BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//ComplyRoom//US Compliance Deadlines//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:ComplyRoom AI & Privacy
BEGIN:VEVENT
UID:us-ftc-glba-privacy-base:operative:2001-07-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20010701
DTEND;VALUE=DATE:20010702
SUMMARY:FTC GLBA Privacy Rule — original final rule — Legal effective d
 ate: 2000-11-13\; principal compliance date: 2001-07-01.
DESCRIPTION:Legal effective date: 2000-11-13\; principal compliance date: 2
 001-07-01.\nCoverage: Unverified — Historical original rule for financia
 l institutions under FTC privacy-rule jurisdiction. Present jurisdiction f
 ollowing the CFPB transfer\, including the retained motor-vehicle-dealer s
 cope and later exceptions\, has not been independently reconciled in this 
 review.\nSource: https://www.federalregister.gov/documents/2000/05/24/00-1
 2755/privacy-of-consumer-financial-information\nNot legal advice. Verify a
 gainst primary sources.
URL:https://complyroom.com/ai-privacy/federal/us-ftc-glba-privacy-base/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:us-hipaa-security-base:operative:2005-04-21:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20050421
DTEND;VALUE=DATE:20050422
SUMMARY:HIPAA Security Rule — original final security standards — Legal
  effective date: 2003-04-21. General covered-entity compliance: 2005-04-21
 \; small-health-plan compliance: 2006-04-21.
DESCRIPTION:Legal effective date: 2003-04-21. General covered-entity compli
 ance: 2005-04-21\; small-health-plan compliance: 2006-04-21.\nCoverage: Fo
 r this original-rule record: HIPAA-covered health plans\, health care clea
 ringhouses and health care providers that conduct covered electronic trans
 actions\, protecting electronic PHI. Small health plans had an additional 
 year. Later direct business-associate duties are not attributed to this 20
 03 instrument.\nSource: https://www.federalregister.gov/documents/2003/02/
 20/03-3877/health-insurance-reform-security-standards\nNot legal advice. V
 erify against primary sources.
URL:https://complyroom.com/ai-privacy/federal/us-hipaa-security-base/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:us-ftc-disposal-rule:operative:2005-06-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20050601
DTEND;VALUE=DATE:20050602
SUMMARY:FTC Disposal Rule — consumer-report information and records — L
 egal effective date: 2005-06-01\; principal compliance date: 2005-06-01.
DESCRIPTION:Legal effective date: 2005-06-01\; principal compliance date: 2
 005-06-01.\nCoverage: Persons within FTC jurisdiction that maintain or oth
 erwise possess consumer information derived from consumer reports for a bu
 siness purpose\; can include users of consumer reports and service provide
 rs. This is not a universal disposal rule for every type of personal infor
 mation.\nSource: https://www.federalregister.gov/documents/2004/11/24/04-2
 5937/disposal-of-consumer-report-information-and-records\nNot legal advice
 . Verify against primary sources.
URL:https://complyroom.com/ai-privacy/federal/us-ftc-disposal-rule/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:il-biometric-information-privacy-act:operative:2008-10-03:0@complyroom.
 com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20081003
DTEND;VALUE=DATE:20081004
SUMMARY:Biometric Information Privacy Act (BIPA) — 2008-10-03\; current 
 §20 amendment effective 2024-08-02
DESCRIPTION:2008-10-03\; current §20 amendment effective 2024-08-02\nCover
 age: Private entities collecting or possessing covered biometric identifie
 rs or biometric information\; statutory exclusions apply.\nSource: https:/
 /www.ilga.gov/Legislation/ILCS/Articles?ActID=3004&ChapterID=57\nNot legal
  advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/illinois/il-biometric-information-pri
 vacy-act/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:wa-biometric-identifiers-commercial:operative:2017-07-23:0@complyroom.c
 om
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20170723
DTEND;VALUE=DATE:20170724
SUMMARY:Commercial biometric identifier enrollment restrictions — 2017-07
 -23
DESCRIPTION:2017-07-23\nCoverage: Non-government persons enrolling biometri
 c identifiers in a database for the chapter’s narrow commercial purpose\
 , including third-party marketing unrelated to the initial transaction\; s
 ecurity and law-enforcement uses are excluded.\nSource: https://app.leg.wa
 .gov/RCW/default.aspx?cite=19.375&full=true\nNot legal advice. Verify agai
 nst primary sources.
URL:https://complyroom.com/ai-privacy/washington/wa-biometric-identifiers-c
 ommercial/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:vt-data-broker-registration-security:operative:2019-01-01:0@complyroom.
 com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20190101
DTEND;VALUE=DATE:20190102
SUMMARY:Vermont data broker registration and security — 2019-01-01
DESCRIPTION:2019-01-01\nCoverage: Businesses knowingly collecting and selli
 ng or licensing brokered personal information of consumers with whom they 
 lack a direct relationship\, subject to statutory exclusions.\nSource: htt
 ps://legislature.vermont.gov/statutes/section/09/062/02430\nNot legal advi
 ce. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/vermont/vt-data-broker-registration-s
 ecurity/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:nv-online-sale-opt-out:operative:2019-10-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20191001
DTEND;VALUE=DATE:20191002
SUMMARY:Nevada online personal-information sale opt-out — 2019-10-01
DESCRIPTION:2019-10-01\nCoverage: Covered commercial online operators colle
 cting Nevada consumers’ information and purposefully doing business in o
 r targeting Nevada\; the current chapter also covers data brokers under la
 ter amendments. Statutory financial\, health and other exclusions apply.\n
 Source: https://www.leg.state.nv.us/Session/80th2019/Bills/SB/SB220_EN.pdf
 \nNot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/nevada/nv-online-sale-opt-out/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:il-ai-video-interview-act:operative:2020-01-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20200101
DTEND;VALUE=DATE:20200102
SUMMARY:Artificial Intelligence Video Interview Act — 2020-01-01
DESCRIPTION:2020-01-01\nCoverage: Employers asking applicants to record vid
 eo interviews and using AI analysis of those interviews for positions base
 d in Illinois.\nSource: https://www.ilga.gov/Legislation/ILCS/Articles?Act
 ID=4015&ChapterID=68\nNot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/illinois/il-ai-video-interview-act/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:or-connected-device-security:operative:2020-01-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20200101
DTEND;VALUE=DATE:20200102
SUMMARY:Connected-device reasonable security — 2020-01-01
DESCRIPTION:2020-01-01\nCoverage: Manufacturers of connected devices sold o
 r offered for sale in Oregon\, subject to the statutory definitions and ex
 clusions.\nSource: https://www.oregonlegislature.gov/bills_laws/lawsstatut
 es/2019orLaw0193.pdf\nNot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/oregon/or-connected-device-security/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:ny-shield-data-security:operative:2020-03-21:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20200321
DTEND;VALUE=DATE:20200322
SUMMARY:SHIELD Act private-information security safeguards — General brea
 ch amendments2019-10-23\; §4 safeguards2020-03-21
DESCRIPTION:General breach amendments2019-10-23\; §4 safeguards2020-03-21\
 nCoverage: Persons or businesses owning or licensing computerized data con
 taining New York residents’ private information\; size-appropriate safeg
 uards and statutory deemed-compliance provisions apply.\nSource: https://a
 g.ny.gov/resources/organizations/data-breach-reporting/shield-act\nNot leg
 al advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/new-york/ny-shield-data-security/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:wa-government-facial-recognition:operative:2021-07-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20210701
DTEND;VALUE=DATE:20210702
SUMMARY:Government facial recognition services safeguards — 2021-07-01
DESCRIPTION:2021-07-01\nCoverage: Washington state and local government age
 ncies using facial recognition services\; existing contracts transition on
  renewal or extension as provided by the chapter.\nSource: https://app.leg
 .wa.gov/RCW/default.aspx?cite=43.386&full=true\nNot legal advice. Verify a
 gainst primary sources.
URL:https://complyroom.com/ai-privacy/washington/wa-government-facial-recog
 nition/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:ca-ccpa-consolidated:operative:2023-01-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20230101
DTEND;VALUE=DATE:20230102
SUMMARY:California Consumer Privacy Act\, as amended by CPRA — Verified o
 perative date: 2023-01-01. 
DESCRIPTION:Verified operative date: 2023-01-01. \nCoverage: For-profit bus
 inesses doing business in California that satisfy the statutory revenue\, 
 consumer-volume\, or sale/share-revenue tests\; exclusions apply. The curr
 ent inflation-adjusted revenue threshold is not established by this row.\n
 Source: https://oag.ca.gov/privacy/ccpa\nNot legal advice. Verify against 
 primary sources.
URL:https://complyroom.com/ai-privacy/california/ca-ccpa-consolidated/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:nyc-automated-employment-decision-tools:operative:2023-01-01:0@complyro
 om.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20230101
DTEND;VALUE=DATE:20230102
SUMMARY:Automated employment decision tool bias audits and notices — Lega
 l effective date2023-01-01\; DCWP enforcement2023-07-05
DESCRIPTION:Legal effective date2023-01-01\; DCWP enforcement2023-07-05\nCo
 verage: Employers and employment agencies using covered AEDTs for hiring/p
 romotion screening in New York City\; notices apply to covered candidates 
 and employees residing in the city. Official DCWP guidance includes specif
 ied NYC-office-linked remote roles.\nSource: https://legistar.council.nyc.
 gov/LegislationDetail.aspx?ID=4344524&GUID=B051915D-A9AC-451E-81F8-6596032
 FA3F9\nNot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/new-york/nyc-automated-employment-dec
 ision-tools/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:us-ftc-safeguards-2021:operative:2023-06-09:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20230609
DTEND;VALUE=DATE:20230610
SUMMARY:FTC Safeguards Rule — 2021 security-program amendments — Legal 
 effective date: 2022-01-10\; principal compliance date: 2023-06-09.
DESCRIPTION:Legal effective date: 2022-01-10\; principal compliance date: 2
 023-06-09.\nCoverage: Financial institutions within FTC Safeguards Rule ju
 risdiction that handle covered customer information\, including applicable
  non-bank financial institutions and finders. Institutions maintaining cus
 tomer information concerning fewer than 5\,000 consumers have specified ex
 ceptions\, not a complete exemption.\nSource: https://www.federalregister.
 gov/documents/2021/12/09/2021-25736/standards-for-safeguarding-customer-in
 formation\nNot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/federal/us-ftc-safeguards-2021/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:ct-consumer-health-privacy-2023:operative:2023-07-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20230701
DTEND;VALUE=DATE:20230702
SUMMARY:Consumer health data consent\, confidentiality and geofencing — 2
 023-07-01
DESCRIPTION:2023-07-01\nCoverage: Persons doing business in Connecticut or 
 targeting products/services to residents when processing covered consumer 
 health data\, without the general CTDPA volume thresholds\; §2 entity and
  data exemptions apply.\nSource: https://www.cga.ct.gov/2023/ACT/PA/PDF/20
 23PA-00056-R00SB-00003-PA.PDF\nNot legal advice. Verify against primary so
 urces.
URL:https://complyroom.com/ai-privacy/connecticut/ct-consumer-health-privac
 y-2023/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:tx-data-broker-registration-security:operative:2023-12-01:0@complyroom.
 com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20231201
DTEND;VALUE=DATE:20231202
SUMMARY:Texas data broker registration and security — Act effective2023-0
 9-01\; covered processing from2023-12-01\; initial registration timing sub
 ject to implementing rules
DESCRIPTION:Act effective2023-09-01\; covered processing from2023-12-01\; i
 nitial registration timing subject to implementing rules\nCoverage: Covere
 d data brokers whose principal revenue is from indirect-source personal da
 ta and that\, over12months\, derive more than50% of revenue from processin
 g/transferring such data or derive revenue from doing so for more than50\,
 000 Texas individuals\; statutory data/entity exemptions apply.\nSource: h
 ttps://capitol.texas.gov/tlodocs/88R/billtext/html/SB02105F.htm\nNot legal
  advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/texas/tx-data-broker-registration-sec
 urity/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:or-data-broker-registration:operative:2024-01-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20240101
DTEND;VALUE=DATE:20240102
SUMMARY:Oregon data broker registration — 2024-01-01
DESCRIPTION:2024-01-01\nCoverage: Businesses collecting and selling or lice
 nsing brokered personal data of Oregon residents\, subject to the act’s 
 direct-relationship\, FCRA\, GLBA and other exclusions.\nSource: https://w
 ww.oregonlegislature.gov/bills_laws/lawsstatutes/2023orLaw0395.pdf\nNot le
 gal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/oregon/or-data-broker-registration/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:nv-consumer-health-data:operative:2024-03-31:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20240331
DTEND;VALUE=DATE:20240401
SUMMARY:Nevada consumer health data privacy law — 2024-03-31
DESCRIPTION:2024-03-31\nCoverage: Regulated entities conducting business in
  Nevada or targeting Nevada products/services and determining health-data 
 processing\; consumers reside in Nevada or have health data collected ther
 e in connection with a requested product or service. Statutory exclusions 
 apply.\nSource: https://www.leg.state.nv.us/NRS/NRS-603A.html\nNot legal a
 dvice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/nevada/nv-consumer-health-data/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:wa-my-health-my-data:operative:2024-03-31:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20240331
DTEND;VALUE=DATE:20240401
SUMMARY:My Health My Data Act — Principal §§.020–.070 duties: 2024-03
 -31\; small businesses: 2024-06-30
DESCRIPTION:Principal §§.020–.070 duties: 2024-03-31\; small businesses
 : 2024-06-30\nCoverage: Regulated entities doing business in Washington or
  targeting Washington consumers and determining consumer-health-data proce
 ssing\; includes small businesses on their later date. Consumers include W
 ashington residents and people whose health data is collected in Washingto
 n\; employment context is excluded.\nSource: https://app.leg.wa.gov/RCW/de
 fault.aspx?cite=19.373&full=true\nNot legal advice. Verify against primary
  sources.
URL:https://complyroom.com/ai-privacy/washington/wa-my-health-my-data/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:fl-digital-bill-of-rights:operative:2024-07-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20240701
DTEND;VALUE=DATE:20240702
SUMMARY:Florida Digital Bill of Rights — Verified operative date: 2024-07
 -01. 
DESCRIPTION:Verified operative date: 2024-07-01. \nCoverage: Main controlle
 r duties apply to for-profit controllers with over $1 billion global gross
  annual revenue AND at least one specified online-advertising\, smart-spea
 ker/virtual-assistant\, or large app-store condition. General applicabilit
 y and exemptions remain in §§501.703–.704\; separate sensitive-data-sa
 le provisions can have wider reach.\nSource: https://laws.flrules.org/2023
 /201\nNot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/florida/fl-digital-bill-of-rights/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:tn-elvis-ai-voice-likeness:operative:2024-07-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20240701
DTEND;VALUE=DATE:20240702
SUMMARY:ELVIS Act voice and likeness protections — 2024-07-01
DESCRIPTION:2024-07-01\nCoverage: Persons undertaking covered unauthorized 
 name\, photograph\, voice or likeness uses\, including specified dissemina
 tion and tools/services primarily intended to produce unauthorized represe
 ntations\; statutory speech\, fair-use and other exceptions apply.\nSource
 : https://wapp.capitol.tn.gov/apps/BillInfo/Default.aspx?BillNumber=SB2096
 &GA=113\nNot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/tennessee/tn-elvis-ai-voice-likeness/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:tx-data-privacy-security-act:operative:2024-07-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20240701
DTEND;VALUE=DATE:20240702
SUMMARY:Texas Data Privacy and Security Act — Verified operative date: 20
 24-07-01. 
DESCRIPTION:Verified operative date: 2024-07-01. \nCoverage: Persons conduc
 ting business in Texas or producing products/services consumed by resident
 s\, processing or selling personal data\, and not SBA-defined small busine
 sses. Small businesses separately need prior consent for sensitive-data sa
 les\; entity/data exemptions apply.\nSource: https://capitol.texas.gov/tlo
 docs/88R/billtext/html/HB00004F.htm\nNot legal advice. Verify against prim
 ary sources.
URL:https://complyroom.com/ai-privacy/texas/tx-data-privacy-security-act/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:us-ftc-health-breach-2024:operative:2024-07-29:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20240729
DTEND;VALUE=DATE:20240730
SUMMARY:FTC Health Breach Notification Rule — 2024 amendments — Legal e
 ffective date: 2024-07-29\; principal compliance date: 2024-07-29.
DESCRIPTION:Legal effective date: 2024-07-29\; principal compliance date: 2
 024-07-29.\nCoverage: Foreign and domestic vendors of personal health reco
 rds\, PHR-related entities and third-party service providers maintaining i
 nformation of U.S. citizens or residents. Excludes HIPAA-covered entities 
 and other entities to the extent they act as a HIPAA business associate\; 
 coverage is not limited by FTC Act jurisdictional tests.\nSource: https://
 www.federalregister.gov/documents/2024/05/30/2024-10855/health-breach-noti
 fication-rule\nNot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/federal/us-ftc-health-breach-2024/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:de-personal-data-privacy-act:operative:2025-01-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20250101
DTEND;VALUE=DATE:20250102
SUMMARY:Delaware Personal Data Privacy Act\, base law — Verified operativ
 e date: 2025-01-01. 
DESCRIPTION:Verified operative date: 2025-01-01. \nCoverage: Through Decemb
 er 31\, 2026\, persons conducting business in Delaware or targeting reside
 nts that in the preceding year processed at least 35\,000 consumers exclud
 ing payment-only data\, or at least 10\,000 consumers AND derived over 20%
  of gross revenue from data sales\; statutory exemptions apply.\nSource: h
 ttps://delcode.delaware.gov/title6/c012d/index.html\nNot legal advice. Ver
 ify against primary sources.
URL:https://complyroom.com/ai-privacy/delaware/de-personal-data-privacy-act
 /
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:us-doj-data-security-2025:operative:2025-04-08:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20250408
DTEND;VALUE=DATE:20250409
SUMMARY:DOJ Data Security Program — countries-of-concern data transaction
 s — Legal effective / principal operative date: 2025-04-08. Sections 202
 .1001–1002 and 202.1103–1104 apply to the relevant transactions from 2
 025-10-06.
DESCRIPTION:Legal effective / principal operative date: 2025-04-08. Section
 s 202.1001–1002 and 202.1103–1104 apply to the relevant transactions f
 rom 2025-10-06.\nCoverage: U.S. persons engaging in defined covered data t
 ransactions involving bulk U.S. sensitive personal data or U.S. government
 -related data and countries of concern or covered persons. Transaction cat
 egories\, data thresholds\, exemptions and licensing rules control\; this 
 is not a general ban on all cross-border data flows.\nSource: https://www.
 federalregister.gov/documents/2025/01/08/2024-31486/preventing-access-to-u
 s-sensitive-personal-data-and-government-related-data-by-countries-of-conc
 ern\nNot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/federal/us-doj-data-security-2025/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:ut-generative-ai-consumer-disclosures:operative:2025-05-07:0@complyroom
 .com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20250507
DTEND;VALUE=DATE:20250508
SUMMARY:Generative AI consumer and regulated-service disclosures — 2025-0
 5-07
DESCRIPTION:2025-05-07\nCoverage: Persons using or providing generative AI 
 in covered consumer transactions\; individuals in regulated occupations ha
 ve additional duties for high-risk AI interactions.\nSource: https://le.ut
 ah.gov/~2025/bills/sbillenr/SB0226.pdf\nNot legal advice. Verify against p
 rimary sources.
URL:https://complyroom.com/ai-privacy/utah/ut-generative-ai-consumer-disclo
 sures/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:federal-coppa-amendments:legal-effective:2025-06-23:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20250623
DTEND;VALUE=DATE:20250624
SUMMARY:Federal COPPA rule amendments — legal effective
DESCRIPTION:Legal effective date June 23\, 2025\; general compliance deadli
 ne April 22\, 2026\, with specified §312.11 exceptions\nCoverage: Operato
 rs of child-directed online services\, or operators with actual knowledge 
 of collecting personal information from children under 13. Certain third-p
 arty disclosures require separate parental consent\; amended retention/sec
 urity and personal-information provisions also apply.\nSource: https://www
 .federalregister.gov/documents/2025/04/22/2025-05904/childrens-online-priv
 acy-protection-rule\nNot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/federal/federal-coppa-amendments/
CATEGORIES:legal-effective
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:co-biometric-privacy-2024:operative:2025-07-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20250701
DTEND;VALUE=DATE:20250702
SUMMARY:Privacy of Biometric Identifiers and Data — 2025-07-01
DESCRIPTION:2025-07-01\nCoverage: Persons controlling or processing one or 
 more biometric identifiers\, subject to the act’s exceptions\; includes 
 specified restrictions on employers obtaining employee biometric consent.\
 nSource: https://leg.colorado.gov/bills/hb24-1130\nNot legal advice. Verif
 y against primary sources.
URL:https://complyroom.com/ai-privacy/colorado/co-biometric-privacy-2024/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:mn-consumer-data-privacy:operative:2025-07-31:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20250731
DTEND;VALUE=DATE:20250801
SUMMARY:Minnesota Consumer Data Privacy Act — Verified operative date: 20
 25-07-31. Postsecondary institutions regulated by the Office of Higher Edu
 cation have a July 31\, 2029 transition.
DESCRIPTION:Verified operative date: 2025-07-31. Postsecondary institutions
  regulated by the Office of Higher Education have a July 31\, 2029 transit
 ion.\nCoverage: Legal entities doing business in Minnesota or targeting it
 s residents that process at least 100\,000 consumers excluding payment-onl
 y data\, or at least 25\,000 consumers AND derive over 25% of gross revenu
 e from data sales. Small-business and institutional exceptions apply\; cov
 ered higher-education institutions have a separate July 31\, 2029 transiti
 on.\nSource: https://www.revisor.mn.gov/statutes/cite/325M/full\nNot legal
  advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/minnesota/mn-consumer-data-privacy/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:md-online-data-privacy:legal-effective:2025-10-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20251001
DTEND;VALUE=DATE:20251002
SUMMARY:Maryland Online Data Privacy Act: application milestone — legal e
 ffective
DESCRIPTION:Legal effective date October 1\, 2025\; enacted transition text
  uses April 1\, 2026 for prospective processing application\nCoverage: Per
 sons doing business in Maryland or targeting residents\; 35\,000+ consumer
 s excluding payment-only processing\, or 10\,000+ AND >20% gross revenue f
 rom sales. Strict minimization/sensitive-data limitations\; state-specific
  exemptions apply. This is a 2026 application milestone\, not a newly effe
 ctive 2026 law.\nSource: https://mgaleg.maryland.gov/2024rs/chapters_noln/
 ch_454_hb0567e.pdf\nNot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/maryland/md-online-data-privacy/
CATEGORIES:legal-effective
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:us-sec-regulation-sp-2024:operative:2025-12-03:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20251203
DTEND;VALUE=DATE:20251204
SUMMARY:SEC Regulation S-P — incident response and customer-notification 
 amendments — Legal effective date: 2024-08-02. Larger covered institutio
 ns: compliance 2025-12-03\; smaller covered institutions: compliance 2026-
 06-03.
DESCRIPTION:Legal effective date: 2024-08-02. Larger covered institutions: 
 compliance 2025-12-03\; smaller covered institutions: compliance 2026-06-0
 3.\nCoverage: Covered brokers and dealers\, investment companies\, SEC-reg
 istered investment advisers and transfer agents registered with the SEC or
  another appropriate regulatory agency. Funding portals follow the applica
 ble requirements through Regulation Crowdfunding. Larger and smaller cover
 ed institutions have different compliance periods.\nSource: https://www.fe
 deralregister.gov/documents/2024/06/03/2024-11116/regulation-s-p-privacy-o
 f-consumer-financial-information-and-safeguarding-customer-information\nNo
 t legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/federal/us-sec-regulation-sp-2024/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:ca-ab2013-training-data:compliance:2026-01-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260101
DTEND;VALUE=DATE:20260102
SUMMARY:California AB 2013: GenAI training-data transparency — Training-d
 ata transparency posting deadline.
DESCRIPTION:Training-data transparency posting deadline.\nCoverage: Develop
 ers designing\, coding\, producing\, or substantially modifying GenAI syst
 ems/services publicly available to Californians\, including free products\
 ; covers releases from January 1\, 2022 onward. Limited security\, aircraf
 t\, and federal national-security/military exclusions.\nSource: https://le
 ginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202320240AB2013
 \nNot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/california/ca-ab2013-training-data/
CATEGORIES:compliance
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:ca-ccpa-risk-assessments:compliance:2026-01-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260101
DTEND;VALUE=DATE:20260102
SUMMARY:California CCPA risk-assessment regulations — Assessment before i
 nitiating covered new processing.
DESCRIPTION:Assessment before initiating covered new processing.\nCoverage:
  CCPA-covered businesses conducting specified significant-risk processing 
 under §7150(b). This does not cover all small businesses or make every AD
 MT/audit duty operative in 2026.\nSource: https://cppa.ca.gov/regulations/
 ccpa_updates.html\nNot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/california/ca-ccpa-risk-assessments/
CATEGORIES:compliance
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:ca-drop-delete-act:platform-launch:2026-01-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260101
DTEND;VALUE=DATE:20260102
SUMMARY:California Delete Act: DROP — Consumer platform launch.
DESCRIPTION:Consumer platform launch.\nCoverage: Registered data brokers\, 
 subject to exceptions\; not every business processing personal data.\nSour
 ce: https://privacy.ca.gov/drop/\nNot legal advice. Verify against primary
  sources.
URL:https://complyroom.com/ai-privacy/california/ca-drop-delete-act/
CATEGORIES:platform-launch
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:ca-sb243-companion-chatbots:effective:2026-01-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260101
DTEND;VALUE=DATE:20260102
SUMMARY:California SB 243: companion chatbots — effective
DESCRIPTION:January 1\, 2026\; annual suicide-prevention reporting begins J
 uly 1\, 2027\nCoverage: Operators offering companion-chatbot platforms in 
 California: adaptive human-like interaction sustaining a social relationsh
 ip. Excludes operational/customer-service/productivity bots\, certain game
 s\, and simple voice assistants. AI disclosures\, self-harm protocols\, an
 d extra known-minor safeguards apply.\nSource: https://leginfo.legislature
 .ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB243\nNot legal advice
 . Verify against primary sources.
URL:https://complyroom.com/ai-privacy/california/ca-sb243-companion-chatbot
 s/
CATEGORIES:effective
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:ca-sb53-frontier-ai:effective:2026-01-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260101
DTEND;VALUE=DATE:20260102
SUMMARY:California SB 53: Transparency in Frontier Artificial Intelligence 
 Act — effective
DESCRIPTION:January 1\, 2026\nCoverage: Frontier-model developers: training
  compute >10²⁶ operations\, including qualifying modifications. Expande
 d safety-framework/reporting duties apply to large frontier developers\, w
 ith affiliates' combined prior-year gross revenue >$500 million. Other tra
 nsparency\, incident\, and employee-protection provisions reach frontier d
 evelopers more broadly.\nSource: https://leginfo.legislature.ca.gov/faces/
 billNavClient.xhtml?bill_id=202520260SB53\nNot legal advice. Verify agains
 t primary sources.
URL:https://complyroom.com/ai-privacy/california/ca-sb53-frontier-ai/
CATEGORIES:effective
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:il-hb3773-employment-ai:effective:2026-01-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260101
DTEND;VALUE=DATE:20260102
SUMMARY:Illinois HB 3773 / Public Act 103-0804\, employment AI — effectiv
 e
DESCRIPTION:January 1\, 2026\, §99\nCoverage: Employers generally with one
  or more Illinois employees for 20+ weeks in the current/prior year. §2-1
 02(L) prohibits AI uses producing protected-class discrimination and ZIP-c
 ode proxies\; employee notice is required\, with DHR rules addressing circ
 umstances/timing/means. Cross-tag with /ai-privacy.\nSource: https://www.i
 lga.gov/Legislation/publicacts/view/103-0804\nNot legal advice. Verify aga
 inst primary sources.
URL:https://complyroom.com/ai-privacy/illinois/il-hb3773-employment-ai/
CATEGORIES:effective
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:in-consumer-data-protection:effective:2026-01-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260101
DTEND;VALUE=DATE:20260102
SUMMARY:Indiana Consumer Data Protection Act\, IC 24-15 — effective
DESCRIPTION:January 1\, 2026\nCoverage: Persons doing business in Indiana o
 r targeting residents\, processing 100\,000+ consumers annually\, or 25\,0
 00+ AND >50% gross revenue from personal-data sales. Entity/data exemption
 s apply\; employment/commercial contexts are excluded from the consumer de
 finition.\nSource: https://www.in.gov/attorneygeneral/files/Indiana-Consum
 er-Data-Protection-Consumer-Bill-of-Rights_Web.pdf\nNot legal advice. Veri
 fy against primary sources.
URL:https://complyroom.com/ai-privacy/indiana/in-consumer-data-protection/
CATEGORIES:effective
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:ky-consumer-data-protection:effective:2026-01-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260101
DTEND;VALUE=DATE:20260102
SUMMARY:Kentucky Consumer Data Protection Act\, KRS 367.3611–.3629 — ef
 fective
DESCRIPTION:January 1\, 2026\nCoverage: Persons doing business in Kentucky 
 or targeting residents\, processing 100\,000+ consumers\, or 25\,000+ AND 
 >50% gross revenue from sales. Government\, financial/HIPAA entities\, non
 profits\, higher education\, and other exemptions apply.\nSource: https://
 www.ag.ky.gov/about/Office-Divisions/ODP/KCDPA/Pages/default.aspx\nNot leg
 al advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/kentucky/ky-consumer-data-protection/
CATEGORIES:effective
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:or-hb2008-children-location:effective:2026-01-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260101
DTEND;VALUE=DATE:20260102
SUMMARY:Oregon HB 2008 / 2025 chapter 251: children and precise-location re
 strictions — effective
DESCRIPTION:January 1\, 2026\, expressly stated in the enacted law\nCoverag
 e: OCPA controllers: no targeted advertising or consequential profiling wh
 ere they know/willfully disregard that a consumer is under 16\; no selling
  those minors' data\; no selling data locating a person/device within 1\,7
 50 feet\, subject to specified exclusions.\nSource: https://www.oregonlegi
 slature.gov/bills_laws/lawsstatutes/2025orLaw0251.pdf\nNot legal advice. V
 erify against primary sources.
URL:https://complyroom.com/ai-privacy/oregon/or-hb2008-children-location/
CATEGORIES:effective
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:or-universal-opt-out:effective:2026-01-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260101
DTEND;VALUE=DATE:20260102
SUMMARY:Oregon Consumer Privacy Act: universal opt-out mechanisms — effec
 tive
DESCRIPTION:January 1\, 2026\nCoverage: Covered businesses/nonprofits must 
 honor qualifying signals. General threshold: 100\,000+ consumers excluding
  payment-only processing\, or 25\,000+ AND ≥25% annual gross revenue fro
 m sales. Current statute also covers relevant motor-vehicle manufacturers/
 affiliates irrespective of thresholds.\nSource: https://www.doj.state.or.u
 s/consumer-protection/id-theft-data-breaches/privacy/\nNot legal advice. V
 erify against primary sources.
URL:https://complyroom.com/ai-privacy/oregon/or-universal-opt-out/
CATEGORIES:effective
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:ri-data-transparency-privacy:effective:2026-01-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260101
DTEND;VALUE=DATE:20260102
SUMMARY:Rhode Island Data Transparency and Privacy Protection Act — effec
 tive
DESCRIPTION:January 1\, 2026\nCoverage: Main controller duties: for-profit 
 businesses targeting/doing business in Rhode Island\, 35\,000+ customers e
 xcluding payment-only processing\, or 10\,000+ AND >20% gross revenue from
  sales. Separate §3 commercial website/service disclosures have no numeri
 cal threshold and concern collecting\, storing and selling PII within the 
 provision's scope.\nSource: https://webserver.rilegislature.gov/Statutes/T
 ITLE6/6-48.1/6-48.1-4.htm\nNot legal advice. Verify against primary source
 s.
URL:https://complyroom.com/ai-privacy/rhode-island/ri-data-transparency-pri
 vacy/
CATEGORIES:effective
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:tx-hb149-responsible-ai:effective:2026-01-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260101
DTEND;VALUE=DATE:20260102
SUMMARY:Texas Responsible Artificial Intelligence Governance Act\, HB 149 
 — effective
DESCRIPTION:January 1\, 2026\, §10\nCoverage: Persons conducting/promoting
  business in Texas\, producing products/services used by Texans\, or devel
 oping/deploying AI in Texas. Restrictions differ by actor/use. Governmenta
 l-AI and healthcare disclosures are specific provisions\, not a disclosure
  rule for every private AI interaction.\nSource: https://capitol.texas.gov
 /tlodocs/89R/billtext/html/HB00149F.htm\nNot legal advice. Verify against 
 primary sources.
URL:https://complyroom.com/ai-privacy/texas/tx-hb149-responsible-ai/
CATEGORIES:effective
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:federal-part2-confidentiality:compliance:2026-02-16:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260216
DTEND;VALUE=DATE:20260217
SUMMARY:Federal 42 CFR Part 2 confidentiality amendments — Compliance dea
 dline for the 2024 final rule.
DESCRIPTION:Compliance deadline for the 2024 final rule.\nCoverage: Federal
 ly assisted substance-use-disorder programs and recipients subject to Part
  2. Consent/redisclosure\, notices\, breach notification\, and enforcement
  changes. Does not cover every business or health record.\nSource: https:/
 /www.hhs.gov/hipaa/for-professionals/regulatory-initiatives/fact-sheet-42-
 cfr-part-2-final-rule/index.html\nNot legal advice. Verify against primary
  sources.
URL:https://complyroom.com/ai-privacy/federal/federal-part2-confidentiality
 /
CATEGORIES:compliance
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:md-online-data-privacy:application:2026-04-01:1@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260401
DTEND;VALUE=DATE:20260402
SUMMARY:Maryland Online Data Privacy Act: application milestone — applica
 tion
DESCRIPTION:Legal effective date October 1\, 2025\; enacted transition text
  uses April 1\, 2026 for prospective processing application\nCoverage: Per
 sons doing business in Maryland or targeting residents\; 35\,000+ consumer
 s excluding payment-only processing\, or 10\,000+ AND >20% gross revenue f
 rom sales. Strict minimization/sensitive-data limitations\; state-specific
  exemptions apply. This is a 2026 application milestone\, not a newly effe
 ctive 2026 law.\nSource: https://mgaleg.maryland.gov/2024rs/chapters_noln/
 ch_454_hb0567e.pdf\nNot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/maryland/md-online-data-privacy/
CATEGORIES:application
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:federal-coppa-amendments:compliance:2026-04-22:1@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260422
DTEND;VALUE=DATE:20260423
SUMMARY:Federal COPPA rule amendments — General compliance deadline\, sub
 ject to the specified §312.11 exceptions.
DESCRIPTION:General compliance deadline\, subject to the specified §312.11
  exceptions.\nCoverage: Operators of child-directed online services\, or o
 perators with actual knowledge of collecting personal information from chi
 ldren under 13. Certain third-party disclosures require separate parental 
 consent\; amended retention/security and personal-information provisions a
 lso apply.\nSource: https://www.federalregister.gov/documents/2025/04/22/2
 025-05904/childrens-online-privacy-protection-rule\nNot legal advice. Veri
 fy against primary sources.
URL:https://complyroom.com/ai-privacy/federal/federal-coppa-amendments/
CATEGORIES:compliance
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:co-sb26189-ai-consequential-decisions:enacted:2026-05-14:0@complyroom.c
 om
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260514
DTEND;VALUE=DATE:20260515
SUMMARY:Colorado AI Act replacement — consequential-decision duties — S
 igned into law.
DESCRIPTION:Signed into law.\nCoverage: Colorado: SB 26-189 became law and 
 was signed May 14\, 2026. It repeals/replaces the 2024 AI regime. Main ADM
 T/consequential-decision duties begin January 1\, 2027\; an August 2026 co
 mpliance deadline is outdated. The signed act is the primary text.\nSource
 : https://leg.colorado.gov/bills/sb26-189\nNot legal advice. Verify agains
 t primary sources.
URL:https://complyroom.com/ai-privacy/colorado/co-sb26189-ai-consequential-
 decisions/
CATEGORIES:enacted
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:md-hb711-geolocation:effective:2026-07-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260701
DTEND;VALUE=DATE:20260702
SUMMARY:Maryland HB 711 / 2026 chapter 874: MODPA and geolocation amendment
 s — effective
DESCRIPTION:July 1\, 2026\nCoverage: MODPA controllers for business-facing 
 provisions. Extends precise geolocation to a person/device/vehicle within 
 1\,750 feet\; restricts certain personal-data sales to government units fo
 r civil immigration enforcement. Other provisions concern government recor
 ds/systems.\nSource: https://mgaleg.maryland.gov/2026RS/Chapters_noln/CH_8
 74_hb0711t.pdf\nNot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/maryland/md-hb711-geolocation/
CATEGORIES:effective
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:mn-social-media-mental-health-label:operative:2026-07-01:0@complyroom.c
 om
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260701
DTEND;VALUE=DATE:20260702
SUMMARY:Social media mental health warning label — 2026-07-01
DESCRIPTION:2026-07-01\nCoverage: Covered social media platforms under Minn
 .Stat.325M.31–.32: doing business in or targeting Minnesota and having m
 ore than10\,000 monthly active Minnesota account holders\; statutory platf
 orm exclusions apply.\nSource: https://www.revisor.mn.gov/statutes/cite/32
 5M/full\nNot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/minnesota/mn-social-media-mental-heal
 th-label/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:ca-drop-delete-act:compliance:2026-08-01:1@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260801
DTEND;VALUE=DATE:20260802
SUMMARY:California Delete Act: DROP — Broker processing obligations begin
 \, at least once every 45 days.
DESCRIPTION:Broker processing obligations begin\, at least once every 45 da
 ys.\nCoverage: Registered data brokers\, subject to exceptions\; not every
  business processing personal data.\nSource: https://privacy.ca.gov/drop/\
 nNot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/california/ca-drop-delete-act/
CATEGORIES:compliance
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:ca-ai-transparency-ab853:operative:2026-08-02:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20260802
DTEND;VALUE=DATE:20260803
SUMMARY:California AI Transparency Act\, SB 942 as amended by AB 853 — Co
 vered provider duties become operative.
DESCRIPTION:Covered provider duties become operative.\nCoverage: Covered Ge
 nAI providers with >1 million monthly visitors/users\, publicly accessible
  in California: free detection tools and provenance/disclosure duties. Sep
 arate platform/hosting duties begin January 1\, 2027\; capture-device prov
 isions begin January 1\, 2028.\nSource: https://leginfo.legislature.ca.gov
 /faces/billNavClient.xhtml?bill_id=202520260AB853\nNot legal advice. Verif
 y against primary sources.
URL:https://complyroom.com/ai-privacy/california/ca-ai-transparency-ab853/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:ca-ai-transparency-ab853:operative:2027-01-01:1@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20270101
DTEND;VALUE=DATE:20270102
SUMMARY:California AI Transparency Act\, SB 942 as amended by AB 853 — Se
 parate platform/hosting duties begin.
DESCRIPTION:Separate platform/hosting duties begin.\nCoverage: Covered GenA
 I providers with >1 million monthly visitors/users\, publicly accessible i
 n California: free detection tools and provenance/disclosure duties. Separ
 ate platform/hosting duties begin January 1\, 2027\; capture-device provis
 ions begin January 1\, 2028.\nSource: https://leginfo.legislature.ca.gov/f
 aces/billNavClient.xhtml?bill_id=202520260AB853\nNot legal advice. Verify 
 against primary sources.
URL:https://complyroom.com/ai-privacy/california/ca-ai-transparency-ab853/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:co-sb26189-ai-consequential-decisions:operative:2027-01-01:1@complyroom
 .com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20270101
DTEND;VALUE=DATE:20270102
SUMMARY:Colorado AI Act replacement — consequential-decision duties — M
 ain ADMT/consequential-decision duties begin.
DESCRIPTION:Main ADMT/consequential-decision duties begin.\nCoverage: Color
 ado: SB 26-189 became law and was signed May 14\, 2026. It repeals/replace
 s the 2024 AI regime. Main ADMT/consequential-decision duties begin Januar
 y 1\, 2027\; an August 2026 compliance deadline is outdated. The signed ac
 t is the primary text.\nSource: https://leg.colorado.gov/bills/sb26-189\nN
 ot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/colorado/co-sb26189-ai-consequential-
 decisions/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:de-2027-privacy-amendments:operative:2027-01-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20270101
DTEND;VALUE=DATE:20270102
SUMMARY:Delaware 2027 privacy coverage and automated-decision amendments 
 — Verified operative date: 2027-01-01. 
DESCRIPTION:Verified operative date: 2027-01-01. \nCoverage: From January 1
 \, 2027\, Delaware-targeting persons processing at least 10\,000 consumers
  excluding payment-only processing\, or at least 5\,000 AND deriving over 
 20% of gross revenue from sales\, plus covered third parties acquiring dat
 a from a controller. Exemptions apply.\nSource: https://delcode.delaware.g
 ov/title6/c012d/index.html\nNot legal advice. Verify against primary sourc
 es.
URL:https://complyroom.com/ai-privacy/delaware/de-2027-privacy-amendments/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:ca-sb243-companion-chatbots:reporting:2027-07-01:1@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20270701
DTEND;VALUE=DATE:20270702
SUMMARY:California SB 243: companion chatbots — Annual suicide-prevention
  reporting begins.
DESCRIPTION:Annual suicide-prevention reporting begins.\nCoverage: Operator
 s offering companion-chatbot platforms in California: adaptive human-like 
 interaction sustaining a social relationship. Excludes operational/custome
 r-service/productivity bots\, certain games\, and simple voice assistants.
  AI disclosures\, self-harm protocols\, and extra known-minor safeguards a
 pply.\nSource: https://leginfo.legislature.ca.gov/faces/billNavClient.xhtm
 l?bill_id=202520260SB243\nNot legal advice. Verify against primary sources
 .
URL:https://complyroom.com/ai-privacy/california/ca-sb243-companion-chatbot
 s/
CATEGORIES:reporting
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:mn-addictive-social-media-2026:operative:2027-07-01:0@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20270701
DTEND;VALUE=DATE:20270702
SUMMARY:Stop Harms from Addictive Social Media — 2027-07-01\; applies to 
 accounts created before\, on or after that date
DESCRIPTION:2027-07-01\; applies to accounts created before\, on or after t
 hat date\nCoverage: Covered social media platforms with10\,000 or more acc
 ount holders or at least$1billion worldwide revenues in any of the precedi
 ng3years\; duties concern covered Minnesota account holders and children a
 ge15or younger\, subject to definitions and exclusions.\nSource: https://w
 ww.revisor.mn.gov/statutes/cite/325M/full\nNot legal advice. Verify agains
 t primary sources.
URL:https://complyroom.com/ai-privacy/minnesota/mn-addictive-social-media-2
 026/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:ca-ccpa-risk-assessments:compliance:2027-12-31:1@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20271231
DTEND;VALUE=DATE:20280101
SUMMARY:California CCPA risk-assessment regulations — Existing continuing
  processing assessment deadline.
DESCRIPTION:Existing continuing processing assessment deadline.\nCoverage: 
 CCPA-covered businesses conducting specified significant-risk processing u
 nder §7150(b). This does not cover all small businesses or make every ADM
 T/audit duty operative in 2026.\nSource: https://cppa.ca.gov/regulations/c
 cpa_updates.html\nNot legal advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/california/ca-ccpa-risk-assessments/
CATEGORIES:compliance
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:ca-ai-transparency-ab853:operative:2028-01-01:2@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20280101
DTEND;VALUE=DATE:20280102
SUMMARY:California AI Transparency Act\, SB 942 as amended by AB 853 — Ca
 pture-device provisions begin.
DESCRIPTION:Capture-device provisions begin.\nCoverage: Covered GenAI provi
 ders with >1 million monthly visitors/users\, publicly accessible in Calif
 ornia: free detection tools and provenance/disclosure duties. Separate pla
 tform/hosting duties begin January 1\, 2027\; capture-device provisions be
 gin January 1\, 2028.\nSource: https://leginfo.legislature.ca.gov/faces/bi
 llNavClient.xhtml?bill_id=202520260AB853\nNot legal advice. Verify against
  primary sources.
URL:https://complyroom.com/ai-privacy/california/ca-ai-transparency-ab853/
CATEGORIES:operative
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:ca-ccpa-risk-assessments:reporting:2028-04-01:2@complyroom.com
DTSTAMP:20261113T000000Z
LAST-MODIFIED:20261113T000000Z
DTSTART;VALUE=DATE:20280401
DTEND;VALUE=DATE:20280402
SUMMARY:California CCPA risk-assessment regulations — First summaries to 
 CPPA.
DESCRIPTION:First summaries to CPPA.\nCoverage: CCPA-covered businesses con
 ducting specified significant-risk processing under §7150(b). This does n
 ot cover all small businesses or make every ADMT/audit duty operative in 2
 026.\nSource: https://cppa.ca.gov/regulations/ccpa_updates.html\nNot legal
  advice. Verify against primary sources.
URL:https://complyroom.com/ai-privacy/california/ca-ccpa-risk-assessments/
CATEGORIES:reporting
STATUS:CONFIRMED
TRANSP:TRANSPARENT
END:VEVENT
END:VCALENDAR