Skip to content
Regulations.

2025 compliance deadlines

126 data, privacy, AI and cybersecurity deadlines in 2025, across 91 regulations.20242026

Add to calendar
Apple Calendar or OutlookGoogle Calendar Download .ics

126 of 126 deadlines

DateRegulation
January 202519
1 year agoCalifornia SB 976 addictive feeds

Takes effect

1 year agoCCPA / CPRA

CPI adjustment of thresholds and fines

1 year agoChina NDSR

Network Data Regulations take effect

1 year agoColorado CPA

60-day cure period expires

1 year agoCTDPA

Universal opt-out preference signals required

1 year agoDelaware DPDPA

DPDPA takes effect

1 year agoIowa ICDPA

ICDPA takes effect

1 year agoMalaysia PDPA

PDPA amendments phase 1

1 year agoNebraska NDPA

Nebraska Data Privacy Act takes effect

1 year agoNH Privacy Act

New Hampshire Privacy Act takes effect

1 year agoTexas TDPSA

Universal opt-out mechanism requirement applies

1 year agoNPRM

NPRM published

1 year agoInteroperable Europe Act

Interoperability assessments mandatory

1 year agoNJDPA

NJDPA takes effect

1 year agoSection 1033

Final rule effective

1 year agoDORA

DORA applies

1 year agoNIS2

Digital infrastructure entities submit registration data

1 year agoOntario Bill 194

Enhancing Digital Security and Trust Act in force

1 year agoPakistan PECA

PECA amendment takes effect

February 20252
1 year agoEU AI Act

Prohibited practices and AI literacy apply

1 year agoEU Cyber Solidarity Act

Cyber Solidarity Act enters into force

March 20257
1 year agoHIPAA

Security Rule NPRM comment period closed

1 year agoNPRM

Comment period closes

1 year agoUK OSA

Illegal harms duties enforceable

1 year agoMexico LFPDPPP

New LFPDPPP in force

1 year agoEU EHDS

EHDS enters into force

1 year agoIndonesia PP 17/2025 (Child Protection Online)

PP 17/2025 in force

1 year agoPeru PDPL and 2024 Regulation

New regulation in force

April 20256
1 year agoMalaysia PDPA

PDPA amendments phase 2

1 year agoDOJ Bulk Data Rule

Prohibitions and restrictions take effect

1 year agoUK OSA

Children's access assessments due

1 year agoNIS2

Member States establish entity lists

1 year agoArkansas COPPA 2.0

Approved by Governor

1 year agoDORA

First registers of information submitted to the ESAs

May 202511
1 year agoChina PI Audit

PI compliance audit measures take effect

1 year agoNYDFS Part 500

Vulnerability scans, access privileges, malware controls, Class A monitoring

1 year agoUtah AIPA

SB 226 amendments effective

1 year agoUtah App Store Accountability Act

Act takes effect

1 year agoNY Algorithmic Pricing Disclosure Act

Signed as part of FY2026 budget

1 year agoTAKE IT DOWN Act

Criminal provisions effective on enactment

1 year agoColorado CPA

SB 25-276 geolocation and sensitive-data sale amendment effective

1 year agoJapan Active Cyber Defense Act

Act promulgated

1 year agoTexas App Store Accountability Act

Signed by Governor

1 year agoAU Cyber Security Act

Ransomware payment reporting starts

1 year agoNebraska Kids Code

Approved by Governor

June 202514
1 year agoChina Facial Recognition Measures

Facial recognition measures take effect

1 year agoMalaysia PDPA

PDPA amendments phase 3

1 year agoNJDPA

Division of Consumer Affairs proposes NJDPA rules (N.J.A.C. 13:45L)

1 year agoJapan AI Act

AI Promotion Act promulgated and partly in force

1 year agoAU Privacy Act

Statutory tort for serious invasions of privacy commences

1 year agoAlberta POPA

POPA in force

1 year agoVermont Kids Code

Signed by Governor

1 year agoCanada CCSPA

Bill C-8 introduced

1 year agoUK DUAA

Royal Assent

1 year agoNY Child Data Protection Act

Takes effect

1 year agoTRAIGA

HB 149 signed

1 year agoCOPPA Rule

Amended COPPA Rule takes effect

1 year agoCalifornia ADS employment regulations

OAL approves regulations

1 year agoLouisiana app store age verification law

Signed by Governor

July 202511
1 year agoColorado CPA

Biometric identifier amendment (HB 24-1130) effective

1 year agoEU DSA

DSA transparency report templates mandatory

1 year agoOntario Bill 194

FIPPA privacy amendments in force

1 year agoOregon OCPA

OCPA applies to nonprofits

1 year agoTennessee TIPA

TIPA takes effect

1 year agoVietnam Law on Data

Law on Data takes effect

1 year agoDORA

TLPT regulatory technical standards enter into force

1 year agoNJDPA

Universal opt-out mechanism must be honored

1 year agoUK OSA

Protection of children duties apply

1 year agoSection 1033

Court stays Forcht Bank litigation

1 year agoMinnesota MCDPA

MCDPA takes effect

August 20256
1 year agoEU AI Act

GPAI, governance, notified bodies and penalties apply

1 year agoIsrael Amdt 13

Amendment 13 in force

1 year agoUK DUAA

Stage 1 commencement

1 year agoSection 1033

Reconsideration ANPR published

1 year agoBrazil LGPD

Deadline to adopt ANPD standard contractual clauses

1 year agoColorado AI Act

SB 25B-004 delays the act

September 202512
1 year agoChina AI Labeling

AI content labeling measures and GB 45438-2025 take effect

1 year agoJapan AI Act

AI Promotion Act fully in force

1 year agoEU-US DPF

General Court upholds DPF (Latombe v Commission)

1 year agoPeru AI Law and Regulation

Regulation published

1 year agoEU Data Act

Data Act applies

1 year agoEU Data Act

Member States notify penalty rules

1 year agoNigeria NDPA

GAID 2025 takes effect

1 year agoCCPA / CPRA

ADMT, risk assessment and cybersecurity audit regulations approved

1 year agoEU DGA

Legacy data intermediaries must comply

1 year agoNZ Privacy Act

Privacy Amendment Act 2025 technical changes commence

12 months agoCA SB 53

SB 53 signed

12 months agoPeru PDPL and 2024 Regulation

Data portability appliestentative

October 202516
12 months agoCalifornia ADS employment regulations

ADS regulations take effect

12 months agoColorado CPA

Minors' data amendment (SB 24-041) effective

12 months agoMaryland MODPA

MODPA takes effect

12 months agoMontana MCDPA

SB 297 amendments take effect; cure period eliminated

11 months agoDOJ Bulk Data Rule

Due diligence, audit and reporting obligations apply

11 months agoCalifornia social media account deletion

Signed by Governor

11 months agoTTPA

TTPA applies

11 months agoCalifornia AI autonomous-harm defense ban

Signed by Governor

11 months agoCA SB 942

AB 853 signed

11 months agoCalifornia Digital Age Assurance Act

Signed by Governor

11 months agoCA SB 243

SB 243 signed

11 months agoSection 1033

Reconsideration comment period closes

11 months agoSection 1033

Court enjoins enforcement

11 months agoEU DSA

DSA delegated act on researcher data access in force

11 months agoEU-US DPF

Latombe appeal lodged at the Court of Justice

11 months agoSingapore Cybersecurity Act

2024 amendments commence

November 202516
10 months agoChina Cyber Incident Reporting Measures

Incident reporting measures take effect

10 months agoNYDFS Part 500

Universal MFA and asset inventory

10 months agoEgypt PDPL

Executive Regulations take effect

10 months agoNew Zealand Biometric Processing Privacy Code

Biometric code in force

10 months agoKenya Computer Misuse and Cybercrimes Act

2025 amendments commence

10 months agoCMMC 2.0

DFARS rule effective; Phase 1 begins

10 months agoNY Algorithmic Pricing Disclosure Act

Disclosure duty takes effect

10 months agoTaiwan PDPA

2025 amendment promulgatedtentative

10 months agoUK CSR Bill

Introduced (Commons first reading)

10 months agoIndia DPDP

DPDP Rules published; Board and procedural rules in force

10 months agoEU DSA

DSA review report on VLOP scope and interplay

10 months agoDORA

First critical ICT third-party providers designated

10 months agoCCD2

Transposition deadline

10 months agoSingapore Online Safety (Relief and Accountability) Act

Act assented to

10 months agoGDPR

GDPR Procedural Regulation adopted

10 months agoPeru PDPL and 2024 Regulation

DPO required: large companies

December 20256
9 months agoSEC Reg S-P

Larger entities must comply

9 months agoAU Social Media Age

Social media minimum age obligation applies

9 months agoAI state-law preemption EO

EO published in Federal Register

9 months agoNY RAISE Act

RAISE Act signed

9 months agoTexas App Store Accountability Act

Preliminary injunction

8 months agoDelaware DPDPA

Mandatory 60-day cure period expires

Rule changes by email

The morning after a new data, privacy or AI law, or a deadline change; nothing in quiet weeks.

Double opt-in. Unsubscribe any time.