Skip to main content
High-risk AI system classification guidance published - check your tier
Regulatory Calendar

Global Regulatory Calendar: Track Compliance Deadlines and Regulatory Changes

Stay ahead of regulatory deadlines with the RegulatoryBridge Global Regulatory Calendar. Discover upcoming compliance milestones, new regulatory requirements, implementation dates, consultation periods, and important guidance across jurisdictions.

As data protection, AI governance, cybersecurity, digital services, and sector-specific regulations continue to evolve, keeping track of regulatory changes is essential for businesses operating across borders.

Our regulatory calendar helps compliance teams, legal professionals, privacy officers, risk managers, and business leaders monitor important dates, plan compliance activities, and prepare for upcoming regulatory obligations.

Track regulatory developments. Plan your compliance activities. Prepare for what comes next.

Explore Upcoming DeadlinesSubscribe to Calendar Updates

Explore Regulatory Deadlines by Date, Jurisdiction, and Framework

Find relevant regulatory milestones in one central resource. Use the calendar to identify upcoming deadlines and organise your compliance planning around the jurisdictions and regulatory frameworks that matter to your organisation.

Upcoming Regulatory Deadlines

Monitor approaching implementation dates, reporting requirements, transition periods, and other regulatory milestones that may require action from your organisation.

Regulatory Changes and New Requirements

Follow significant regulatory developments, including new legislation, amendments, published guidance, and changes to existing compliance obligations.

Implementation Milestones

Understand when particular provisions are scheduled to take effect and identify the preparation required before applicable requirements become enforceable.

Regulatory Guidance and Consultations

Track relevant guidance publications, consultation windows, and other developments that may influence your compliance policies, risk assessments, and operational processes.

Browse the Regulatory Calendar

Use the calendar to explore milestones by year, jurisdiction, regulatory framework, or event type.

Filter the calendar

Showing 24 of 24 events

2024

04 Jun
guidanceCompleted

EDPB Guidelines on Transfer Impact Assessments

European Data Protection Board updates TIA methodology post Schrems II/DPF.

Jurisdiction: EU
Framework: GDPR
17 Oct
deadlineCompleted

NIS2 transposition deadline

Member States required to transpose NIS2 into national law - essential/important entity registration obligations apply.

Jurisdiction: EU
Framework: NIS2

2025

01 Jan
milestoneCompleted

Delaware Personal Data Privacy Act effective

Delaware joins the patchwork of US state privacy laws.

Jurisdiction: Delaware (US)
Framework: DPDPA-DE
01 Jan
milestoneCompleted

Iowa Consumer Data Protection Act effective

Iowa privacy law in force - opt-out for sale, plain DSAR procedure.

Jurisdiction: Iowa (US)
Framework: ICDPA
01 Jan
milestoneCompleted

New Hampshire Privacy Act effective

New Hampshire comprehensive privacy law in force.

Jurisdiction: New Hampshire (US)
Framework: NHPA
01 Jan
guidanceCompleted

France LCEN enforcement reforms

CNIL announces priority on cookie compliance and dark-pattern enforcement.

Jurisdiction: France
Framework: LCEN / GDPR
03 Jan
milestoneCompleted

India DPDP Rules 2025 (G.S.R. 846(E)) notified

Operative rules under the DPDP Act 2023: consent, notice, security, breach notification, Data Protection Board procedures.

Jurisdiction: India
Framework: DPDPA
15 Jan
milestoneCompleted

New Jersey Data Privacy Act effective

New Jersey state privacy law applies - universal opt-out, sensitive data protections.

Jurisdiction: New Jersey (US)
Framework: NJDPA
17 Jan
milestoneCompleted

EU DORA effective

Digital Operational Resilience Act applies to financial entities and their critical ICT third-party providers.

Jurisdiction: EU
Framework: DORA
02 Feb
milestoneCompleted

EU AI Act - Prohibited AI practices apply

Article 5 prohibitions (manipulative, social scoring, real-time biometric ID in public spaces) become enforceable.

Jurisdiction: EU
Framework: EU AI Act
Official source
06 Apr
milestoneCompleted

UK Digital Markets, Competition and Consumers Act in force

Digital Markets, Competition and Consumers Act 2024 takes substantive effect.

Jurisdiction: United Kingdom
Framework: DMCC
19 Jun
milestoneCompleted

UK Data (Use and Access) Act 2025

Data (Use and Access) Act receives Royal Assent - reforms to UK data protection including DPDI provisions.

Jurisdiction: United Kingdom
Framework: UK GDPR / DPA 2018
01 Jul
milestoneCompleted

CPPA additional regulations effective

California Privacy Protection Agency's expanded regulations on automated decision-making, risk assessments, and cybersecurity audits.

Jurisdiction: California (US)
Framework: CCPA / CPRA
01 Jul
milestoneCompleted

Tennessee Information Protection Act effective

Tennessee comprehensive privacy law in force.

Jurisdiction: Tennessee (US)
Framework: TIPA
31 Jul
milestoneCompleted

Minnesota Consumer Data Privacy Act effective

Minnesota becomes the next US state with comprehensive privacy law in force.

Jurisdiction: Minnesota (US)
Framework: MCDPA
02 Aug
milestoneCompleted

EU AI Act - GPAI rules apply

Rules for general-purpose AI models (GPAI), governance, and penalties take effect.

Jurisdiction: EU
Framework: EU AI Act
01 Sept
milestoneCompleted

ANPD regulatory sandbox launch

ANPD opens its regulatory sandbox for AI + privacy use cases.

Jurisdiction: Brazil
Framework: LGPD

2026

01 Apr
guidanceCompleted

Japan APPI 3-year review cycle

Statutory review of APPI begins (every 3 years per Article 6).

Jurisdiction: Japan
Framework: APPI
02 Aug
deadlineCompleted

EU AI Act - High-risk system obligations apply

Annex III high-risk AI systems must comply with conformity assessment, FRIA, post-market monitoring.

Jurisdiction: EU
Framework: EU AI Act
01 Sept
guidanceCompleted

Switzerland revFADP Implementation Review

Federal Council reviews revised FADP after 2 years of operation.

Jurisdiction: Switzerland
Framework: revFADP
11 Sept
deadlineCompleted

EU Cyber Resilience Act - reporting obligations apply

Manufacturers' obligations to report actively exploited vulnerabilities and severe incidents to ENISA/CSIRTs become applicable (Article 14).

Jurisdiction: EU
Framework: Cyber Resilience Act
Official source

2027

12 Jan
deadlineUpcoming

EU Data Act - cloud switching charges abolished

Providers of data processing services may no longer impose switching charges for moving between cloud/edge services (Article 29).

Jurisdiction: EU
Framework: EU Data Act
02 Aug
deadlineUpcoming

EU AI Act - full application (remaining provisions)

Final application milestone: obligations for high-risk AI systems that are safety components of products under Annex I sectoral legislation take effect (Article 113).

Jurisdiction: EU
Framework: EU AI Act
Official source
11 Dec
deadlineUpcoming

EU Cyber Resilience Act - main obligations apply

Full essential cybersecurity requirements and CE-marking conformity obligations for products with digital elements become applicable.

Jurisdiction: EU
Framework: Cyber Resilience Act
Official source

Note: Applicability depends on the relevant legislation, your organisation's activities, and any jurisdiction-specific conditions or transition provisions.

Key Regulatory Areas Covered

Data Protection and Privacy

Monitor developments affecting personal data processing, individual rights, consent, data breach reporting, international data transfers, and privacy governance.

Relevant frameworks may include the EU GDPR, UK GDPR, California privacy legislation, India's Digital Personal Data Protection framework, Brazil's LGPD, and Singapore's PDPA.

Artificial Intelligence Governance

Follow important milestones relating to AI regulation, risk classification, transparency, human oversight, technical documentation, and governance obligations.

Track applicable developments under the EU AI Act and other emerging AI governance frameworks in jurisdictions relevant to your organisation.

Cybersecurity and Digital Resilience

Stay informed about regulatory requirements relating to cybersecurity risk management, incident reporting, vulnerability handling, operational resilience, and product security.

Relevant frameworks may include the EU NIS2 Directive, Digital Operational Resilience Act (DORA), and Cyber Resilience Act, subject to their respective scopes and implementation timelines.

Digital Services and Online Platforms

Monitor developments relating to digital markets, online platforms, intermediary responsibilities, consumer protection, and digital service governance.

Financial Services and Sector-Specific Compliance

Track regulatory developments affecting financial institutions, technology providers, healthcare organisations, manufacturers, and other regulated sectors.

Turn Regulatory Dates into Actionable Compliance Plans

Knowing when a regulation takes effect is only the starting point. Organisations also need to understand the requirements that apply to them, assign responsibilities, and complete the necessary preparation before relevant deadlines.

RegulatoryBridge supports organisations in translating regulatory developments into structured compliance activities.

  1. 01

    Assess Applicability

    Identify the jurisdictions, laws, and regulatory obligations relevant to your organisation, products, services, and data processing activities.

  2. 02

    Evaluate Compliance Gaps

    Review existing policies, processes, technical controls, documentation, and governance arrangements against applicable requirements.

  3. 03

    Prioritise Readiness Activities

    Organise compliance tasks according to legal deadlines, risk exposure, implementation effort, and business priorities.

  4. 04

    Coordinate Implementation

    Establish responsibilities across legal, privacy, security, product, technology, and business teams. Track actions and evidence required for readiness.

  5. 05

    Review and Monitor

    Monitor regulatory developments and reassess compliance plans when dates, guidance, or legal requirements change.

Request a Compliance Assessment

Subscribe to Regulatory Calendar Updates

Keep important regulatory developments visible to your team.

Subscribe to the RegulatoryBridge calendar feed to add supported regulatory events to your preferred calendar application. You can also sign up for email updates to receive relevant compliance insights and deadline reminders.

Calendar Subscription

Add the regulatory calendar to a supported calendar application and review upcoming milestones alongside your internal project deadlines.

Subscribe in Google
Subscribe to Calendar Feed

Email Reminders and Regulatory Insights

Receive updates covering regulatory developments, upcoming deadlines, implementation considerations, and practical compliance guidance.

No spam. Unsubscribe in one click. Privacy Policy.

How RegulatoryBridge Helps You Prepare

RegulatoryBridge helps organisations manage compliance requirements across multiple jurisdictions through regulatory research, readiness support, privacy representation, compliance coordination, and risk management services.

Our support can help your organisation:

  • Identify potentially applicable regulatory requirements.
  • Understand the impact of upcoming regulatory milestones.
  • Assess compliance gaps and prioritise remediation.
  • Coordinate regulatory work across teams and jurisdictions.
  • Organise compliance documentation and implementation activities.
  • Review regulatory changes and update compliance plans.

Service availability depends on the jurisdiction, regulatory framework, and agreed engagement scope.

Frequently Asked Questions