Skip to content
Regulations.

Children and teen online privacy laws

48 regulations worldwide that deal with children, with every phased deadline and the official source for each.

48 regulations

Add to calendar
Apple Calendar or OutlookGoogle Calendar Download .ics

48 of 48 regulations

Upcoming deadlines

DateRegulation
in 5 daysCTDPA

PA 26-64 (SB 4) amendments take effect

in 6 weeksIndia DPDP

Consent Manager registration rule in force (12 months)

in 2 monthsEU AI Act

New bans on sexual deepfakes and CSAM generation; Art 50(2) grace period ends

in 2 monthsAU Privacy Act

Children's Online Privacy Code must be registered

in 2 monthsAU Privacy Act

Automated decision-making transparency applies

in 3 monthsMalaysia Online Safety Act

Online Safety Plan due to MCMC

in 3 monthsUtah App Store Accountability Act

Private right of action begins

in 3 monthsCalifornia Digital Age Assurance Act

Age signal duties begin

in 3 monthsCalifornia SB 976 addictive feeds

Age assurance duty and AG rules

in 3 monthsCCPA / CPRA

ADMT requirements compliance date

in 3 monthsCCPA / CPRA

Browsers must support opt-out preference signal (AB 566)

in 3 monthsCTDPA

Data broker registration required

in 3 monthsDelaware DPDPA

Amended thresholds and third-party duties take effect

in 3 monthsNH Privacy Act

Ban on selling personal data of children under 13 (HB 1460)

in 3 monthsUAE Child Digital Safety Law

Compliance deadline under the Decree by Law

in 3 monthsVermont Kids Code

Takes effect

in 3 monthsIndonesia PDP

Implementing regulation GR 33/2026 takes effect

in 4 monthsNY SAFE for Kids Act

Act and rules take effect

in 4 monthsEU DSA

DSA SME impact report

in 6 monthsMaryland MODPA

Discretionary 60-day cure period ends

in 6 monthsGDPR

GDPR Procedural Regulation applies

in 7 monthsIndia DPDP

Main data fiduciary obligations apply (18 months)

in 9 monthsUAE Child Digital Safety Law

Social media platforms' transition ends

in 9 monthsCalifornia Digital Age Assurance Act

Deadline for existing devices and apps

in 9 monthsCA SB 243

First annual report to Office of Suicide Prevention

in 10 monthsEU AI Act

Legacy GPAI models must comply; national AI sandboxes operational

in 1 yearEU AI Act

High-risk obligations apply to Annex III systems

in 1 yearCCPA / CPRA

Risk assessments for pre-existing processing due

in 1 yearEU CSAM Interim Regulation

Commission implementation report

in 1 yearCCPA / CPRA

First risk assessment submission to CPPA

in 1 yearCCPA / CPRA

Cybersecurity audit due: revenue over $100M

in 1 yearEU CSAM Interim Regulation

Interim derogation expires

in 1 yearEU AI Act

High-risk obligations apply to Annex I product-embedded systems

in 2 yearsCTDPA

Data brokers must process state deletion mechanism requests

in 2 yearsCCPA / CPRA

Cybersecurity audit due: revenue $50M-$100M

in 3 yearsCCPA / CPRA

Cybersecurity audit due: revenue under $50M

in 3 yearsEU AI Act

Public-authority high-risk systems must comply

in 4 yearsEU AI Act

Large-scale EU IT systems must comply

Past deadlines

DateRegulation
2 weeks agoAU Social Media Age

Strengthened enforcement amendments commence

3 weeks agoEU DSA

ChatGPT designated as VLOSE; Reddit and Roblox as VLOPs

7 weeks agoEU AI Act

General application: transparency obligations, GPAI fines, most other rules

8 weeks agoCTDPA

Profiling impact assessments apply

8 weeks agoEU CSAM Interim Regulation

New interim regulation enters into force

8 weeks agoNY SAFE for Kids Act

Rules published in State Register

2 months agoNY SAFE for Kids Act

Final SAFE for Kids rules released

2 months agoEU AI Act

Digital Omnibus on AI enters into force

2 months agoJapan APPI

2026 APPI amendment act promulgated

2 months agoChina Anthropomorphic AI Measures

Anthropomorphic AI measures take effect

2 months agoVirginia VCDPA

Ban on selling precise geolocation data (SB 338)

2 months agoNJDPA

Mandatory 30-day cure period expires

2 months agoNebraska Kids Code

Civil penalties available

2 months agoMalaysia Online Safety Act

Online Safety Plan and compounding regulations in force

2 months agoLouisiana app store age verification law

Takes effect

2 months agoCTDPA

PA 25-113 (SB 1295) amendments take effect

2 months agoArkansas COPPA 2.0

Takes effect

2 months agoUAE Child Digital Safety Law

Social media minimum age resolution takes effect

2 months agoNJDPA

A5328 sensitive data sale ban takes effect

2 months agoSingapore Online Safety (Relief and Accountability) Act

OSC begins operations and first provisions commence

4 months agoTAKE IT DOWN Act

Platform notice-and-removal process required

4 months agoUtah App Store Accountability Act

App store and developer duties apply

4 months agoTexas App Store Accountability Act

Stay pending appeal denied

5 months agoCOPPA Rule

Full compliance with amended COPPA Rule

5 months agoUK OSA

Fee notification window closes (2026/27)

5 months agoEU CSAM Interim Regulation

Previous interim regulation expires

5 months agoMaryland MODPA

MODPA applies to personal data processing

5 months agoMaryland Kids Code

Data protection impact assessments due

5 months agoChina Minors Online Protection Regulations

Measures identifying large or influential platforms for minors take effect

6 months agoECA Digital

ECA Digital in force

6 months agoChina Minors Online Protection Regulations

Classification measures for content harmful to minors take effect

7 months agoVirginia VCDPA

SB 854 preliminarily enjoined (NetChoice v. Jones)

8 months agoVirginia VCDPA

Under-16 social media time limit (SB 854) takes effect

8 months agoVietnam PDPL

PDPL and Decree 356/2025 take effect

8 months agoUAE Child Digital Safety Law

Child Digital Safety Law takes effect

8 months agoTexas App Store Accountability Act

Scheduled effective date (enjoined)

8 months agoOregon OCPA

Sale ban on precise geolocation and under-16 data (HB 2008)

8 months agoOregon OCPA

Universal opt-out signals must be honored

8 months agoOregon OCPA

Cure period sunsets

8 months agoNH Privacy Act

Mandatory 60-day cure period expires

Rule changes by email

The morning after a new data, privacy or AI law, or a deadline change; nothing in quiet weeks.

Double opt-in. Unsubscribe any time.