Skip to content
Regulations.

Biometric privacy laws

20 regulations worldwide that deal with biometrics, with every phased deadline and the official source for each.

20 regulations

Add to calendar
Apple Calendar or OutlookGoogle Calendar Download .ics

20 of 20 regulations

Upcoming deadlines

DateRegulation
in 2 monthsEU AI Act

New bans on sexual deepfakes and CSAM generation; Art 50(2) grace period ends

in 2 monthseIDAS 2

Member States must provide EU Digital Identity Wallets

in 3 monthsLouisiana LDPA

Louisiana Data Privacy Act takes effect

in 6 monthsMaryland MODPA

Discretionary 60-day cure period ends

in 6 monthsGDPR

GDPR Procedural Regulation applies

in 9 monthsKorea PIPA

Mandatory ISMS-P certification

in 10 monthsLouisiana LDPA

30-day cure period expires

in 10 monthsEU AI Act

Legacy GPAI models must comply; national AI sandboxes operational

in 1 yearEU AI Act

High-risk obligations apply to Annex III systems

in 1 yeareIDAS 2

Private relying parties must accept wallets

in 1 yearEU AI Act

High-risk obligations apply to Annex I product-embedded systems

in 3 yearsEU AI Act

Public-authority high-risk systems must comply

in 4 yearsEU AI Act

Large-scale EU IT systems must comply

Past deadlines

DateRegulation
2 weeks agoKorea PIPA

2026 PIPA amendments take effect

7 weeks agoNew Zealand Biometric Processing Privacy Code

Grace period ends for existing biometric processing

7 weeks agoEU AI Act

General application: transparency obligations, GPAI fines, most other rules

2 months agoEU AI Act

Digital Omnibus on AI enters into force

2 months agoJapan APPI

2026 APPI amendment act promulgated

4 months agoeIDAS 2

Legacy qualified trust service providers conformity report

4 months agoNew Zealand Biometric Processing Privacy Code

Amendment No. 1 applies (IPP 3A)

5 months agoMaryland MODPA

MODPA applies to personal data processing

5 months agoIllinois BIPA

Seventh Circuit: amendment applies retroactively

6 months agoKorea PIPA

2026 PIPA amendment promulgated (Act No. 21445)

8 months agoKazakhstan AI Law

AI Law takes effecttentative

8 months agoTRAIGA

TRAIGA takes effect

8 months agoGDPR

GDPR Procedural Regulation enters into force

10 months agoGDPR

GDPR Procedural Regulation adopted

10 months agoNew Zealand Biometric Processing Privacy Code

Biometric code in force

11 months agoDOJ Bulk Data Rule

Due diligence, audit and reporting obligations apply

12 months agoMaryland MODPA

MODPA takes effect

12 months agoColorado CPA

Minors' data amendment (SB 24-041) effective

1 year agoEU AI Act

GPAI, governance, notified bodies and penalties apply

1 year agoColorado CPA

Biometric identifier amendment (HB 24-1130) effective

1 year agoTRAIGA

HB 149 signed

1 year agoMalaysia PDPA

PDPA amendments phase 3

1 year agoChina Facial Recognition Measures

Facial recognition measures take effect

1 year agoColorado CPA

SB 25-276 geolocation and sensitive-data sale amendment effective

1 year agoDOJ Bulk Data Rule

Prohibitions and restrictions take effect

1 year agoMalaysia PDPA

PDPA amendments phase 2

1 year agoEU AI Act

Prohibited practices and AI literacy apply

1 year agoMalaysia PDPA

PDPA amendments phase 1

1 year agoColorado CPA

60-day cure period expires

1 year agoeIDAS 2

First wallet implementing acts enter into force

2 years agoQuebec Law 25

Phase 3: data portability

2 years agoIllinois BIPA

SB 2979 amendment effective

2 years agoEU AI Act

AI Act enters into force

2 years agoTennessee ELVIS Act

Takes effect

2 years agoColorado CPA

Universal opt-out mechanism recognition required

2 years agoeIDAS 2

eIDAS 2 enters into force

2 years agoNevada consumer health data law

Takes effect

2 years agoTennessee ELVIS Act

Signed by Governor

3 years agoQuebec Law 25

Phase 2: main obligations and penalties

3 years agoColorado CPA

CPA takes effect

Rule changes by email

The morning after a new data, privacy or AI law, or a deadline change; nothing in quiet weeks.

Double opt-in. Unsubscribe any time.