Book a Demo

Compliance calendar

Every regulatory deadline and milestone we track, in one place. Each date links to the analysis behind it.

Next: DPDP Act: Consent managers on 13 Nov 2026

10 upcoming · 18 past

Coming up

  1. In 44 days

    DPDP Act: Consent managers

    Rule 4: registration and obligations of consent managers.

    DPDP Rules timeline: which obligations apply when
    Google CalendarDownload .ics
  2. In 2 months

    EU AI Act: Marking deadline for existing generative AI

    Systems on the market before 2 Aug 2026.

    EU AI Act after the Digital Omnibus: what still applies in 2026 and what moved to 2027
    Google CalendarDownload .ics
  3. In 6 months

    ISO 9001: Accreditation bodies ready

    Latest date for accreditation bodies to assess against the 2026 edition.

    ISO 9001:2026 transition audits: a planning guide for certification bodies
    Google CalendarDownload .ics
  4. In 8 months

    DPDP Act: Core obligations apply

    Notice, consent, security, breach reporting and Rule 16 (research standards).

    Using personal data to train AI under India's DPDP Act
    Google CalendarDownload .ics
  5. In 8 months

    DPDP Act: Core obligations apply

    Rules 3, 5 to 16, 22 and 23.

    DPDP Rules timeline: which obligations apply when
    Google CalendarDownload .ics
  6. In 14 months

    EU AI Act: Annex III high-risk obligations

    EU AI Act after the Digital Omnibus: what still applies in 2026 and what moved to 2027
    Google CalendarDownload .ics
  7. In 15 months

    EU Cyber Resilience Act: Full application

    Essential cybersecurity requirements and conformity assessment apply.

    EU Cyber Resilience Act reporting has started: what software vendors must do now
    Google CalendarDownload .ics
  8. In 18 months

    ISO 9001: Initial certifications to 2026 only

    ISO 9001:2026 transition audits: a planning guide for certification bodies
    Google CalendarDownload .ics
  9. In 22 months

    EU AI Act: Annex I product-embedded AI

    EU AI Act after the Digital Omnibus: what still applies in 2026 and what moved to 2027
    Google CalendarDownload .ics
  10. In 37 months

    ISO 9001: Transition ends

    Remaining 2015 certificates are no longer valid.

    ISO 9001:2026 transition audits: a planning guide for certification bodies
    Google CalendarDownload .ics

2026

  1. 14 days ago

    ISO 9001:2026 published

    Trend: ISO 9001:2026 transitionISO 9001:2026 transition audits: a planning guide for certification bodies
  2. 19 days ago

    EU Cyber Resilience Act: Article 14 reporting applies

    EU Cyber Resilience Act: Article 14 reporting obligations apply; ENISA's Single Reporting Platform goes live

    Trend: EU Cyber Resilience Act reporting beginsEU Cyber Resilience Act reporting has started: what software vendors must do now
  3. 59 days ago

    EU AI Act: Article 50 transparency applies

    EU AI Act: Article 50 transparency obligations apply

    Trend: EU AI Act: high-risk deadlines move, transparency staysEU AI Act after the Digital Omnibus: what still applies in 2026 and what moved to 2027
  4. 2 months ago

    EU AI Act: Digital Omnibus, Regulation (EU) 2026/1744, enters into force and postpones high-risk deadlines

    Trend: EU AI Act: high-risk deadlines move, transparency stays

2025

  1. 11 months ago

    DPDP Rules notified

    Data Protection Board provisions in force.

    Using personal data to train AI under India's DPDP Act
  2. 11 months ago

    DPDP Act: Rules notified; Board provisions apply

    DPDP Rules, 2025 notified; Data Protection Board provisions in force

    Trend: DPDP Rules phased rolloutDPDP Rules timeline: which obligations apply when
  3. 11 months ago

    ISO 27001: 2013 certificates expire

    Any certificate not transitioned is withdrawn or cancelled.

    ISO 27001:2022 transition: what changed and what auditors now check
  4. 14 months ago

    EU AI Act: General-purpose AI model obligations

    EU AI Act after the Digital Omnibus: what still applies in 2026 and what moved to 2027
  5. 17 months ago

    ISO/IEC 42005:2025 published: guidance for AI system impact assessments

    Trend: AI management systems move into audit scope
  6. 20 months ago

    EU AI Act: Prohibited practices apply

    EU AI Act after the Digital Omnibus: what still applies in 2026 and what moved to 2027
  7. 21 months ago

    DORA: Applies to financial entities

    DORA applies to in-scope financial entities

    Trend: DORA moves from rulebook to supervisionDORA register of information: what financial entities must keep

2024

  1. 22 months ago

    The Cyber Resilience Act enters into force

    EU Cyber Resilience Act: CRA enters into force

    Trend: EU Cyber Resilience Act reporting beginsEU Cyber Resilience Act reporting has started: what software vendors must do now
  2. 24 months ago

    NIS2: Transposition deadline for member states

    Trend: NIS2 transposition across the EU
  3. 2 years ago

    ISO 27001: Last initial audits against 2013

    Certification bodies stop initial and recertification audits to the 2013 edition (IAF MD 26).

    ISO 27001:2022 transition: what changed and what auditors now check

2023

  1. 3 years ago

    ISO/IEC 42001:2023 published as the first certifiable AI management system standard

    Trend: AI management systems move into audit scope
  2. 4 years ago

    DORA entered into force

    DORA: Entered into force

    Trend: DORA moves from rulebook to supervisionDORA register of information: what financial entities must keep

2022

  1. 4 years ago

    DORA: Published in the Official Journal

    DORA register of information: what financial entities must keep
  2. 4 years ago

    ISO/IEC 27001:2022 published

    ISO 27001:2022 transition: what changed and what auditors now check

Dates come from the regulations, standards and regulator publications cited in each linked article. Check the source before relying on a date.