2030 compliance deadlines

20292031

January 20301

SunsetJan 1, 2030 · in 3.2 years

Colorado AI ActMandatory cure period endsThe AG's obligation to offer a 60-day notice-and-cure period expires.Colorado

April 20302

ReportingApr 1, 2030 · in 3.4 years

CCPA / CPRACybersecurity audit due: revenue under $50MFirst cybersecurity audit report (covering 2029) due for covered businesses with 2028 annual gross revenue under $50M (11 CCR 7121(a)(3)); annual by April 1 thereafter.California

ComplianceTentativeApr 1, 2030 · in 3.4 years

CFPB Open Banking Rule (Section 1033)Tier 5 compliance date (original)Banks with $850M to $1.5B in assets. Original date; subject to stay, extension and injunction.United States

August 20301

ComplianceAug 2, 2030 · in 3.8 years

EUEU AI ActPublic-authority high-risk systems must complyProviders and deployers of high-risk AI systems intended for use by public authorities that were placed on the market before the Chapter III application date must comply (Art 111(2), as replaced by the Omnibus).European Union

December 20302

ReportingDec 11, 2030 · in 4.1 years

EUCyber Resilience ActFirst CRA evaluationCommission evaluation and review report, then every four years (Art 70(1)).European Union

ComplianceDec 31, 2030 · in 4.2 years

EUEU AI ActLarge-scale EU IT systems must complyAI systems that are components of the large-scale IT systems in Annex X (e.g. SIS, VIS, Eurodac, EES, ETIAS) placed on the market before 2 Aug 2027 must be brought into compliance (Art 111(1)).European Union