BEGIN:VCALENDAR VERSION:2.0 PRODID:-//Governome//AI Compliance Deadlines//EN CALSCALE:GREGORIAN METHOD:PUBLISH X-WR-CALNAME:Governome — AI compliance deadlines BEGIN:VEVENT UID:au-adm-transparency@governome.com DTSTAMP:20261030T000000Z DTSTART;VALUE=DATE:20261210 DTEND;VALUE=DATE:20261211 SUMMARY:Australia: Automated decision-making transparency (Privacy Act\, AP P 1.7 to 1.9) DESCRIPTION:Entities covered by the Australian Privacy Principles must say in their privacy policy when a computer program that uses personal informa tion makes\, or carries out a step central to making\, a decision that cou ld significantly affect a person's rights or interests. Details and source s: https://governome.com/deadlines#au-adm-transparency URL:https://governome.com/regulations/australia-ai-regulation END:VEVENT BEGIN:VEVENT UID:eu-art5-new@governome.com DTSTAMP:20261030T000000Z DTSTART;VALUE=DATE:20261202 DTEND;VALUE=DATE:20261203 SUMMARY:European Union: New Article 5 prohibition on AI-generated child sex ual abuse material DESCRIPTION:The consolidated text of Article 5 adds prohibitions on AI that generates non-consensual intimate or sexually explicit images of identifi able people and AI that generates child sexual abuse material. The consoli dated text dates the second from December 2\, 2026. We could not confirm t he application date of the first\, or the amending instrument\, from the O fficial Journal. Details and sources: https://governome.com/deadlines#eu-a rt5-new URL:https://governome.com/regulations/eu-ai-act-article-5-the-prohibited-ai -practices-explained END:VEVENT BEGIN:VEVENT UID:co-sb-26-189@governome.com DTSTAMP:20261030T000000Z DTSTART;VALUE=DATE:20270101 DTEND;VALUE=DATE:20270102 SUMMARY:Colorado: SB 26-189 developer duties begin; attorney general rules due DESCRIPTION:Developers of automated decision-making technology used in cons equential decisions must provide deployers with documentation\, and the at torney general must adopt rules on post-adverse-outcome disclosures by thi s date. SB 26-189 repealed and replaced the original SB 24-205\, which nev er took effect. For actions before January 1\, 2030 the attorney general m ust give 60 days' notice and a chance to cure where possible. Details and sources: https://governome.com/deadlines#co-sb-26-189 URL:https://governome.com/regulations/us-colorado-ai-act END:VEVENT BEGIN:VEVENT UID:ca-admt@governome.com DTSTAMP:20261030T000000Z DTSTART;VALUE=DATE:20270101 DTEND;VALUE=DATE:20270102 SUMMARY:California: CPPA automated decision-making technology (ADMT) rules apply DESCRIPTION:Businesses that use ADMT to make significant decisions about co nsumers must comply with the ADMT requirements\, including pre-use notice and consumer rights\, by this date. A business already using ADMT for sign ificant decisions before this date has until this date to comply. Details and sources: https://governome.com/deadlines#ca-admt URL:https://governome.com/regulations/us-california-ai-regulations END:VEVENT BEGIN:VEVENT UID:ny-raise@governome.com DTSTAMP:20261030T000000Z DTSTART;VALUE=DATE:20270101 DTEND;VALUE=DATE:20270102 SUMMARY:New York: RAISE Act takes effect DESCRIPTION:Large developers of frontier AI models must maintain and publis h a safety and security protocol and report safety incidents. A chapter am endment signed March 27\, 2026 (chapter 96) moved the effective date from 90 days after signing to January 1\, 2027. Details and sources: https://go vernome.com/deadlines#ny-raise URL:https://governome.com/regulations/new-york-ai-regulations-beyond-nyc-lo cal-law-144 END:VEVENT BEGIN:VEVENT UID:wa-hb-2225@governome.com DTSTAMP:20261030T000000Z DTSTART;VALUE=DATE:20270101 DTEND;VALUE=DATE:20270102 SUMMARY:Washington: HB 2225 AI companion chatbot rules take effect DESCRIPTION:Operators of AI companion chatbots take on disclosure and safet y duties\, including recurring notifications to users during a conversatio n and stricter intervals for minors. Details and sources: https://governom e.com/deadlines#wa-hb-2225 URL:https://governome.com/regulations/washington-state-ai-regulations-curre nt-status END:VEVENT BEGIN:VEVENT UID:ct-companions@governome.com DTSTAMP:20261030T000000Z DTSTART;VALUE=DATE:20270101 DTEND;VALUE=DATE:20270102 SUMMARY:Connecticut: SB 5 (Public Act 26-15) AI companion provisions take e ffect DESCRIPTION:Systems built to simulate a sustained human-like relationship w ith a user take on the act's companion-chatbot duties. The act's other tra cks start on different dates. Details and sources: https://governome.com/d eadlines#ct-companions URL:https://governome.com/regulations/connecticut-ai-regulation-where-the-b ill-actually-stands END:VEVENT BEGIN:VEVENT UID:wa-hb-1170@governome.com DTSTAMP:20261030T000000Z DTSTART;VALUE=DATE:20270201 DTEND;VALUE=DATE:20270202 SUMMARY:Washington: HB 1170 AI content provenance rules take effect DESCRIPTION:Covered providers of generative AI systems must offer a free to ol letting the public check whether image\, video or audio content was cre ated or materially altered by their system\, and support disclosure data i n the content. Only the attorney general can enforce it; there is no priva te right of action. Details and sources: https://governome.com/deadlines#w a-hb-1170 URL:https://governome.com/regulations/washington-state-ai-regulations-curre nt-status END:VEVENT BEGIN:VEVENT UID:ut-sunset@governome.com DTSTAMP:20261030T000000Z DTSTART;VALUE=DATE:20270701 DTEND;VALUE=DATE:20270702 SUMMARY:Utah: Artificial Intelligence Policy Act scheduled repeal DESCRIPTION:SB 332 (2025) extended the Policy Act's repeal date to July 1\, 2027. A 2026 legislative interim committee recommended extending it again \, but we have not found that enacted\, so check the Utah Legislature befo re planning around either outcome. Details and sources: https://governome. com/deadlines#ut-sunset URL:https://governome.com/regulations/utah-ai-policy-act-a-practical-breakd own END:VEVENT BEGIN:VEVENT UID:eu-annex-iii@governome.com DTSTAMP:20261030T000000Z DTSTART;VALUE=DATE:20271202 DTEND;VALUE=DATE:20271203 SUMMARY:European Union: High-risk AI obligations apply to standalone Annex III systems DESCRIPTION:The EU AI Act's high-risk requirements\, including provider dut ies\, deployer duties under Article 26 and the fundamental rights impact a ssessment under Article 27\, apply to stand-alone high-risk systems such a s those used for employment\, credit\, education and biometrics. The Digit al Omnibus on AI moved this date from August 2\, 2026. Details and sources : https://governome.com/deadlines#eu-annex-iii URL:https://governome.com/regulations/eu-ai-act-full-implementation-timelin e-what-s-live-what-s-next END:VEVENT BEGIN:VEVENT UID:ca-risk-assessments-existing@governome.com DTSTAMP:20261030T000000Z DTSTART;VALUE=DATE:20271231 DTEND;VALUE=DATE:20280101 SUMMARY:California: Risk assessments due for processing already under way DESCRIPTION:For processing that began before the CPPA regulations took effe ct and continues afterward\, a business must complete and document a risk assessment by this date. Details and sources: https://governome.com/deadli nes#ca-risk-assessments-existing URL:https://governome.com/regulations/us-california-ai-regulations END:VEVENT BEGIN:VEVENT UID:ct-minors@governome.com DTSTAMP:20261030T000000Z DTSTART;VALUE=DATE:20280101 DTEND;VALUE=DATE:20280102 SUMMARY:Connecticut: SB 5 obligations for recommendation-driven platforms u sed by minors DESCRIPTION:The act's farthest-out track covers notification limits\, paren tal controls\, warning labels and restrictions on engagement-maximizing fe eds for users a platform knows are minors. Details and sources: https://go vernome.com/deadlines#ct-minors URL:https://governome.com/regulations/connecticut-ai-regulation-where-the-b ill-actually-stands END:VEVENT BEGIN:VEVENT UID:ca-submissions-2028@governome.com DTSTAMP:20261030T000000Z DTSTART;VALUE=DATE:20280401 DTEND;VALUE=DATE:20280402 SUMMARY:California: First risk assessment submissions and cybersecurity aud it reports due to the CPPA DESCRIPTION:Businesses must submit information on risk assessments conducte d in 2026 and 2027 to the CPPA by this date. Businesses with 2026 gross re venue above $100 million must also have their first cybersecurity audit re port ready\, covering January 1\, 2027 to January 1\, 2028. Details and so urces: https://governome.com/deadlines#ca-submissions-2028 URL:https://governome.com/regulations/us-california-ai-regulations END:VEVENT BEGIN:VEVENT UID:eu-annex-i@governome.com DTSTAMP:20261030T000000Z DTSTART;VALUE=DATE:20280802 DTEND;VALUE=DATE:20280803 SUMMARY:European Union: High-risk AI obligations apply to systems embedded in Annex I products DESCRIPTION:The same high-risk requirements apply to AI systems that are sa fety components of\, or are themselves\, products covered by the EU harmon isation legislation listed in Annex I\, such as medical devices\, machiner y and vehicles. Details and sources: https://governome.com/deadlines#eu-an nex-i URL:https://governome.com/regulations/eu-ai-act-full-implementation-timelin e-what-s-live-what-s-next END:VEVENT END:VCALENDAR