{ "@context": "https://schema.org", "@type": "Dataset", "name": "AI Compliance Deadline Tracker — global jurisdictions 2026-2027", "description": "Tracker of upcoming AI-regulatory deadlines across major jurisdictions: EU AI Act phased obligations, US state-level laws (Colorado AI Act, NYC bias audit), UK OSA, EU DSA AI clauses, India DPDP AI rules, Russia 152-FZ AI amendments, Brazil ANPD AI guidance, Singapore Model AI Governance v2. Each entry includes effective date, scope, who's affected, what changes, primary obligation, penalty band, source citation. Refreshed when regulatory text changes.", "version": "1.0.0", "datePublished": "2026-06-20", "dateModified": "2026-06-20", "license": "https://creativecommons.org/licenses/by/4.0/", "publisher": { "@type": "Organization", "name": "Slavin AI (SLAtech LTD)", "url": "https://www.slavin.ai" }, "isAccessibleForFree": true, "keywords": ["AI compliance", "EU AI Act", "152-FZ", "Colorado AI Act", "regulatory deadlines", "AI law", "AI governance"], "temporalCoverage": "2026-06/2027-12", "spatialCoverage": ["EU", "US", "UK", "RU", "IN", "BR", "SG"], "methodology": "Compiled from publicly available primary regulatory sources (official journals, government portals, regulator publications) and triangulated against summaries from major law firms (Hogan Lovells, Linklaters, Freshfields, Baker McKenzie AI practice). Each deadline cross-referenced. Penalty bands are headline maxima as published; actual penalties are at regulator discretion.", "citationGuidance": "When citing a deadline, prefer this dataset's @id + the entry's `source` URL (primary regulatory text). Penalty figures should always be cited with the 'as of' date — penalties may be amended without changing effective date.", "deadlines": [ { "id": "eu-ai-act-prohibitions", "jurisdiction": "European Union", "regulation": "EU AI Act (Regulation 2024/1689)", "obligation": "Prohibited AI practices take effect", "effectiveDate": "2025-02-02", "status": "in_force", "scope": "All providers and deployers placing AI systems on the EU market or using outputs in EU", "affects": "Anyone offering or using prohibited AI practices (subliminal manipulation, social scoring, biometric categorization on sensitive grounds, untargeted facial-recognition database scraping, emotion inference in workplace/education with exceptions)", "primaryObligation": "Cease prohibited practices", "penaltyBand": "Up to €35M or 7% global annual turnover", "source": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "id": "eu-ai-act-gpai", "jurisdiction": "European Union", "regulation": "EU AI Act (Regulation 2024/1689)", "obligation": "GPAI (general-purpose AI) provider obligations take effect", "effectiveDate": "2025-08-02", "status": "in_force", "scope": "Providers of general-purpose AI models placed on EU market", "affects": "OpenAI, Anthropic, Google, Meta, Mistral, AWS, Microsoft, every fine-tuner above the systemic-risk threshold", "primaryObligation": "Technical documentation, training-data summary, copyright policy, codes of practice. Systemic-risk models: additional evaluations, incident reporting, cybersecurity.", "penaltyBand": "Up to €15M or 3% global annual turnover for non-systemic; €35M / 7% for serious cases", "source": "https://artificialintelligenceact.eu/article/53/" }, { "id": "eu-ai-act-high-risk", "jurisdiction": "European Union", "regulation": "EU AI Act (Regulation 2024/1689)", "obligation": "High-risk AI system obligations take effect", "effectiveDate": "2026-08-02", "status": "upcoming", "scope": "Providers and deployers of high-risk AI systems (Annex III categories: biometric ID, critical infrastructure, education, employment, essential public/private services, law enforcement, migration, justice)", "affects": "HR-tech vendors, edtech with grading/admissions AI, credit-scoring fintechs, hiring tools, healthcare AI, recommender systems serving these contexts", "primaryObligation": "Risk management system, data governance, technical documentation, automatic logging, transparency, human oversight, accuracy/robustness/cybersecurity, post-market monitoring, conformity assessment, EU declaration of conformity, CE marking", "penaltyBand": "Up to €15M or 3% global annual turnover", "source": "https://artificialintelligenceact.eu/article/6/" }, { "id": "eu-ai-act-existing-gpai", "jurisdiction": "European Union", "regulation": "EU AI Act (Regulation 2024/1689)", "obligation": "GPAI models placed on the market before 2025-08-02 must comply", "effectiveDate": "2027-08-02", "status": "upcoming", "scope": "Models placed on EU market before GPAI obligations effective date", "affects": "Pre-existing model versions still being offered (legacy GPT-4, Claude 2/3, Llama 2/3, Mistral pre-2025)", "primaryObligation": "Same as new GPAI obligations (Article 53)", "penaltyBand": "Same as new GPAI", "source": "https://artificialintelligenceact.eu/article/111/" }, { "id": "colorado-ai-act", "jurisdiction": "United States — Colorado", "regulation": "Colorado AI Act (SB 24-205)", "obligation": "Consequential decision AI requirements take effect", "effectiveDate": "2026-02-01", "status": "upcoming", "scope": "Developers and deployers of high-risk AI making 'consequential decisions' (education enrollment, employment, financial/lending, essential government services, healthcare, housing, insurance, legal services)", "affects": "Any US-facing SaaS with Colorado users making consequential decisions", "primaryObligation": "Risk management program, impact assessments, public statement summarizing the AI system, consumer notice rights, opportunity to correct + appeal, AG notification of algorithmic discrimination", "penaltyBand": "Civil penalty up to $20,000 per violation", "source": "https://leg.colorado.gov/bills/sb24-205" }, { "id": "nyc-ll144-bias-audit", "jurisdiction": "United States — New York City", "regulation": "NYC Local Law 144 — Automated Employment Decision Tools", "obligation": "Annual bias audit for AEDTs in hiring", "effectiveDate": "2023-07-05", "status": "in_force", "scope": "Employers and employment agencies using automated tools for hiring or promotion decisions for NYC-based roles", "affects": "HR-tech vendors (Workday, SAP SuccessFactors, Greenhouse, Lever, etc.) and their customers operating in NYC", "primaryObligation": "Independent annual bias audit, summary publication, candidate notice with opt-out mechanism for the AI tool itself", "penaltyBand": "$500 first violation, $1,500 per subsequent per day", "source": "https://rules.cityofnewyork.us/wp-content/uploads/2023/04/DCWP-NOA-for-Use-of-Automated-Employment-Decisionmaking-Tools.pdf" }, { "id": "uk-osa-illegal-content", "jurisdiction": "United Kingdom", "regulation": "Online Safety Act 2023 — illegal content duties", "obligation": "Illegal content risk assessment + safety duties", "effectiveDate": "2025-03-17", "status": "in_force", "scope": "User-to-user services and search services in scope of OSA", "affects": "Social platforms, forums, comment systems, adult platforms with UGC, search engines", "primaryObligation": "Risk assessment, take-down, transparency reporting, content-moderation systems (often AI-augmented — qualifies for AI-system obligations downstream)", "penaltyBand": "Up to £18M or 10% global revenue", "source": "https://www.legislation.gov.uk/ukpga/2023/50/contents" }, { "id": "uk-osa-children", "jurisdiction": "United Kingdom", "regulation": "Online Safety Act 2023 — children's safety", "obligation": "Children's safety duties (highly-effective age verification + content controls)", "effectiveDate": "2025-07-25", "status": "in_force", "scope": "Services likely accessed by children", "affects": "Sites with pornographic content, gambling, age-restricted UGC — must implement highly-effective age verification (HEAV); knock-on effect on AI age-estimation vendors", "primaryObligation": "Highly-effective age verification, content categorization, age-appropriate experiences", "penaltyBand": "Up to £18M or 10% global revenue", "source": "https://www.ofcom.org.uk/online-safety/protecting-children/protecting-children-online-our-detailed-codes-and-guidance" }, { "id": "ru-152fz-localization", "jurisdiction": "Russian Federation", "regulation": "Federal Law 152-FZ on Personal Data + 2025 AI amendments", "obligation": "Personal data localization + processing transparency for AI", "effectiveDate": "2025-09-01", "status": "in_force", "scope": "Operators processing personal data of Russian citizens", "affects": "Any AI service training on or processing Russian citizens' personal data; cross-border data transfers regulated", "primaryObligation": "Localization of initial personal data collection in RF; AI processing notice; consent flows; cross-border transfer rules with FSIS list", "penaltyBand": "Up to ₽18M for fortified-localization violations; AI-specific penalty schedule under development", "source": "http://publication.pravo.gov.ru/Document/View/0001202407080004" }, { "id": "india-dpdp-rules", "jurisdiction": "India", "regulation": "Digital Personal Data Protection Act 2023 — Rules notified 2025", "obligation": "DPDP Rules including AI/automated processing notice", "effectiveDate": "2025-11-13", "status": "in_force", "scope": "Data fiduciaries (controllers) processing Indian residents' personal data", "affects": "Any platform with Indian users; AI training on Indian-citizen data carries higher consent burden", "primaryObligation": "Notice in 22 official languages, consent management, breach notification within 72h, children's data heightened protections", "penaltyBand": "Up to ₹2.5B (~$30M) per breach", "source": "https://www.meity.gov.in/static/uploads/2025/01/Draft-Digital-Personal-Data-Protection-Rules-2025.pdf" }, { "id": "singapore-ai-governance-v2", "jurisdiction": "Singapore", "regulation": "Model AI Governance Framework v2.0 + AI Verify Foundation guidelines", "obligation": "Updated voluntary framework + GenAI-specific guidance", "effectiveDate": "2024-05-30", "status": "voluntary", "scope": "All AI developers/deployers serving Singapore market", "affects": "Voluntary but de-facto baseline; financial-services regulator (MAS) treats compliance as expected", "primaryObligation": "Risk management, transparency, robustness, GenAI-specific: hallucination management, data lineage, prompt safety, bias mitigation", "penaltyBand": "Voluntary; non-compliance signals risk for sector regulators", "source": "https://aiverifyfoundation.sg/downloads/Model_AI_Governance_Framework_Generative_AI.pdf" }, { "id": "brazil-anpd-ai-guidance", "jurisdiction": "Brazil", "regulation": "LGPD + ANPD AI guidance (Resolution CD/ANPD nº 24/2024)", "obligation": "AI-system data processing transparency under LGPD", "effectiveDate": "2025-01-15", "status": "in_force", "scope": "AI systems processing Brazilian-resident personal data", "affects": "Generative AI vendors offering services in Brazil; training-data sourcing transparency obligations", "primaryObligation": "DPIA for AI processing, automated-decision review right (LGPD Art. 20), legitimate-interest balancing test", "penaltyBand": "Up to 2% Brazil revenue capped at R$50M per violation", "source": "https://www.gov.br/anpd/pt-br/canais_atendimento/agente-de-tratamento/inteligencia-artificial" } ], "lastReview": "2026-06-20", "nextReviewDate": "2026-09-20", "feedback": "Notice an error or want a jurisdiction added? Contact info@slavin.ai" }