hoggo

AI Act Rules for General-Purpose AI Applicable
2025-08-02
Rules for general-purpose AI models and high-risk AI systems become applicable.

AI Act Governance System Applicable
2025-08-02
Provisions on the governance system become applicable, including AI Board and codes of practice.

Minnesota Privacy Law Effective Date
2025-07-31
The Minnesota privacy law takes effect today. It includes a 30-day cure period until January 31, 2026.

Data Security Program (DSP) cure period ends
2025-07-08
There are two key effective dates associated with the DSP: April 8, 2025 and October 6, 2025. Starting April 8, 2025, entities and individuals are required to comply with the DSP’s prohibitions and restrictions, and with all other provisions of the DSP with the exception of the affirmative obligations of subpart J (related to due diligence and audit requirements for restricted transactions), § 202.1103 (related to reporting requirements for certain restricted transactions), and § 202.1104 (related to reports on rejected prohibited transactions). Starting October 6, 2025, entities and individuals must comply with subpart J and §§ 202.1103 and 202.1104. These effective dates remain in force. However, consistent with the Executive’s Article II authority to exercise enforcement discretion, NSD will target its enforcement efforts during the first 90 days to allow U.S. persons (e.g., individuals and companies) additional time to continue implementing the necessary changes to comply with the DSP and provide additional opportunities for the public to engage with NSD on DSP-related inquiries. Specifically, NSD will not prioritize civil enforcement actions against any person for violations of the DSP that occur from April 8 through July 8, 2025 so long as the person is engaging in good faith efforts to comply with or come into compliance with the DSP during that time. This policy aims to allow the private sector to focus its resources and efforts on promptly coming into compliance and to allow NSD to prioritize its resources on facilitating compliance.

Tennessee Privacy Law Effective Date
2025-07-01
The Tennessee privacy law becomes effective today. It includes a 60-day cure period with no sunset date.

COPPA Rule amendments
2025-06-23
The U.S. Federal Trade Commission published the final amendments to the Children’s Online Privacy Protection Rule in the Federal Register. Amendments cover “one new definition and modifications to several others, as well as updates to key provisions to respond to changes in technology and online practices.” The updates are effective 23 June 2025.

Data Security Program (DSP) cure period starts
2025-04-08

Coordinated Enforcement Framework (CEF) 2025
2025-03-15
The European Data Protection Board (EDPB) will focus on enforcing the right to erasure in 2025 (Article 17 GDPR) through coordinated actions across 30 Data Protection Authorities and the European Data Protection Supervisor

Germany NIS2 Implementation
2025-03-15
Germany’s NIS2 Implementation Act expected to enter into force, extending cybersecurity obligations to approximately 29,500 companies.

AI Act General Provisions Applicable
2025-02-02
General provisions of the AI Act become applicable, including prohibited AI practices and establishment of the EU AI Office.

DORA Full Application
2025-01-17
DORA becomes fully applicable, with financial entities required to comply with its operational resilience requirements for ICT risk management.

New Jersey Privacy Law Effective Date
2025-01-15
The New Jersey privacy law takes effect today. It includes a 30-day cure period until July 15, 2026.

CPRA Expanded Employee/B2B Rights Fully in Effect
2025-01-01

New Hampshire Privacy Law Effective Date
2025-01-01
The New Hampshire privacy law goes into effect today. It includes a 60-day cure period until December 31, 2025, followed by the Attorney General’s discretion.

Nebraska Data Privacy Act Effective Date
2025-01-01
The Nebraska Data Privacy Act becomes effective today. It includes a 30-day cure period with no sunset date.

Iowa Consumer Data Protection Act Effective Date
2025-01-01
The Iowa Consumer Data Protection Act (SF 262) takes effect today. It includes a 90-day cure period with no sunset date.

Delaware Personal Data Privacy Act Effective Date
2025-01-01
The Delaware Personal Data Privacy Act goes into effect today. It includes a 60-day cure period until December 31, 2025, after which the Attorney General has discretion over enforcement.
