BEGIN:VCALENDAR VERSION:2.0 PRODID:-//wheresthe.ai//AI rule deadlines//EN CALSCALE:GREGORIAN METHOD:PUBLISH X-WR-CALNAME:AI rule deadlines (wheresthe.ai) X-PUBLISHED-TTL:PT24H BEGIN:VEVENT UID:br-tse-resolution-23755-2026-ai-elections-20261025-0@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20261025 DTEND;VALUE=DATE:20261026 SUMMARY:[BR] TSE AI election rules 2026: Second-round voting of Brazil's 2026 general elections (rules apply through the campaign) DESCRIPTION:Requires explicit\, prominent labelling of AI-generated or ma nipulated electoral content and the technology used\; bans publishing or boosting new synthetic content depicting candidates in the 72 hours befor e voting until 24 hours after\; bars AI systems from ranking candidates\, recommending votes or creating sexual imagery of candidates\; and requir es platforms to offer AI-declaration fields and compliance plans. Applies to campaigns\, users and internet platforms.\n\nhttps://wheresthe.ai/rul e/br-tse-resolution-23755-2026-ai-elections/ URL:https://wheresthe.ai/rule/br-tse-resolution-23755-2026-ai-elections/ END:VEVENT BEGIN:VEVENT UID:in-dpdp-act-2023-and-rules-2025-20261113-1@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20261113 DTEND;VALUE=DATE:20261114 SUMMARY:[IN] DPDP Act & Rules: Consent Manager registration framework (Ru le 4) comes into force DESCRIPTION:India's horizontal data protection law\, governing how 'data fiduciaries' (including AI developers and deployers) collect and process digital personal data\, with consent\, notice\, security\, breach-notific ation and data-principal rights. The DPDP Rules 2025 (notified 13/14 Nov 2025) operationalise it in phases: Data Protection Board provisions immed iately\, Consent Managers after 12 months and the main obligations after 18 months.\n\nhttps://wheresthe.ai/rule/in-dpdp-act-2023-and-rules-2025/ URL:https://wheresthe.ai/rule/in-dpdp-act-2023-and-rules-2025/ END:VEVENT BEGIN:VEVENT UID:us-eo-14434-super-intelligence-terminology-2026-20261128-2@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20261128 DTEND;VALUE=DATE:20261129 SUMMARY:[US] EO 14434 ('Super Intelligence' terminology): OSTP to propose statutory definition of 'Super Intelligence' and conforming amendments DESCRIPTION:Requires executive-branch agencies\, to the extent permitted by law\, to use 'Super Intelligence' and 'SI' instead of 'Artificial Inte lligence' and 'AI' in correspondence\, websites\, reports and policy docu ments\, defining SI by reference to the existing statutory definition of AI (15 U.S.C. 9401(3)). It asks OSTP to propose legislation within 60 day s on whether a statutory 'Super Intelligence' definition should supersede 'artificial intelligence'.\n\nhttps://wheresthe.ai/rule/us-eo-14434-supe r-intelligence-terminology-2026/ URL:https://wheresthe.ai/rule/us-eo-14434-super-intelligence-terminology-2026/ END:VEVENT BEGIN:VEVENT UID:cl-law-21719-data-protection-automated-decisions-20261201-3@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20261201 DTEND;VALUE=DATE:20261202 SUMMARY:[CL] Chile data protection law (automated decisions): Law 21.719 enters into force\, including the right not to be subject to solely autom ated decisions DESCRIPTION:New GDPR-style data protection law\; Article 8 bis gives indi viduals the right to object to and not be subject to decisions based sole ly on automated processing\, including profiling\, that produce legal or similarly significant effects\, with exceptions for contracts\, express c onsent or law\, and requires safeguards including information\, explanati on\, human intervention and the right to contest. Applies to all controll ers processing personal data in Chile.\n\nhttps://wheresthe.ai/rule/cl-la w-21719-data-protection-automated-decisions/ URL:https://wheresthe.ai/rule/cl-law-21719-data-protection-automated-decisions/ END:VEVENT BEGIN:VEVENT UID:eu-ai-act-2024-1689-20261202-4@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20261202 DTEND;VALUE=DATE:20261203 SUMMARY:[EU] EU AI Act: New bans on non-consensual sexual deepfake ('nudi fier') and CSAM-generating AI apply\; grace period ends for watermarking by generative AI systems placed on the market before 2 Aug 2026 DESCRIPTION:Risk-based EU law that bans certain AI practices\, imposes co nformity\, documentation and oversight duties on high-risk AI systems\, t ransparency duties on chatbots and generative AI\, and separate duties on general-purpose AI (GPAI) model providers. It applies to providers\, dep loyers\, importers and distributors whose AI systems are placed on the EU market or whose outputs are used in the EU.\n\nhttps://wheresthe.ai/rule /eu-ai-act-2024-1689/ URL:https://wheresthe.ai/rule/eu-ai-act-2024-1689/ END:VEVENT BEGIN:VEVENT UID:eu-digital-omnibus-ai-2026-1744-20261202-5@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20261202 DTEND;VALUE=DATE:20261203 SUMMARY:[EU] Digital Omnibus on AI: New Article 5 prohibitions (non-conse nsual intimate deepfakes\, CSAM generation) apply\; legacy generative AI systems must meet Article 50(2) marking DESCRIPTION:Amends the AI Act: postpones high-risk obligations to 2 Dec 2 027 (Annex III stand-alone systems) and 2 Aug 2028 (Annex I product-embed ded systems)\, adds bans on AI that generates non-consensual sexual image s of identifiable people or child sexual abuse material from 2 Dec 2026\, and gives pre-Aug-2026 generative systems until 2 Dec 2026 to watermark outputs. It also softens the AI-literacy duty to 'take measures to suppor t' literacy\, allows processing of special-category data for bias detecti on\, simplifies registration\, extends SME relief to small mid-caps and m oves national sandbox deadline to 2 Aug 2027.\n\nhttps://wheresthe.ai/rul e/eu-digital-omnibus-ai-2026-1744/ URL:https://wheresthe.ai/rule/eu-digital-omnibus-ai-2026-1744/ END:VEVENT BEGIN:VEVENT UID:eu-code-of-practice-transparency-ai-generated-content-2026-20261202-6@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20261202 DTEND;VALUE=DATE:20261203 SUMMARY:[EU] AI content marking and labelling code: Deadline for generati ve AI systems placed on the market before 2 Aug 2026 to comply with Artic le 50(2) marking DESCRIPTION:Voluntary code supporting AI Act Article 50(2)\, (4) and (5): providers of generative AI systems commit to machine-readable marking an d detectability of AI outputs\; deployers commit to labelling deepfakes a nd AI-generated text published on matters of public interest\, using an E U icon set. The Commission and AI Board confirmed it as an adequate tool to demonstrate compliance\; about 190 organisations had signed by end Jul y 2026.\n\nhttps://wheresthe.ai/rule/eu-code-of-practice-transparency-ai- generated-content-2026/ URL:https://wheresthe.ai/rule/eu-code-of-practice-transparency-ai-generated-content-2026/ END:VEVENT BEGIN:VEVENT UID:eu-product-liability-directive-2024-2853-20261209-7@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20261209 DTEND;VALUE=DATE:20261210 SUMMARY:[EU] New Product Liability Directive: Member State transposition deadline\; new rules apply to products (including software and AI systems ) placed on the market from this date DESCRIPTION:Replaces the 1985 directive with no-fault liability for defec tive products that expressly covers software\, including AI systems\, and allows claims for damage including destroyed data\; it eases the burden of proof for claimants in complex technical cases. It applies to manufact urers\, importers and other economic operators for products placed on the EU market from 9 Dec 2026.\n\nhttps://wheresthe.ai/rule/eu-product-liabi lity-directive-2024-2853/ URL:https://wheresthe.ai/rule/eu-product-liability-directive-2024-2853/ END:VEVENT BEGIN:VEVENT UID:au-privacy-act-automated-decision-transparency-20261210-8@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20261210 DTEND;VALUE=DATE:20261211 SUMMARY:[AU] Privacy Act ADM transparency: APP 1.7–1.9 automated decision -making disclosures in privacy policies apply DESCRIPTION:Requires entities covered by the Privacy Act to state in thei r privacy policies the kinds of personal information used\, and the kinds of decisions made\, by computer programs that make or substantially and directly assist decisions significantly affecting individuals' rights or interests. It is a transparency duty only\, with no right to contest.\n\n https://wheresthe.ai/rule/au-privacy-act-automated-decision-transparency/ URL:https://wheresthe.ai/rule/au-privacy-act-automated-decision-transparency/ END:VEVENT BEGIN:VEVENT UID:us-ca-ccpa-admt-regulations-2025-20270101-9@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20270101 DTEND;VALUE=DATE:20270102 SUMMARY:[US-CA] CCPA ADMT regulations: ADMT notice\, opt-out and access d uties apply to businesses using ADMT for significant decisions DESCRIPTION:Updates the California Consumer Privacy Act regulations to gi ve consumers rights to pre-use notice\, opt-out and access when businesse s use automated decision-making technology for significant decisions (e.g . employment\, lending\, housing\, health care\, education)\, and require s risk assessments and annual cybersecurity audits for high-risk processi ng. Applies to businesses subject to the CCPA.\n\nhttps://wheresthe.ai/ru le/us-ca-ccpa-admt-regulations-2025/ URL:https://wheresthe.ai/rule/us-ca-ccpa-admt-regulations-2025/ END:VEVENT BEGIN:VEVENT UID:us-ca-ai-transparency-act-sb942-20270101-10@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20270101 DTEND;VALUE=DATE:20270102 SUMMARY:[US-CA] CA AI Transparency Act: Large online platforms must detec t and display embedded provenance data DESCRIPTION:Requires generative AI providers whose systems are publicly a ccessible in California to offer a free disclosure-verification tool and embed latent provenance disclosures (provider\, system and version\, crea tion date\, unique identifier\, and whether AI created or altered the con tent) in AI-generated or altered image\, video and audio. AB 853 delayed operation to 2 Aug 2026 and extended duties to large online platforms (20 27) and capture-device makers (2028)\; SB 1000 (urgency statute\, effecti ve 30 Sep 2026) removed the 1-million-user threshold and the manifest-lab el option.\n\nhttps://wheresthe.ai/rule/us-ca-ai-transparency-act-sb942/ URL:https://wheresthe.ai/rule/us-ca-ai-transparency-act-sb942/ END:VEVENT BEGIN:VEVENT UID:us-co-sb26-189-admt-2026-20270101-11@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20270101 DTEND;VALUE=DATE:20270102 SUMMARY:[US-CO] SB 26-189 (Colorado ADMT law): Developer documentation\, deployer notice and adverse-decision disclosure duties start\; AG rules d ue DESCRIPTION:Requires developers of automated decision-making technology t hat materially influences consequential decisions (education\, employment \, housing\, lending\, insurance\, health care\, government services) to give deployers technical documentation\, and deployers to notify consumer s at the point of use and explain the tool's role within 30 days of an ad verse decision. Consumers can access and correct data and request meaning ful human review\; both parties keep records for 3 years.\n\nhttps://wher esthe.ai/rule/us-co-sb26-189-admt-2026/ URL:https://wheresthe.ai/rule/us-co-sb26-189-admt-2026/ END:VEVENT BEGIN:VEVENT UID:us-ny-raise-act-20270101-12@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20270101 DTEND;VALUE=DATE:20270102 SUMMARY:[US-NY] RAISE Act: Frontier developer obligations and DFS oversig ht office take effect DESCRIPTION:Requires large frontier developers (over $500M revenue\; mode ls above 10^26 operations) to publish a frontier AI framework\, file disc losure statements and pay fees to a new office in the Department of Finan cial Services\, and report critical safety incidents within 72 hours (24 hours if imminent risk of death or serious injury). The March 2026 chapte r amendment aligned the law closely with California's SB 53.\n\nhttps://w heresthe.ai/rule/us-ny-raise-act/ URL:https://wheresthe.ai/rule/us-ny-raise-act/ END:VEVENT BEGIN:VEVENT UID:us-il-sb315-ai-safety-measures-act-2026-20270101-13@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20270101 DTEND;VALUE=DATE:20270102 SUMMARY:[US-IL] Illinois AI Safety Measures Act: First obligations apply DESCRIPTION:Requires large frontier developers (over $500M revenue\; mode ls trained above 10^26 operations) to publish and annually update a front ier AI framework\, issue transparency reports before deployment\, protect unreleased model weights\, report critical safety incidents within 72 ho urs (24 hours for imminent threats) and file annual disclosures with the Illinois Emergency Management Agency. It is the first US law to require a nnual independent third-party audits of frontier developers.\n\nhttps://w heresthe.ai/rule/us-il-sb315-ai-safety-measures-act-2026/ URL:https://wheresthe.ai/rule/us-il-sb315-ai-safety-measures-act-2026/ END:VEVENT BEGIN:VEVENT UID:vn-law-on-artificial-intelligence-2025-20270301-14@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20270301 DTEND;VALUE=DATE:20270302 SUMMARY:[VN] AI Law: Existing AI systems (other sectors) must comply\; fi nance\, health and education systems by 1 Sep 2027 DESCRIPTION:Comprehensive risk-based AI law classifying systems as high\, medium or low risk\, with conformity assessment and registration for hig h-risk systems\, disclosure when users interact with AI\, labelling of AI -generated audio/images/video that could mislead\, incident reporting via a national AI portal\, and prohibited practices. Foreign providers of hi gh-risk systems need a local presence or representative.\n\nhttps://where sthe.ai/rule/vn-law-on-artificial-intelligence-2025/ URL:https://wheresthe.ai/rule/vn-law-on-artificial-intelligence-2025/ END:VEVENT BEGIN:VEVENT UID:ca-osfi-guideline-e23-model-risk-2027-20270501-15@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20270501 DTEND;VALUE=DATE:20270502 SUMMARY:[CA] OSFI E-23: Guideline E-23 takes effect for federally regulat ed financial institutions DESCRIPTION:Supervisory guideline setting enterprise-wide model risk mana gement expectations\, explicitly covering AI/ML models\, across the model lifecycle (inventory\, risk rating\, validation\, monitoring\, governanc e). Applies to federally regulated banks\, insurers and trust and loan co mpanies.\n\nhttps://wheresthe.ai/rule/ca-osfi-guideline-e23-model-risk-20 27/ URL:https://wheresthe.ai/rule/ca-osfi-guideline-e23-model-risk-2027/ END:VEVENT BEGIN:VEVENT UID:us-ca-sb243-companion-chatbots-2025-20270701-16@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20270701 DTEND;VALUE=DATE:20270702 SUMMARY:[US-CA] SB 243: Operators' first annual reports to the Office of Suicide Prevention DESCRIPTION:Requires operators of 'companion chatbot' platforms to disclo se that users are talking to AI\, maintain protocols to detect and respon d to suicidal ideation and self-harm (including crisis referrals)\, and\, for known minors\, give break reminders and block sexually explicit cont ent. Operators must publish their protocols and report annually to the Of fice of Suicide Prevention.\n\nhttps://wheresthe.ai/rule/us-ca-sb243-comp anion-chatbots-2025/ URL:https://wheresthe.ai/rule/us-ca-sb243-companion-chatbots-2025/ END:VEVENT BEGIN:VEVENT UID:us-ca-sb1119-adams-law-companion-chatbots-children-2026-20270701-17@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20270701 DTEND;VALUE=DATE:20270702 SUMMARY:[US-CA] SB 1119 / Adam's Law: Pre-release child-safety risk asses sments and child-account protections apply\; first independent child-safe ty audit due by 1 Jan 2029 (or before first public release)\, then every two years DESCRIPTION:Requires companion-chatbot operators\, from 1 Jul 2027\, to p erform and document a comprehensive child-safety risk assessment before r eleasing a new or substantially modified chatbot\, and to provide child-a ccount protections and parental controls. Operators must also obtain inde pendent child-safety audits (first by 1 Jan 2029 or before first public r elease\, then every two years)\; the Attorney General can request audit r eports for cause.\n\nhttps://wheresthe.ai/rule/us-ca-sb1119-adams-law-com panion-chatbots-children-2026/ URL:https://wheresthe.ai/rule/us-ca-sb1119-adams-law-companion-chatbots-children-2026/ END:VEVENT BEGIN:VEVENT UID:us-ca-sb947-no-robo-bosses-2026-20270701-18@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20270701 DTEND;VALUE=DATE:20270702 SUMMARY:[US-CA] SB 947: First obligations apply DESCRIPTION:Bars California employers from relying solely on automated de cision systems for discipline or termination decisions\, requires human r eview and corroboration\, and requires notice to affected workers includi ng a description of the data used. Protects workers from retaliation for asserting these rights.\n\nhttps://wheresthe.ai/rule/us-ca-sb947-no-robo- bosses-2026/ URL:https://wheresthe.ai/rule/us-ca-sb947-no-robo-bosses-2026/ END:VEVENT BEGIN:VEVENT UID:us-ut-ai-policy-act-20270701-19@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20270701 DTEND;VALUE=DATE:20270702 SUMMARY:[US-UT] Utah AI Policy Act: Act scheduled to repeal unless extend ed DESCRIPTION:Requires disclosure of generative AI use in consumer transact ions when a consumer asks\, and proactive disclosure in 'high-risk' inter actions and in regulated occupations (e.g. health\, legal\, financial adv ice)\; makes companies liable under consumer-protection law for their gen erative AI's statements. Creates the Office of Artificial Intelligence Po licy and an AI 'Learning Lab' that can grant regulatory mitigation agreem ents.\n\nhttps://wheresthe.ai/rule/us-ut-ai-policy-act/ URL:https://wheresthe.ai/rule/us-ut-ai-policy-act/ END:VEVENT BEGIN:VEVENT UID:eu-gpai-code-of-practice-2025-20270802-20@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20270802 DTEND;VALUE=DATE:20270803 SUMMARY:[EU] GPAI Code of Practice: GPAI models placed on the market befo re 2 Aug 2025 must comply with AI Act GPAI obligations DESCRIPTION:Voluntary code that GPAI model providers can sign to demonstr ate compliance with AI Act Articles 53 and 55: a model documentation form \, a copyright policy\, and (for systemic-risk models only) safety and se curity practices. The Commission and AI Board confirmed it as an adequate compliance tool\; signatories include Amazon\, Anthropic\, Google\, IBM\ , Microsoft\, Mistral AI and OpenAI\, with xAI signing only the Safety an d Security chapter.\n\nhttps://wheresthe.ai/rule/eu-gpai-code-of-practice -2025/ URL:https://wheresthe.ai/rule/eu-gpai-code-of-practice-2025/ END:VEVENT BEGIN:VEVENT UID:us-ca-sb813-ab1405-ai-verification-auditors-2026-20280101-21@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20280101 DTEND;VALUE=DATE:20280102 SUMMARY:[US-CA] SB 813 / AB 1405: Government Operations Agency must set a pplication requirements and process for designating independent verificat ion organizations (SB 813)\; AI Auditor Registry due by 1 Jan 2029 (AB 14 05) DESCRIPTION:SB 813 creates a state framework to certify independent verif ication organizations that assess AI systems and models for safety and ri sk\; AB 1405 has the Government Operations Agency set up a registry of AI auditors with independence and transparency standards and bars unregiste red persons from conducting covered AI audits.\n\nhttps://wheresthe.ai/ru le/us-ca-sb813-ab1405-ai-verification-auditors-2026/ URL:https://wheresthe.ai/rule/us-ca-sb813-ab1405-ai-verification-auditors-2026/ END:VEVENT BEGIN:VEVENT UID:us-il-sb315-ai-safety-measures-act-2026-20280101-22@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20280101 DTEND;VALUE=DATE:20280102 SUMMARY:[US-IL] Illinois AI Safety Measures Act: Large frontier developer s must publish frontier AI frameworks\; audit and reporting duties begin DESCRIPTION:Requires large frontier developers (over $500M revenue\; mode ls trained above 10^26 operations) to publish and annually update a front ier AI framework\, issue transparency reports before deployment\, protect unreleased model weights\, report critical safety incidents within 72 ho urs (24 hours for imminent threats) and file annual disclosures with the Illinois Emergency Management Agency. It is the first US law to require a nnual independent third-party audits of frontier developers.\n\nhttps://w heresthe.ai/rule/us-il-sb315-ai-safety-measures-act-2026/ URL:https://wheresthe.ai/rule/us-il-sb315-ai-safety-measures-act-2026/ END:VEVENT BEGIN:VEVENT UID:tw-ai-basic-act-2026-20280114-23@wheresthe.ai DTSTAMP:20261007T000000Z DTSTART;VALUE=DATE:20280114 DTEND;VALUE=DATE:20280115 SUMMARY:[TW] AI Basic Act: Deadline for government to amend or adopt laws and administrative measures to conform with the Act (2 years after entry into force) DESCRIPTION:Framework law setting seven principles for AI\, designating N STC as the central competent authority and tasking MODA with an AI risk c lassification framework\; sector regulators are to issue risk-based rules \, high-risk AI products must carry clear warnings\, and government may r estrict or prohibit harmful AI uses. It imposes no immediate operational obligations on private companies.\n\nhttps://wheresthe.ai/rule/tw-ai-basi c-act-2026/ URL:https://wheresthe.ai/rule/tw-ai-basic-act-2026/ END:VEVENT END:VCALENDAR