2029 compliance deadlines

20282030

January 20291

ComplianceJan 1, 2029 · in 2.2 years

California AI Auditor RegistryRegistry opens and registration requiredAgency must launch the AI Auditor Registry; unregistered persons may not offer or conduct covered AI audits.California

March 20291

ComplianceMar 26, 2029 · in 2.4 years

EUEuropean Health Data Space (EHDS)Primary use for first data categories; secondary use framework appliesPatient rights and EHR rules apply to patient summaries, ePrescriptions and eDispensations (Art 14(1)(a)-(c)). Chapter IV secondary-use rules (data permits, Health Data Access Bodies) apply.European Union

April 20292

ReportingApr 1, 2029 · in 2.4 years

CCPA / CPRACybersecurity audit due: revenue $50M-$100MFirst cybersecurity audit report (covering 2028) due for businesses with 2027 annual gross revenue between $50M and $100M (11 CCR 7121(a)(2)).California

ComplianceTentativeApr 1, 2029 · in 2.4 years

CFPB Open Banking Rule (Section 1033)Tier 4 compliance date (original)Banks with $1.5B to $3B in assets. Original date; subject to stay, extension and injunction.United States

June 20291

EnforcementJun 30, 2029 · in 2.7 years

Vermont VDPOSAMandatory 60-day cure period expiresThe AG's duty to issue a cure notice before enforcement ends June 30, 2029 (Act 145 sec. 3).Vermont

July 20291

ComplianceJul 31, 2029 · in 2.8 years

MNMinnesota Consumer Data Privacy Act (MCDPA)Postsecondary institutions must complyPostsecondary institutions regulated by the Office of Higher Education must comply by July 31, 2029.Minnesota

September 20291

ComplianceTentativeSep 10, 2029 · in 2.9 years

PEPeru AI Law and RegulationPrivate sector: all other usesObligations apply four years after publication.Peru