AI regulatory calendar
The dates that matter for organizations using AI in the European Union, the United States and Asia, from laws already in force to obligations arriving through 2028. Each entry links to the IAIM briefing that explains it and to the source.
Generative AI systems placed on the market before August 2, 2026 must mark synthetic content; systems that generate non-consensual intimate imagery or child sexual abuse material are prohibited.
Briefing: The EU AI Act after the Digital Omnibus: what applies now, and what movedSource: Regulation (EU) 2026/1744, Digital Omnibus on AI
Pre-use notice, opt-out and access rights where technology replaces or substantially replaces human decision-making in significant decisions.
Briefing: California’s automated decision rules arrive January 1. Three months to get ready.Source: California Privacy Protection Agency
Subject to pending federal litigation and the Attorney General's rules: developer documentation; deployer notice, explanation after an adverse outcome, correction and human review.
Briefing: Colorado replaced its AI Act before it took effect. Here is the new law.Source: McDermott Will & Schulte, May 2026
Large frontier-model developers publish safety frameworks and report critical safety incidents within 72 hours.
Briefing: AI incident response: write the plan before the incidentSource: Cooley, March 2026
Large online platforms detect and show embedded provenance data; generative AI hosting platforms may not knowingly offer non-compliant systems.
Briefing: California’s AI Transparency Act is operative: what generative AI providers now oweSource: Morgan Lewis, August 2026
Rules for operators of AI companions, with further protections where the operator knows or has reason to believe a user is under 18.
Briefing: Member briefing, October 2026: the AI Act’s first enforcement, agents that left the sandbox, and Connecticut’s new lawSource: Connecticut General Assembly, Public Act 26-15
The ministry announced a grace period of at least one year before administrative fines (up to 30 million won) are imposed; until then, investigations and fines are expected only in exceptional cases.
Briefing: South Korea’s AI Basic Act is in force. Foreign companies need a local representative.Source: Shin & Kim, February 2026
Deadline for each Member State to have an AI regulatory sandbox in place.
Briefing: The EU AI Act after the Digital Omnibus: what applies now, and what movedSource: Regulation (EU) 2026/1744, Digital Omnibus on AI
Tell applicants and employees when they interact with an automated employment-related decision technology, and give written notice before a decision in which its output is a substantial factor; developers must supply deployers with the information they need.
Briefing: Member briefing, October 2026: the AI Act’s first enforcement, agents that left the sandbox, and Connecticut’s new lawSource: Connecticut General Assembly, Public Act 26-15
Risk management, data governance, documentation, logging, human oversight, registration and serious-incident reporting for high-risk uses such as employment, credit and access to essential services.
Briefing: The EU AI Act after the Digital Omnibus: what applies now, and what moved; The EU agreed to delay the AI Act’s high-risk deadlines. Do not plan as if it is law yet.Source: Regulation (EU) 2026/1744, Digital Omnibus on AI
Cameras and other capture devices sold in California enable provenance disclosures in captured content by default.
Briefing: California’s AI Transparency Act is operative: what generative AI providers now oweSource: Morgan Lewis, August 2026
Duties for covered online platforms toward users under 18.
Briefing: Member briefing, October 2026: the AI Act’s first enforcement, agents that left the sandbox, and Connecticut’s new lawSource: Connecticut General Assembly, Public Act 26-15
Risk-assessment submissions to the privacy agency start in 2028, and cybersecurity audits phase in from 2028.
Briefing: California’s automated decision rules arrive January 1. Three months to get ready.Source: Sheppard Mullin, October 2025
High-risk obligations for AI embedded in products covered by EU product legislation, such as medical devices and machinery.
Briefing: The EU AI Act after the Digital Omnibus: what applies now, and what movedSource: Regulation (EU) 2026/1744, Digital Omnibus on AI
Written key-terms notice and acceptance before charging for consumer AI subscriptions; whistleblower protections at frontier model developers; WARN layoff notices must say whether the layoffs relate to AI.
Briefing: Member briefing, October 2026: the AI Act’s first enforcement, agents that left the sandbox, and Connecticut’s new lawSource: Connecticut General Assembly, Public Act 26-15
A free detection tool, hidden provenance disclosures in AI images, video and audio, and an option to add a visible label.
Briefing: California’s AI Transparency Act is operative: what generative AI providers now oweSource: Morgan Lewis, August 2026
People must be told when they interact with an AI system; synthetic content must be marked; deepfakes and AI-generated text on matters of public interest must be disclosed.
Briefing: The EU AI Act after the Digital Omnibus: what applies now, and what movedSource: Regulation (EU) 2024/1689, the AI Act
Defers the high-risk dates, softens the AI-literacy duty, and adds a prohibition from December 2, 2026.
Briefing: The EU AI Act after the Digital Omnibus: what applies now, and what moved; The EU agreed to delay the AI Act’s high-risk deadlines. Do not plan as if it is law yet.Source: Regulation (EU) 2026/1744, Digital Omnibus on AI
Notice, risk management with human oversight, explanation and a user-protection plan for high-impact AI, with an impact assessment operators must make efforts to carry out; labels on generative output; a domestic representative for large foreign providers.
Briefing: South Korea’s AI Basic Act is in force. Foreign companies need a local representative.Source: Cooley, January 2026
The package on automated decision-making technology, risk assessments and cybersecurity audits takes effect; its duties phase in from 2026 to 2030.
Briefing: California’s automated decision rules arrive January 1. Three months to get ready.Source: Sheppard Mullin, October 2025
Employers must give notice when AI is used in covered employment decisions, and may not use AI in ways that discriminate.
Briefing: Three AI laws took effect on January 1. Here is who they reach.; Hiring for AI judgment: what to look for, and what to askSource: Morgan Lewis, September 2024
Large frontier-model developers publish safety frameworks and report critical safety incidents (within 15 days; 24 hours where there is an imminent risk of death or serious injury).
Briefing: Three AI laws took effect on January 1. Here is who they reach.; AI incident response: write the plan before the incidentSource: California Legislative Information, SB 53
Prohibited AI uses, AI-interaction disclosure by government agencies and in health care, Attorney General enforcement with a 60-day cure period, and a defense for substantial compliance with a recognized framework such as the NIST AI RMF.
Briefing: Three AI laws took effect on January 1. Here is who they reach.; The NIST AI RMF in two pages: how to profile one systemSource: Texas Legislature, HB 149, enrolled text
Discrimination through an automated-decision system can violate the Fair Employment and Housing Act; anti-bias testing is relevant evidence; four years of records.
Briefing: Fairness testing for AI decisions: start with the four-fifths rule, do not stop there; Three AI laws took effect on January 1. Here is who they reach.Source: Paul Hastings, August 2025
Visible and embedded labels for AI-generated content under a mandatory national standard.
Briefing: After New Delhi: a one-page map of how the world governs AISource: Loeb & Loeb, March 2025
Providers of general-purpose models owe documentation, a copyright policy and a training-data summary, with more for models with systemic risk.
Briefing: The EU rules for general-purpose AI models are in force: what deployers should ask their providersSource: Regulation (EU) 2024/1689, the AI Act
Prohibited practices apply, and the AI-literacy duty in Article 4 begins (changed in July 2026 to a duty to support literacy).
Briefing: AI literacy after the omnibus: what Article 4 now asks of employers; The EU AI Act after the Digital Omnibus: what applies now, and what movedSource: Regulation (EU) 2024/1689, the AI Act
The AI Act begins to apply in stages over the following four years.
Briefing: The EU AI Act after the Digital Omnibus: what applies now, and what movedSource: Regulation (EU) 2024/1689, the AI Act
An independent bias audit and notice to candidates before an automated employment decision tool is used for jobs in the city.
Briefing: Fairness testing for AI decisions: start with the four-fifths rule, do not stop there; Hiring for AI judgment: what to look for, and what to askSource: NYC Department of Consumer and Worker Protection
Dates shown as "About" or "From" are not fixed to a day in the source; the calendar file marks them as approximate. Suggest a correction: support@iaim.ai.
Newsletter
A monthly summary of what changed in AI regulation, governance and practice, with the sources for every item. Free. Unsubscribe in one click. See a sample issue.
