Data, privacy and AI rules

12 due in 60 days · 190 regulations

How this site works

This site tracks the data, privacy, AI, cybersecurity and data-residency regulations that matter to companies that collect, store, move or build AI on data. It covers the EU, US federal law and every US state with a comprehensive privacy law, and the major laws across the UK and Europe, Asia-Pacific, the Americas, the Middle East and Africa.

One row per deadline

Most of these laws phase in. The EU AI Act alone has more than ten dates. Each phased date is its own row with its own official source, so the timeline, the filters and the calendar feed can show exactly what is due and when.

Sources and verification

Every regulation was researched from official sources: official journals, legislatures, regulators and government gazettes. Each page shows the official link and the date it was last verified. Where a detail could only be confirmed from a secondary source, or where something is still uncertain, the page says so in its research notes.

The weekly agent

Every Monday at 08:00 UTC an agent scans the world, region by region (the EU, US federal, US states, the UK and Europe, Asia-Pacific, the Americas, the Middle East and Africa), for new laws, moved dates and status changes. Each region gets its own small model budget; a region the run had no time left for goes first the next week. It only keeps findings with an exact date and a source on an official government, legislature or regulator site that it can load. New laws and dates it finds are published with an Unverified badge until a person reviews them. A changed date never replaces a verified one: it waits in a review queue until approved. Rejected findings are kept so they are never re-added.

How the list grows

Before the agent runs, a keyless pass reads the official feeds of regulators, legislatures and ministries (29 so far, 23 of them found by the site itself) and keeps every recent item about data, privacy, AI or cyber rules as an unverified lead (95 so far). Each run it also opens a few of the official sites the tracked laws cite (149 looked at so far) and adds any RSS or Atom feed that answers with recent items; a feed that stops answering three times is dropped. Research batches add the regulations a specialist would expect that are still missing, each from its official text. Growth, shown as "added in the last 30 days", counts only what the agent finds on its own after 2026-09-25; the seed and the research batches are the starting point.

190 regulations so far, 1 added in the last 30 days, 2 of them found by the agent. Every addition and change is kept on the changes page.

Not legal advice

This site is a research aid: obligations depend on facts, thresholds and exemptions that a tracker cannot know, so check with counsel too. Regulations and deadlines from official journals, legislatures, regulators and gazettes; a weekly agent scans for new laws and moved dates, and its finds are marked unverified until checked by hand. The list grows as new laws are passed. Not legal advice; check the official text. Logos via logo.dev; trademarks belong to their owners. Anonymous usage stats via Google Analytics.

Corrections

Every regulation page has a Suggest a correction link. A person checks each suggestion against the official source before anything changes, and accepted corrections update the page's last-verified date.

Use the data

Subscribe to the calendar feed (any filtered view has its own), read the JSON, or point an AI agent at it: For AI agents has llms.txt, the OpenAPI spec and the endpoints. Regulations by Glyph.