Skip to content
Regulations.

Health data privacy laws

11 regulations worldwide that deal with health data, with every phased deadline and the official source for each.

11 regulations

Add to calendar
Apple Calendar or OutlookGoogle Calendar Download .ics

11 of 11 regulations

Upcoming deadlines

DateRegulation
in 5 daysCTDPA

PA 26-64 (SB 4) amendments take effect

in 3 monthsCTDPA

Data broker registration required

in 6 monthsEU EHDS

EHDS general application date

in 6 monthsMaryland MODPA

Discretionary 60-day cure period ends

in 6 monthsGDPR

GDPR Procedural Regulation applies

in 1 yearVermont VDPOSA

Vermont Data Privacy and Online Surveillance Act takes effect

in 2 yearsCTDPA

Data brokers must process state deletion mechanism requests

in 2 yearsEU EHDS

Primary use for first data categories; secondary use framework applies

in 2 yearsVermont VDPOSA

Mandatory 60-day cure period expires

in 4 yearsEU EHDS

Primary use for second data categories; EHR systems in service; extra secondary-use categories

in 8 yearsEU EHDS

Third-country participation in secondary use

Past deadlines

DateRegulation
8 weeks agoCTDPA

Profiling impact assessments apply

2 months agoCTDPA

PA 25-113 (SB 1295) amendments take effect

5 months agoMaryland MODPA

MODPA applies to personal data processing

7 months agoHIPAA

Notice of Privacy Practices updates (Part 2 alignment)

8 months agoGDPR

GDPR Procedural Regulation enters into force

10 months agoGDPR

GDPR Procedural Regulation adopted

11 months agoDOJ Bulk Data Rule

Due diligence, audit and reporting obligations apply

12 months agoMaryland MODPA

MODPA takes effect

1 year agoDOJ Bulk Data Rule

Prohibitions and restrictions take effect

1 year agoEU EHDS

EHDS enters into force

1 year agoNPRM

Comment period closes

1 year agoHIPAA

Security Rule NPRM comment period closed

1 year agoNPRM

NPRM published

1 year agoCTDPA

Universal opt-out preference signals required

1 year agoCTDPA

Mandatory 60-day cure period expires

1 year agoHIPAA

Reproductive health privacy compliance date (vacated)

2 years agoFTC HBNR

2024 amendments effective

2 years agoWA MHMDA

Small businesses must comply

2 years agoHIPAA

Reproductive health care privacy rule effective (later vacated)

2 years agoWA MHMDA

Regulated entities must comply

2 years agoNevada consumer health data law

Takes effect

3 years agoWA MHMDA

Geofencing ban (Section 10) effective

3 years agoCTDPA

CTDPA takes effect

3 years agoNevada consumer health data law

Approved by Governor

3 years agoWA MHMDA

HB 1155 signed

8 years agoGDPR

GDPR applies

10 years agoGDPR

GDPR enters into force

16 years agoFTC HBNR

Full compliance with original Rule

Rule changes by email

The morning after a new data, privacy or AI law, or a deadline change; nothing in quiet weeks.

Double opt-in. Unsubscribe any time.