BEGIN:VCALENDAR VERSION:2.0 PRODID:-//QULDEX//Blog compliance calendar//EN CALSCALE:GREGORIAN X-WR-CALNAME:QULDEX compliance calendar BEGIN:VEVENT UID:2022-10-25-iso-27001@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20221025 DTEND;VALUE=DATE:20221026 SUMMARY:ISO/IEC 27001:2022 published DESCRIPTION:ISO 27001:2022 transition: what changed and what auditors now c heck: https://blog.quldex.com/iso-27001-2022-transition-what-changed URL:https://blog.quldex.com/calendar#2022-10-25-iso-27001 TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2022-12-27-eu-regulation@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20221227 DTEND;VALUE=DATE:20221228 SUMMARY:DORA: Published in the Official Journal DESCRIPTION:DORA register of information: what financial entities must keep : https://blog.quldex.com/dora-register-of-information URL:https://blog.quldex.com/calendar#2022-12-27-eu-regulation TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2023-01-16-eu-regulation@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20230116 DTEND;VALUE=DATE:20230117 SUMMARY:DORA entered into force DESCRIPTION:DORA: Entered into force\nDORA moves from rulebook to supervisi on: https://blog.quldex.com/trends/dora-in-operation\nDORA register of inf ormation: what financial entities must keep: https://blog.quldex.com/dora- register-of-information URL:https://blog.quldex.com/calendar#2023-01-16-eu-regulation TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2023-12-18-ai-governance@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20231218 DTEND;VALUE=DATE:20231219 SUMMARY:ISO/IEC 42001:2023 published as the first certifiable AI management system standard DESCRIPTION:AI management systems move into audit scope: https://blog.qulde x.com/trends/ai-management-systems URL:https://blog.quldex.com/calendar#2023-12-18-ai-governance TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2024-04-30-iso-27001@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20240430 DTEND;VALUE=DATE:20240501 SUMMARY:ISO 27001: Last initial audits against 2013 DESCRIPTION:Certification bodies stop initial and recertification audits to the 2013 edition (IAF MD 26).\nISO 27001:2022 transition: what changed an d what auditors now check: https://blog.quldex.com/iso-27001-2022-transiti on-what-changed URL:https://blog.quldex.com/calendar#2024-04-30-iso-27001 TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2024-10-17-eu-regulation@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20241017 DTEND;VALUE=DATE:20241018 SUMMARY:NIS2: Transposition deadline for member states DESCRIPTION:NIS2 transposition across the EU: https://blog.quldex.com/trend s/nis2-transposition URL:https://blog.quldex.com/calendar#2024-10-17-eu-regulation TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2024-12-10-eu-regulation@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20241210 DTEND;VALUE=DATE:20241211 SUMMARY:The Cyber Resilience Act enters into force DESCRIPTION:EU Cyber Resilience Act: CRA enters into force\nEU Cyber Resili ence Act reporting begins: https://blog.quldex.com/trends/eu-cyber-resilie nce-act\nEU Cyber Resilience Act reporting has started: what software vend ors must do now: https://blog.quldex.com/cyber-resilience-act-reporting-ob ligations URL:https://blog.quldex.com/calendar#2024-12-10-eu-regulation TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2025-01-17-eu-regulation@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20250117 DTEND;VALUE=DATE:20250118 SUMMARY:DORA: Applies to financial entities DESCRIPTION:DORA applies to in-scope financial entities\nDORA moves from ru lebook to supervision: https://blog.quldex.com/trends/dora-in-operation\nD ORA register of information: what financial entities must keep: https://bl og.quldex.com/dora-register-of-information URL:https://blog.quldex.com/calendar#2025-01-17-eu-regulation TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2025-02-02-ai-governance@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20250202 DTEND;VALUE=DATE:20250203 SUMMARY:EU AI Act: Prohibited practices apply DESCRIPTION:EU AI Act after the Digital Omnibus: what still applies in 2026 and what moved to 2027: https://blog.quldex.com/eu-ai-act-digital-omnibus -deadlines URL:https://blog.quldex.com/calendar#2025-02-02-ai-governance TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2025-05-01-ai-governance@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20250501 DTEND;VALUE=DATE:20250502 SUMMARY:ISO/IEC 42005:2025 published: guidance for AI system impact assessm ents DESCRIPTION:AI management systems move into audit scope: https://blog.qulde x.com/trends/ai-management-systems URL:https://blog.quldex.com/calendar#2025-05-01-ai-governance TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2025-08-02-ai-governance@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20250802 DTEND;VALUE=DATE:20250803 SUMMARY:EU AI Act: General-purpose AI model obligations DESCRIPTION:EU AI Act after the Digital Omnibus: what still applies in 2026 and what moved to 2027: https://blog.quldex.com/eu-ai-act-digital-omnibus -deadlines URL:https://blog.quldex.com/calendar#2025-08-02-ai-governance TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2025-10-31-iso-27001@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20251031 DTEND;VALUE=DATE:20251101 SUMMARY:ISO 27001: 2013 certificates expire DESCRIPTION:Any certificate not transitioned is withdrawn or cancelled.\nIS O 27001:2022 transition: what changed and what auditors now check: https:/ /blog.quldex.com/iso-27001-2022-transition-what-changed URL:https://blog.quldex.com/calendar#2025-10-31-iso-27001 TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2025-11-13-india-compliance@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20251113 DTEND;VALUE=DATE:20251114 SUMMARY:DPDP Act: Rules notified\; Board provisions apply DESCRIPTION:DPDP Rules\, 2025 notified\; Data Protection Board provisions i n force\nDPDP Rules phased rollout: https://blog.quldex.com/trends/dpdp-ru les-rollout\nDPDP Rules timeline: which obligations apply when: https://bl og.quldex.com/dpdp-rules-2025-timeline URL:https://blog.quldex.com/calendar#2025-11-13-india-compliance TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2025-11-13-ai-governance@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20251113 DTEND;VALUE=DATE:20251114 SUMMARY:DPDP Rules notified DESCRIPTION:Data Protection Board provisions in force.\nUsing personal data to train AI under India's DPDP Act: https://blog.quldex.com/dpdp-act-ai-t raining-personal-data URL:https://blog.quldex.com/calendar#2025-11-13-ai-governance TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2026-07-27-ai-governance@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20260727 DTEND;VALUE=DATE:20260728 SUMMARY:EU AI Act: Digital Omnibus\, Regulation (EU) 2026/1744\, enters int o force and postpones high-risk deadlines DESCRIPTION:EU AI Act: high-risk deadlines move\, transparency stays: https ://blog.quldex.com/trends/eu-ai-act-high-risk URL:https://blog.quldex.com/calendar#2026-07-27-ai-governance TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2026-08-02-ai-governance@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20260802 DTEND;VALUE=DATE:20260803 SUMMARY:EU AI Act: Article 50 transparency applies DESCRIPTION:EU AI Act: Article 50 transparency obligations apply\nEU AI Act : high-risk deadlines move\, transparency stays: https://blog.quldex.com/t rends/eu-ai-act-high-risk\nEU AI Act after the Digital Omnibus: what still applies in 2026 and what moved to 2027: https://blog.quldex.com/eu-ai-act -digital-omnibus-deadlines URL:https://blog.quldex.com/calendar#2026-08-02-ai-governance TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2026-09-11-eu-regulation@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20260911 DTEND;VALUE=DATE:20260912 SUMMARY:EU Cyber Resilience Act: Article 14 reporting applies DESCRIPTION:EU Cyber Resilience Act: Article 14 reporting obligations apply \; ENISA's Single Reporting Platform goes live\nEU Cyber Resilience Act re porting begins: https://blog.quldex.com/trends/eu-cyber-resilience-act\nEU Cyber Resilience Act reporting has started: what software vendors must do now: https://blog.quldex.com/cyber-resilience-act-reporting-obligations URL:https://blog.quldex.com/calendar#2026-09-11-eu-regulation TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2026-09-16-management-systems@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20260916 DTEND;VALUE=DATE:20260917 SUMMARY:ISO 9001:2026 published DESCRIPTION:ISO 9001:2026 transition: https://blog.quldex.com/trends/iso-90 01-2026-transition\nISO 9001:2026 transition audits: a planning guide for certification bodies: https://blog.quldex.com/iso-9001-2026-transition-aud it-planning URL:https://blog.quldex.com/calendar#2026-09-16-management-systems TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2026-11-13-india-compliance@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20261113 DTEND;VALUE=DATE:20261114 SUMMARY:DPDP Act: Consent managers DESCRIPTION:Rule 4: registration and obligations of consent managers.\nDPDP Rules timeline: which obligations apply when: https://blog.quldex.com/dpd p-rules-2025-timeline URL:https://blog.quldex.com/calendar#2026-11-13-india-compliance TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2026-12-02-ai-governance@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20261202 DTEND;VALUE=DATE:20261203 SUMMARY:EU AI Act: Marking deadline for existing generative AI DESCRIPTION:Systems on the market before 2 Aug 2026.\nEU AI Act after the D igital Omnibus: what still applies in 2026 and what moved to 2027: https:/ /blog.quldex.com/eu-ai-act-digital-omnibus-deadlines URL:https://blog.quldex.com/calendar#2026-12-02-ai-governance TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2027-03-31-management-systems@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20270331 DTEND;VALUE=DATE:20270401 SUMMARY:ISO 9001: Accreditation bodies ready DESCRIPTION:Latest date for accreditation bodies to assess against the 2026 edition.\nISO 9001:2026 transition audits: a planning guide for certifica tion bodies: https://blog.quldex.com/iso-9001-2026-transition-audit-planni ng URL:https://blog.quldex.com/calendar#2027-03-31-management-systems TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2027-05-13-ai-governance@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20270513 DTEND;VALUE=DATE:20270514 SUMMARY:DPDP Act: Core obligations apply DESCRIPTION:Notice\, consent\, security\, breach reporting and Rule 16 (res earch standards).\nUsing personal data to train AI under India's DPDP Act: https://blog.quldex.com/dpdp-act-ai-training-personal-data URL:https://blog.quldex.com/calendar#2027-05-13-ai-governance TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2027-05-13-india-compliance@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20270513 DTEND;VALUE=DATE:20270514 SUMMARY:DPDP Act: Core obligations apply DESCRIPTION:Rules 3\, 5 to 16\, 22 and 23.\nDPDP Rules timeline: which obli gations apply when: https://blog.quldex.com/dpdp-rules-2025-timeline URL:https://blog.quldex.com/calendar#2027-05-13-india-compliance TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2027-12-02-ai-governance@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20271202 DTEND;VALUE=DATE:20271203 SUMMARY:EU AI Act: Annex III high-risk obligations DESCRIPTION:EU AI Act after the Digital Omnibus: what still applies in 2026 and what moved to 2027: https://blog.quldex.com/eu-ai-act-digital-omnibus -deadlines URL:https://blog.quldex.com/calendar#2027-12-02-ai-governance TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2027-12-11-eu-regulation@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20271211 DTEND;VALUE=DATE:20271212 SUMMARY:EU Cyber Resilience Act: Full application DESCRIPTION:Essential cybersecurity requirements and conformity assessment apply.\nEU Cyber Resilience Act reporting has started: what software vendo rs must do now: https://blog.quldex.com/cyber-resilience-act-reporting-obl igations URL:https://blog.quldex.com/calendar#2027-12-11-eu-regulation TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2028-03-31-management-systems@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20280331 DTEND;VALUE=DATE:20280401 SUMMARY:ISO 9001: Initial certifications to 2026 only DESCRIPTION:ISO 9001:2026 transition audits: a planning guide for certifica tion bodies: https://blog.quldex.com/iso-9001-2026-transition-audit-planni ng URL:https://blog.quldex.com/calendar#2028-03-31-management-systems TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2028-08-02-ai-governance@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20280802 DTEND;VALUE=DATE:20280803 SUMMARY:EU AI Act: Annex I product-embedded AI DESCRIPTION:EU AI Act after the Digital Omnibus: what still applies in 2026 and what moved to 2027: https://blog.quldex.com/eu-ai-act-digital-omnibus -deadlines URL:https://blog.quldex.com/calendar#2028-08-02-ai-governance TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2029-09-30-management-systems@blog.quldex.com DTSTAMP:20260930T093531Z DTSTART;VALUE=DATE:20290930 DTEND;VALUE=DATE:20291001 SUMMARY:ISO 9001: Transition ends DESCRIPTION:Remaining 2015 certificates are no longer valid.\nISO 9001:2026 transition audits: a planning guide for certification bodies: https://blo g.quldex.com/iso-9001-2026-transition-audit-planning URL:https://blog.quldex.com/calendar#2029-09-30-management-systems TRANSP:TRANSPARENT END:VEVENT END:VCALENDAR