2023 compliance deadlines
January 20235
February 20231
Digital Services ActPlatforms publish EU user numbersOnline platforms and search engines had to publish average monthly active EU recipients, and must update them at least every six months (Art 24(2)).European UnionMarch 20231
China Data Export Security Assessment MeasuresRemediation window for existing transfers endsExisting exports had to be remediated within six months of 2022-09-01. The exact end date is computed, not stated.ChinaApril 20232
Digital Services ActFirst VLOP/VLOSE designationsCommission designated the first 19 very large online platforms and search engines (e.g. Amazon Store, Facebook, Google Search, TikTok, X). Obligations apply four months after notification.European UnionWashington My Health My Data ActHB 1155 signedGovernor signs My Health My Data Act.WashingtonMay 20232
Digital Markets ActDMA appliesDMA becomes applicable; undertakings meeting thresholds must notify the Commission within two months (Arts 3(3), 54).European UnionTaiwan PDPAHigher fines take effectAmended article 48 with higher fines for security failures takes effect on promulgation.TaiwanJune 20235
China PI Export Standard Contract MeasuresStandard contract measures take effectThe standard contract route and filing duty apply.ChinaJuly 20236
August 20232
China Generative AI MeasuresGenerative AI measures take effectTraining data, labeling, content and user protection duties apply to public generative AI services.ChinaEU e-Evidence PackagePackage enters into forcePublished in the OJ on 2023-07-28; enters into force on the 20th day.European UnionSeptember 20235
October 20232
Rwanda DPP LawTwo-year transition endsArticle 67 gave controllers and processors already operating two years from publication to comply.RwandaNovember 20231
December 20235
China PI Export Standard Contract MeasuresRemediation window for existing transfers endsExisting exports had to comply within six months of 2023-06-01. The exact end date is computed, not stated.China