UK and non-EU European data laws

UK GDPR, the Data (Use and Access) Act, the Online Safety Act, Switzerland and more.

FewerMore laws

3 countries and blocs with tracked laws (US states on the US map). Tap one to open it.

11 regulations

Add to calendar

Apple Calendar or Outlook Google Calendar Download .ics

11 of 11 regulations

Sort

		Status
Data (Use and Access) Act Data (Use and Access) Act 2025	United Kingdom	In force	Aug 20, 20251 year ago	Sep 30, 2026in 4 days ICO abolished; Information Commission takes over
UK Cyber Security and Resilience Bill Cyber Security and Resilience (Network and Information Systems) Bill	United Kingdom	Proposed	Not set	Oct 26, 2026in 4 weeks Lords report stage scheduled
CoE AI Framework Convention Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law	Council of Europe	Enacted	Not set	None upcoming
Swiss revised FADP (nFADP) Federal Act on Data Protection (revised FADP) of 25 September 2020	Switzerland	In force	Sep 1, 20233 years ago	None upcoming
Turkey KVKK Law No. 6698 on the Protection of Personal Data (KVKK), as amended by Law No. 7499	Turkey	Amended	Apr 7, 201610 years ago	None upcoming
UK Data Protection Act 2018 Data Protection Act 2018	United Kingdom	Amended	May 25, 20188 years ago	None upcoming
UK GDPR UK General Data Protection Regulation and Data Protection Act 2018	United Kingdom	Amended	May 25, 20188 years ago	None upcoming
UK Investigatory Powers (Amendment) Act 2024 Investigatory Powers (Amendment) Act 2024	United Kingdom	Enacted	Not set	None upcoming
UK Online Safety Act Online Safety Act 2023	United Kingdom	In force	Mar 17, 20251 year ago	None upcoming
UK PSTI Act (product security) Product Security and Telecommunications Infrastructure Act 2022 and the Product Security Regulations 2023	United Kingdom	In force	Apr 29, 20242 years ago	None upcoming
UK Telecommunications Security Act Telecommunications (Security) Act 2021 and the Electronic Communications (Security Measures) Regulations 2022	United Kingdom	In force	Oct 1, 20223 years ago	None upcoming

Data (Use and Access) ActUnited Kingdom · In forceSep 30, 2026 ICO abolished; Information Commission takes overin 4 days
UK Cyber Security and Resilience BillUnited Kingdom · ProposedOct 26, 2026 Lords report stage scheduledin 4 weeks
CoE AI Framework ConventionCouncil of Europe · EnactedNo date set
Swiss revised FADP (nFADP)Switzerland · In forceEffective Sep 1, 20233 years ago
Turkey KVKKTurkey · AmendedEffective Apr 7, 201610 years ago
UK Data Protection Act 2018United Kingdom · AmendedEffective May 25, 20188 years ago
UK GDPRUnited Kingdom · AmendedEffective May 25, 20188 years ago
UK Investigatory Powers (Amendment) Act 2024United Kingdom · EnactedNo date set
UK Online Safety ActUnited Kingdom · In forceEffective Mar 17, 20251 year ago
UK PSTI Act (product security)United Kingdom · In forceEffective Apr 29, 20242 years ago
UK Telecommunications Security ActUnited Kingdom · In forceEffective Oct 1, 20223 years ago

Upcoming deadlines

Date	Regulation	What happens	When
Sep 30in 4 days	UK DUAAData (Use and Access) ActUnited Kingdom ICO abolished; Information Commission takes over	ICO abolished; Information Commission takes over	in 4d
Oct 26in 4 weeks	UK CSR BillUK Cyber Security and Resilience BillUnited Kingdom Lords report stage scheduledtentative	Lords report stage scheduledtentative	in 30d

Past deadlines

Date	Regulation	What happens	When
Jun 1920263 months ago	UK DUAAData (Use and Access) ActUnited Kingdom Mandatory data protection complaints procedure	Mandatory data protection complaints procedure	3mo ago
Jun 1620263 months ago	UK CSR BillUK Cyber Security and Resilience BillUnited Kingdom Passes House of Commons	Passes House of Commons	3mo ago
Apr 2120265 months ago	CoE AI Framework ConventionCoE AI Framework ConventionCouncil of Europe EU concludes the Convention	EU concludes the Convention	5mo ago
Apr 1120265 months ago	UK OSAUK Online Safety ActUnited Kingdom Fee notification window closes (2026/27)	Fee notification window closes (2026/27)	6mo ago
Feb 520267 months ago	UK GDPRUK GDPRUnited Kingdom DUAA amendments to UK GDPR commence	DUAA amendments to UK GDPR commence	8mo ago
Feb 520267 months ago	UK DUAAData (Use and Access) ActUnited Kingdom Stage 3: main data protection changes commence	Stage 3: main data protection changes commence	8mo ago
Nov 12202510 months ago	UK CSR BillUK Cyber Security and Resilience BillUnited Kingdom Introduced (Commons first reading)	Introduced (Commons first reading)	10mo ago
Aug 2020251 year ago	UK DUAAData (Use and Access) ActUnited Kingdom Stage 1 commencement	Stage 1 commencement	13mo ago
Jul 2520251 year ago	UK OSAUK Online Safety ActUnited Kingdom Protection of children duties apply	Protection of children duties apply	14mo ago
Jun 1920251 year ago	UK DUAAData (Use and Access) ActUnited Kingdom Royal Assent	Royal Assent	15mo ago
Apr 1620251 year ago	UK OSAUK Online Safety ActUnited Kingdom Children's access assessments due	Children's access assessments due	17mo ago
Mar 1720251 year ago	UK OSAUK Online Safety ActUnited Kingdom Illegal harms duties enforceable	Illegal harms duties enforceable	18mo ago
Sep 520242 years ago	CoE AI Framework ConventionCoE AI Framework ConventionCouncil of Europe Opened for signature	Opened for signature	2.1y ago
Sep 120242 years ago	Turkey KVKKTurkey KVKKTurkey Old transfer regime ends	Old transfer regime ends	2.1y ago
Jun 120242 years ago	Turkey KVKKTurkey KVKKTurkey Law 7499 amendments take effect	Law 7499 amendments take effect	2.3y ago
Apr 2920242 years ago	UK PSTI Act (product security)UK PSTI Act (product security)United Kingdom Product security requirements apply	Product security requirements apply	2.4y ago
Apr 2520242 years ago	UK Investigatory Powers (Amendment) Act 2024UK Investigatory Powers (Amendment) Act 2024United Kingdom Royal Assent	Royal Assent	2.4y ago
Oct 2620232 years ago	UK OSAUK Online Safety ActUnited Kingdom Royal Assent	Royal Assent	2.9y ago
Sep 120233 years ago	Swiss nFADPSwiss revised FADP (nFADP)Switzerland Revised FADP enters into force	Revised FADP enters into force	3.1y ago
Dec 620223 years ago	UK PSTI Act (product security)UK PSTI Act (product security)United Kingdom Royal Assent	Royal Assent	3.8y ago
Oct 120223 years ago	UK Telecommunications Security ActUK Telecommunications Security ActUnited Kingdom Security measures regulations in force	Security measures regulations in force	4y ago
Nov 1720214 years ago	UK Telecommunications Security ActUK Telecommunications Security ActUnited Kingdom Royal Assent	Royal Assent	4.9y ago
Jan 120215 years ago	UK GDPRUK GDPRUnited Kingdom UK GDPR takes effect after Brexit transition	UK GDPR takes effect after Brexit transition	5.7y ago
Jul 2320188 years ago	UK Data Protection Act 2018UK Data Protection Act 2018United Kingdom Age appropriate design code powers commence	Age appropriate design code powers commence	8.2y ago
May 2520188 years ago	UK GDPRUK GDPRUnited Kingdom Data Protection Act 2018 and GDPR apply	Data Protection Act 2018 and GDPR apply	8.3y ago
May 2520188 years ago	UK Data Protection Act 2018UK Data Protection Act 2018United Kingdom Main provisions commence	Main provisions commence	8.3y ago
May 2320188 years ago	UK Data Protection Act 2018UK Data Protection Act 2018United Kingdom Royal Assent	Royal Assent	8.3y ago

UK and non-EU European data laws

11 regulations

Upcoming deadlines

Past deadlines

Rule changes by email