) In force
June 22, 2025MexicoEnforceable (180 calendar days) · LFT Ch. IX Bis (platforms) In force
June 19, 2025European UnionMDCG 2025-6 guidance on MDR/IVDR and the AI Act · MDR/IVDR In force
May 20, 2025EcuadorTraceability and logging of automated operations · JPRF-F-2025-0155 In force
May 20, 2025EcuadorAppoint an algorithm officer accredited with the Superintendency of Banks · JPRF-F-2025-0155 In force
May 20, 2025EcuadorIssued and in force · JPRF-F-2025-0155 In force
May 12, 2025United States (federal)CFPB withdraws Circulars 2022-03 and 2023-03 · ECOA / Reg B In force
May 9, 2025New York (incl. NYC)Budget bill signed · New York AI companions In force
May 7, 2025UtahEffective date · Utah HB 452 In force
May 7, 2025Utah2025 amendments take effect · Utah AI Policy Act In force
April 29, 2025EcuadorUse a data risk management methodology · SPDP Res. 2025-0003-R In force
April 29, 2025EcuadorIn force from signing · SPDP Res. 2025-0003-R In force
April 22, 2025United States (federal)Amended rule published · COPPA Rule 2025 In force
April 16, 2025ColombiaTell consumers when they are interacting with AI · SIC 2025 opinion on AI and consumers Regulator guidance
April 16, 2025ColombiaOpinion date · SIC 2025 opinion on AI and consumers Regulator guidance
March 30, 2025PeruRegister databases and document security · Law 29733 and SD 016-2024-JUS In force
March 30, 2025PeruReport serious data breaches within 48 hours · Law 29733 and SD 016-2024-JUS In force
March 30, 2025PeruReport and register transfers of data abroad · Law 29733 and SD 016-2024-JUS In force
March 30, 2025PeruAppoint a Personal Data Officer: Public bodies: from the regulation's effective date · Law 29733 and SD 016-2024-JUS In force
March 30, 2025PeruAppoint a Personal Data Officer · Law 29733 and SD 016-2024-JUS In force
March 30, 2025PeruDisclose automated decisions and allow them to be reviewed · Law 29733 and SD 016-2024-JUS In force
March 30, 2025PeruRegulation takes effect (120 calendar days after publication) · Law 29733 and SD 016-2024-JUS In force
March 26, 2025European UnionEntry into force · EHDS Adopted, applies later
March 21, 2025MexicoHandle access, correction, deletion and objection (ARCO) requests · LFPDPPP 2025 In force
March 21, 2025MexicoSecurity measures and breach notices · LFPDPPP 2025 In force
March 21, 2025MexicoData transfers to third parties and other countries · LFPDPPP 2025 In force
March 21, 2025MexicoContracts with processors, including AI vendors · LFPDPPP 2025 In force
March 21, 2025MexicoFresh consent to use data in AI for new purposes · LFPDPPP 2025 In force
March 21, 2025MexicoPrivacy notice that covers AI uses · LFPDPPP 2025 In force
March 21, 2025MexicoTakes effect; INAI ceases to exist · LFPDPPP 2025 In force
March 20, 2025MexicoPublished in the Official Gazette (DOF) · LFPDPPP 2025 In force
March 17, 2025BrazilReceived by the Chamber of Deputies · PL 2338/2023 Bill
March 1, 2025ChileSecurity management system for operators of vital importance · Law 21,663 (cybersecurity) In force
March 1, 2025ChileIncident reporting to the National CSIRT · Law 21,663 (cybersecurity) In force
March 1, 2025ChileIncident reporting becomes enforceable · Law 21,663 (cybersecurity) In force
February 14, 2025ColombiaAI documentation in the public sector (national policy) · CONPES 4144 Regulator guidance
February 14, 2025ColombiaApproved · CONPES 4144 Regulator guidance
February 10, 2025New York (incl. NYC)Do not download DeepSeek on New York government devices and networks · New York: DeepSeek on state devices In force
February 10, 2025New York (incl. NYC)Ban announced · New York: DeepSeek on state devices In force
February 2, 2025European UnionProhibitions on biometrics and emotion recognition · AI Act In force
February 2, 2025European UnionAvoid prohibited AI practices · AI Act In force
February 2, 2025European UnionAI literacy for staff · AI Act In force
February 2, 2025European UnionProhibitions and AI literacy · AI Act In force
January 31, 2025TexasDo not use DeepSeek on Texas state devices · Texas: DeepSeek on state devices In force
January 31, 2025TexasBan announced · Texas: DeepSeek on state devices In force
January 27, 2025United States (federal)EEOC withdraws its AI technical assistance · Title VII and ADA In force
January 17, 2025European UnionICT risk and incident management covering AI systems · DORA In force
January 17, 2025European UnionRegister and contracts for AI vendors as ICT services · DORA In force
January 17, 2025European UnionApplication date · DORA In force
January 1, 2025ChileANCI begins operating · Law 21,663 (cybersecurity) In force
December 24, 2024MexicoPublished in the DOF · LFT Ch. IX Bis (platforms) In force
December 13, 2024ChilePublished in the Official Gazette · Law 21,719 Adopted, applies later
December 10, 2024BrazilPassed by the Senate · PL 2338/2023 Bill
November 30, 2024PeruNew regulation published · Law 29733 and SD 016-2024-JUS In force
September 25, 2024United States (federal)Operation AI Comply launched · FTC Act §5 In force
September 5, 2024International standardsOpened for signature · Council of Europe Framework Convention Bill
August 23, 2024BrazilPublished · ANPD Res. 19/2024 (transfers) In force
August 21, 2024ColombiaData quality and privacy when training models · SIC Circular 002/2024 Regulator guidance
August 21, 2024ColombiaShow the AI use is suitable, necessary and proportionate · SIC Circular 002/2024 Regulator guidance
August 21, 2024ColombiaPrivacy impact study before designing high-risk AI · SIC Circular 002/2024 Regulator guidance
August 21, 2024ColombiaCircular issued · SIC Circular 002/2024 Regulator guidance
August 9, 2024IllinoisSigned · Illinois HB 3773 In force
August 2, 2024IllinoisAmendment limiting accrual of damages · Illinois BIPA In force
August 1, 2024European UnionEntry into force · AI Act In force
July 26, 2024International standardsPublication · NIST AI 600-1 Voluntary standard
July 16, 2024BrazilAdopted · ANPD Res. 18/2024 (DPO) In force
June 1, 2024ArgentinaAAIP Res. 126/2024 sanctions regime takes effect · Law 25,326 In force
May 17, 2024ColoradoSigned · Colorado SB 24-205 Lapsed or superseded
May 7, 2024ChileFiled in the Chamber · AI bill (Bulletin 16821-19) Bill
May 3, 2024International standardsPrinciples updated · OECD AI Principles Voluntary standard
May 1, 2024UtahOriginal act takes effect · Utah AI Policy Act In force
April 24, 2024BrazilAdopted · ANPD Res. 15/2024 (incidents) In force
April 8, 2024ChilePublished in the Official Gazette · Law 21,663 (cybersecurity) In force
December 19, 2023United States (federal)Rite Aid facial recognition order · FTC Act §5 In force
December 5, 2023MexicoTakes effect · NOM-037 telework In force
November 13, 2023EcuadorRegulation published · LOPDP In force
November 8, 2023International standardsRevised definition of AI system · OECD AI Principles Voluntary standard
August 28, 2023International standardsEthical Impact Assessment (EIA) tool published · UNESCO Recommendation Voluntary standard
July 5, 2023New York (incl. NYC)DCWP enforcement begins · NYC Local Law 144 In force
July 5, 2023PeruLaw 31814 published · Law 31814 and SD 115-2025-PCM In force
June 8, 2023MexicoPublished in the DOF · NOM-037 telework In force
June 2, 2023ArgentinaPublished in the Official Bulletin · Provision 2/2023 (trustworthy AI) Regulator guidance
May 26, 2023EcuadorPenalties become enforceable · LOPDP In force
May 3, 2023BrazilIntroduced in the Senate · PL 2338/2023 Bill
January 26, 2023International standardsAI RMF 1.0 published · NIST AI RMF Voluntary standard
January 12, 2023PeruEntry into force · SBS Res. 053-2023 In force
November 5, 2022PeruPublished and in force · Law 31601 In force
September 1, 2022ChileTakes effect · Law 21,431 (platforms) In force
July 14, 2022SpainEntry into force · Law 15/2022, Art. 23 In force
July 1, 2022BrazilTakes effect · ANVISA RDC 657/2022 (SaMD) In force
June 10, 2022SpainMinistry of Labor guide on algorithmic information · Workers' Statute Art. 64.4.d (Rider Law) In force
May 26, 2022European UnionIVDR applies · MDR/IVDR In force
March 30, 2022BrazilPublished in the DOU · ANVISA RDC 657/2022 (SaMD) In force
March 11, 2022ChilePublished in the Official Gazette · Law 21,431 (platforms) In force
November 23, 2021International standardsAdoption · UNESCO Recommendation Voluntary standard
August 12, 2021SpainLetter d) enters into force · Workers' Statute Art. 64.4.d (Rider Law) In force
August 1, 2021BrazilAdministrative sanctions apply · LGPD In force
June 30, 2021European UnionApplication date · EBA loan origination guidelines Regulator guidance
May 26, 2021European UnionMDR applies · MDR/IVDR In force
May 26, 2021EcuadorLaw published · LOPDP In force
September 18, 2020BrazilTakes effect · LGPD In force
January 1, 2020IllinoisEffective date · Illinois AIVIA In force
May 22, 2019International standardsAdoption · OECD AI Principles Voluntary standard
January 16, 2019ArgentinaPublished in the Official Bulletin · AAIP Res. 4/2019 In force
December 7, 2018SpainEntry into force · LOPDGDD In force
August 15, 2018BrazilPublished in the Official Gazette (DOU) · LGPD In force
May 25, 2018European UnionApplication date · GDPR In force
June 27, 2013ColombiaDecree 1377 issued · Law 1581 of 2012 In force
October 17, 2012ColombiaLaw enacted · Law 1581 of 2012 In force
October 3, 2008IllinoisEffective date · Illinois BIPA In force
November 2, 2000ArgentinaPublished in the Official Bulletin · Law 25,326 In force
August 28, 1999ChilePublished · Law 19,628 In force

Upcoming dates

November 2026

December 2026

January 2027

March 2027

July 2027

August 2027

September 2027

October 2027

November 2027

December 2027

April 2028

August 2028

September 2028

November 2028

January 2029

March 2029

September 2029

January 2030

August 2030

March 2031

Regulatory change alerts by country

Past dates