From the EU AI Act to state laws, financial supervisors and national AI acts, every dated AI compliance milestone from November 2026 to December 2027, by region and industry. Subscribe once and the dates arrive in your own calendar.
Last verified: 23 October 2026
Every date below links to its official source. Filter by region or industry, add the whole calendar to Outlook, Google or Apple Calendar in one click, or print it for your team.
Subscribe once and every new date appears in your own calendar automatically.
The one-year compliance period that began when the PDPL executive regulations were issued on 1 November 2025 ends, and enforcement of the Personal Data Protection Law is expected to begin.
US general election; state pre-election deepfake windows apply
State election deepfake and political ad AI disclosure rules apply in the pre-election period.
Consent manager provisions commence
Rule 4 and related DPDP Act provisions on registered consent managers take effect 12 months after the Rules were notified.
Regulators target adoption of the AI systems evaluation tool and the third-party data and model vendor framework.
NAIC Fall National Meeting opens; AI evaluation tool and third-party vendor framework targeted for adoption
National rules transposing Directive (EU) 2023/2225 apply, including safeguards for automated creditworthiness assessments.
Rights on automated individual decisions apply and the new Agencia de Proteccion de Datos Personales begins enforcement.
Law takes full effect; Agencia de Proteccion de Datos Personales begins enforcement
Generative AI systems placed on the market before 2 Aug 2026 must comply with Article 50(2) machine-readable marking.
New prohibitions apply: AI generating realistic intimate images of identifiable persons without consent, and AI generating child sexual abuse material
End of grace period for Article 50(2) machine-readable marking by generative systems placed on the market before 2 Aug 2026
Bans on AI generating non-consensual intimate imagery of identifiable persons and child sexual abuse material take effect.
Member States must transpose Directive (EU) 2024/2831, including rules on algorithmic management by digital labor platforms.
Transposition deadline for Directive (EU) 2024/2853, which covers software including AI and applies to products placed on the market after this date.
Automated decision-making disclosure obligations commence
The OAIC is to register the Children's Online Privacy Code by this date, covering social media and online services likely to be accessed by children.
APP entities must disclose in privacy policies the kinds of decisions made or substantially assisted by computer programs using personal information.
Federal Council deadline for the consultation draft incorporating the Council of Europe AI Convention into Swiss law.
UKAS initial assessments of new applicants move to the 2026 edition
All UKAS initial assessments of new inspection body applicants use the 2026 edition from this date.
Takes effect
Act effective; large frontier developers must keep a disclosure statement on file
ADMT notice, opt-out and access duties apply
Platforms must block reported child sexual abuse material, including AI-generated images of identifiable minors, within 48 hours.
Large online platforms must let users see available provenance data and may not strip it.
Large online platforms must surface provenance data (AB 2713)
SB 867 bans sales of toys with companion chatbots for children under 16 until 2031, and SB 1050 requires ad disclosures for synthetic performers.
Businesses using automated decisionmaking technology for significant decisions must provide notices, opt-outs and access rights.
First anonymized, aggregated report on frontier AI critical safety incidents.
Companion chatbot law strengthened; core obligations follow on 1 Jul 2027 and audits from 2029.
Attorneys must verify AI output and disclose generative AI use in court submissions.
AB 1979 and SB 503 apply to clinical decision support AI and health chatbots.
Large businesses must disclose chatbots and offer a path to a human agent.
AB 1883 bans emotion recognition and neural data collection by workplace AI, and SB 951 adds AI displacement content to Cal/WARN notices.
SB 26-189 and HB 26-1263 apply, with Attorney General rules required before this date.
Act and rules take effect
Takes effect
SB 1119 effective
Chatbot operators must disclose AI and maintain crisis protocols; large frontier developers need internal reporting channels.
Takes effect
Large frontier developers must keep a disclosure statement on file with the state; third-party audits follow in 2028.
Frontier developers must meet framework, transparency, disclosure statement and 72-hour incident reporting duties.
SB 1546 applies to AI companion operators.
Act takes effect
Colorado, Connecticut, Oregon and Washington laws take effect
Provenance metadata and consumer cues required for AI-generated content.
Takes effect
HB 2225 disclosure, minor protection and crisis protocol duties apply, with a private right of action.
Regulation (EU) 2023/1230 applies, requiring third-party assessment for machinery with self-evolving machine learning safety functions.
HB 1170 provenance and transparency duties for AI-generated content apply.
New and existing AI systems covered by Decision 33/2026/QD-TTg must comply with the AI Law's high-risk requirements, other than existing healthcare, education and financial systems.
Compliance deadline for covered systems
End of the first quarter of 2027, when the Department of Communications and Digital Technologies aims to publish a revised National AI Policy.
Most mandatory SPF obligations for designated banks, telcos and digital platforms are expected to commence.
Guideline takes effect
Quebec insurers, financial services cooperatives, trust companies and deposit institutions must meet AI inventory, risk rating, validation and client disclosure expectations.
Federally regulated financial institutions must apply model risk management, including AI and machine learning models, with independent model review.
Remaining provisions, including Rule 13, commence
All remaining DPDP Act and Rules provisions commence, including annual DPIA, audit and algorithmic due diligence duties for Significant Data Fiduciaries.
Limits on using student data to train AI extend to higher education.
SB 947 limits sole reliance on automated decision systems in discipline and termination.
Companion chatbot child safeguards apply and operators start annual reports to the Office of Suicide Prevention.
Next annual compliance report due
Annual compliance report under Regulation 10-1-1 for life, auto and health insurers.
SB 1119 core obligations apply; SB 243 annual reports to the Office of Suicide Prevention begin
Four state companion chatbot laws enacted in 2026 begin to apply.
Compliance date
Georgia, Idaho, Iowa and Nebraska laws take effect
Deadline for Commission guidelines on the interplay between the AI Act and Annex I product legislation.
Each Member State must have at least one national AI regulatory sandbox operational
Models placed on the market before 2 Aug 2025 must comply
General-purpose AI models placed on the market before 2 Aug 2025 must meet AI Act GPAI obligations.
Each Member State must have at least one AI regulatory sandbox operational.
High-risk healthcare, education and financial AI systems already operating before 15 Aug 2026 must meet the AI Law's requirements.
Deadline for healthcare, education and financial systems operating before 15 Aug 2026
Deadline for Commission guidance, including a template, on the post-market monitoring plan for high-risk AI.
Employers must give written notice before using automated employment-related decision technology.
Employer notices for automated employment-related decision technology required
Financial institutions must meet Sections 3 and 4 (oversight, AI identification, inventory and risk materiality assessment); Sections 5 and 6 follow on 7 Oct 2028.
Sections 3 and 4 apply (governance, AI inventory, risk materiality)
Requirements, conformity assessment, EU database registration and fundamental rights impact assessments apply to stand-alone high-risk AI.
Duty applies with the Annex III high-risk obligations
Chapter III Sections 1 to 3 apply to Annex III high-risk systems
Registration duties apply with the Annex III high-risk obligations
Essential cybersecurity requirements and conformity assessment apply to products with digital elements, including AI-enabled products.
The Unbiased AI Principles memo lapses two years after issuance unless OMB extends it.
Memo expires two years after issuance unless OMB extends it
Last day UKAS-accredited inspection bodies can be assessed to either the 2012 or 2026 edition before the 2026 edition becomes mandatory on 1 January 2028.
Risk assessments for processing that began before 2026 must be completed
Businesses must complete CCPA risk assessments for high-risk processing that began before 1 Jan 2026.
Attorney General's discretionary 60-day cure option for AEDT violations covers only violations through this date.
Discretionary 60-day cure period for AEDT violations ends
Join the alert list and we will email you when a new AI compliance date is added for the regions and industries you choose. We confirm your subscription by email first, and every message has a one-click unsubscribe.
AxiSentinel™ tracks every date that applies to your AI systems and evaluates them against each rule before it takes effect, with findings signed by a qualified AxiLayer AI auditor.
Request a briefing See every mandateKey dates include 2 Dec 2026 for new EU AI Act prohibitions and marking rules, 1 Jan 2027 when Colorado, California and Illinois AI laws take effect, 20 Jan 2027 for the EU Machinery Regulation, and 2 Dec 2027 for EU AI Act high-risk obligations. The calendar lists 94 dated milestones worldwide.
Select Subscribe in your calendar on this page. Outlook and Apple Calendar open the feed directly, and Google Calendar adds it through the Add to Google Calendar link. New dates then appear in your calendar automatically, about once a day.
Each date comes from the law, regulator or official publication linked beside it, as verified on 23 October 2026. Laws can be amended or delayed, so we review the calendar continuously and update entries when official dates change.
Yes. It covers the United States, Canada and Latin America, Europe, the Middle East, Africa, Asia and Oceania, plus global standards, wherever an official date falls between November 2026 and December 2027.
AxiSentinel evaluates your AI systems against each rule that applies to you before its deadline, and a qualified AxiLayer AI auditor reviews and signs every finding, so you have evidence ready on the day a rule takes effect. Request a briefing to plan your next twelve months.
