{ "generated": "2026-09-22", "source": "https://getdutybound.com/deadlines/", "licence": "Free to reuse with attribution", "items": [ { "id": "us-ut-sb149", "jurisdiction": "US, Utah", "law": "Utah AI Policy Act (SB 149, narrowed 2025)", "title": "AI disclosure duties in Utah", "date": "2024-05-01", "status": "in-force", "applies_to": "Businesses using generative AI with Utah consumers, with stricter duties in regulated professions", "summary": "Disclose the use of generative AI on request in consumer interactions and proactively in regulated professions.", "evidence": "Disclosure texts, script for staff answering 'am I talking to AI?'.", "source": "https://www.cooley.com/news/insight/2026/2026-04-24-state-ai-laws-where-are-they-now", "source_label": "Cooley, state AI laws (April 2026)" }, { "id": "eu-art4-literacy", "jurisdiction": "EU", "law": "EU AI Act (Reg. 2024/1689)", "title": "AI literacy duty, Article 4", "date": "2025-02-02", "status": "in-force", "applies_to": "Providers and deployers of AI systems", "summary": "Take measures, to your best extent, so that staff and others operating AI on your behalf have sufficient AI literacy. The Digital Omnibus (July 2026) clarified that no specific level must be guaranteed. The duty itself was kept.", "evidence": "Training register, training programme, validation of learning outcomes, written AI usage rules.", "source": "https://artificialintelligenceact.eu/article/4/", "source_label": "EU AI Act explorer, Article 4" }, { "id": "eu-gpai", "jurisdiction": "EU", "law": "EU AI Act (Reg. 2024/1689)", "title": "General-purpose AI model obligations", "date": "2025-08-02", "status": "in-force", "applies_to": "Providers of general-purpose AI models only", "summary": "Technical documentation, copyright policy and a training-data summary for model providers, with extra duties for models with systemic risk. Companies that only use AI tools are not in scope.", "evidence": "Not applicable to deployers.", "source": "https://compliancehub.wiki/eu-digital-omnibus-ai-act-deadline-deferral-annex-iii-2027/", "source_label": "ComplianceHub, obligations after the Omnibus" }, { "id": "us-tx-traiga", "jurisdiction": "US, Texas", "law": "Texas Responsible AI Governance Act (HB 149)", "title": "TRAIGA in force", "date": "2026-01-01", "status": "in-force", "applies_to": "Developers and deployers of AI in Texas; state agencies", "summary": "Bans intentional development or deployment of AI that incites self-harm or crime, AI-generated child sexual abuse material, non-consensual deepfake pornography and government social scoring. Rules for state-government AI.", "evidence": "Acceptable-use policy prohibiting the banned uses.", "source": "https://www.kslaw.com/news-and-insights/new-state-ai-laws-are-effective-on-january-1-2026-but-a-new-executive-order-signals-disruption", "source_label": "King & Spalding, state AI laws effective 1 Jan 2026" }, { "id": "us-ca-ab2013", "jurisdiction": "US, California", "law": "AB 2013 (training data transparency)", "title": "Generative AI training-data documentation", "date": "2026-01-01", "status": "in-force", "applies_to": "Developers of generative AI systems made available to Californians", "summary": "Developers must publish documentation about the datasets used to train their generative AI.", "evidence": "Published training-data summary (developers only).", "source": "https://www.cooley.com/news/insight/2026/2026-04-24-state-ai-laws-where-are-they-now", "source_label": "Cooley, state AI laws (April 2026)" }, { "id": "kr-act", "jurisdiction": "South Korea", "law": "AI Basic Act", "title": "AI Basic Act in force", "date": "2026-01-22", "status": "in-force", "applies_to": "Domestic and foreign AI developers and businesses using AI in products; foreign firms above revenue or user thresholds must appoint a Korean representative", "summary": "Generative AI providers must notify users that AI is used and label AI-generated content, with clear notice where generated audio, image or video is hard to tell from real. One-year grace period before administrative fines, except serious cases.", "evidence": "User notices and labels on generative outputs, domestic representative if thresholds met.", "source": "https://www.cooley.com/news/insight/2026/2026-01-27-south-koreas-ai-basic-act-overview-and-key-takeaways", "source_label": "Cooley, Korea AI Basic Act overview" }, { "id": "us-ny-raise", "jurisdiction": "US, New York", "law": "RAISE Act (as amended 27 March 2026)", "title": "Frontier-model developer duties", "date": "2026-03-27", "status": "in-force", "applies_to": "Developers of frontier AI models only", "summary": "Transparency and reporting on training, deployment, safety protocols and incidents for frontier developers. Not relevant to companies that only use AI.", "evidence": "Not applicable to deployers.", "source": "https://www.cooley.com/news/insight/2026/2026-04-24-state-ai-laws-where-are-they-now", "source_label": "Cooley, state AI laws (April 2026)" }, { "id": "kr-high-impact", "jurisdiction": "South Korea", "law": "AI Basic Act", "title": "High-impact AI obligations activated", "date": "2026-07-21", "status": "in-force", "applies_to": "Operators of high-impact AI (healthcare, energy, transport, hiring, biometric analysis and similar)", "summary": "Impact assessment on fundamental rights before deployment, meaningful explanation of outcomes, human oversight, a user protection plan and documentation. Fines up to KRW 30 million for notification failures, missing representative or refusing inspection.", "evidence": "Impact assessment record, oversight design, user protection plan.", "source": "https://www.cooley.com/news/insight/2026/2026-01-27-south-koreas-ai-basic-act-overview-and-key-takeaways", "source_label": "Cooley, Korea AI Basic Act overview" }, { "id": "eu-art50", "jurisdiction": "EU", "law": "EU AI Act (Reg. 2024/1689)", "title": "Transparency obligations, Article 50", "date": "2026-08-02", "status": "in-force", "applies_to": "Providers of AI that talks to people or generates content; deployers of emotion recognition, biometric categorisation, deepfakes and AI-written public-interest text", "summary": "Chatbots must disclose they are AI unless obvious. Generated audio, image, video and text must be marked as artificial in a machine-readable way. Deepfakes and AI-generated public-interest text must be disclosed. Disclosure must be clear and given at the latest at first interaction. Not deferred by the Omnibus.", "evidence": "Disclosure texts in place, marking mechanism documented, transparency checklist completed per system.", "source": "https://artificialintelligenceact.eu/article/50/", "source_label": "EU AI Act explorer, Article 50" }, { "id": "us-ca-sb942", "jurisdiction": "US, California", "law": "SB 942 (AI Transparency Act)", "title": "Provenance and detection tools for large generative AI providers", "date": "2026-08-02", "status": "in-force", "applies_to": "Providers of generative image, video or audio tools with more than 1 million monthly users", "summary": "Offer AI detection tools, watermark options and disclosures for AI-generated content. Delayed from 1 January 2026 to 2 August 2026.", "evidence": "Provenance features and disclosure options (large providers only).", "source": "https://www.cooley.com/news/insight/2026/2026-04-24-state-ai-laws-where-are-they-now", "source_label": "Cooley, state AI laws (April 2026)" }, { "id": "pl-act-main", "jurisdiction": "Poland", "law": "Ustawa o systemach sztucznej inteligencji", "title": "Polish AI Systems Act, main provisions in force", "date": "2026-08-11", "status": "in-force", "applies_to": "Companies and public bodies operating in Poland", "summary": "National law implementing the EU AI Act. Creates KRiBSI (Komisja Rozwoju i Bezpieczeństwa Sztucznej Inteligencji) as supervisor, a binding individual-opinion procedure (150 PLN fee, 30 to 60 days) and a regulatory sandbox that is free for SMEs.", "evidence": "Register of AI systems, assigned roles, AI usage policy, vendor commitments.", "source": "https://www.ktzr.pl/ustawa-o-systemach-sztucznej-inteligencji/", "source_label": "KTZR, Polish AI act summary" }, { "id": "pl-kribsi-enforcement", "jurisdiction": "Poland", "law": "Ustawa o systemach sztucznej inteligencji", "title": "KRiBSI inspections and fines begin", "date": "2026-10-28", "status": "upcoming", "applies_to": "Companies and public bodies operating in Poland", "summary": "KRiBSI may inspect on 7 days' notice, remotely by default, covering documentation, procedures, internal logs, cloud systems and contractor agreements, and may impose the AI Act fine tiers. For SMEs the cap is the lower of the fixed amount and the percentage of turnover.", "evidence": "Inspection protocol, named contact, document index, trade-secret marking.", "source": "https://www.ktzr.pl/ustawa-o-systemach-sztucznej-inteligencji/", "source_label": "KTZR, Polish AI act summary" }, { "id": "eu-marking", "jurisdiction": "EU", "law": "EU AI Act as amended by Reg. 2026/1744", "title": "Machine-readable marking of generative AI output", "date": "2026-12-02", "status": "upcoming", "applies_to": "Providers of generative AI systems and, in practice, companies publishing generated content", "summary": "New obligation introduced by the Digital Omnibus: generated output must carry machine-readable marking. The same package bans generating non-consensual intimate imagery and child sexual abuse material, with penalties up to €35M or 7% of global turnover.", "evidence": "Marking mechanism in place for every generative system in the inventory.", "source": "https://compliancehub.wiki/eu-digital-omnibus-ai-act-deadline-deferral-annex-iii-2027/", "source_label": "ComplianceHub, obligations after the Omnibus" }, { "id": "us-co-sb189", "jurisdiction": "US, Colorado", "law": "SB 26-189 (Automated Decision-Making Technology)", "title": "Colorado ADMT duties begin", "date": "2027-01-01", "status": "upcoming", "applies_to": "Developers and deployers of automated decision-making technology affecting Colorado consumers", "summary": "Replaces the 2024 Colorado AI Act. Requires pre-use consumer notices, an explanation within 30 days of an adverse outcome, meaningful human review rights and developer documentation. The earlier risk-management-programme and impact-assessment duties were removed.", "evidence": "Pre-use notice texts, adverse-outcome explanation procedure, human review process.", "source": "https://www.cooley.com/news/insight/2026/2026-04-24-state-ai-laws-where-are-they-now", "source_label": "Cooley, state AI laws (April 2026)" }, { "id": "us-ca-admt", "jurisdiction": "US, California", "law": "CPPA automated decision-making regulations", "title": "ADMT significant-decision obligations", "date": "2027-01-01", "status": "upcoming", "applies_to": "Businesses under the CCPA using automated decision-making for significant decisions about consumers", "summary": "Notices, opt-out and access rights around automated decisions with significant effects.", "evidence": "ADMT notice, opt-out process, risk assessment where required.", "source": "https://www.cooley.com/news/insight/2026/2026-04-24-state-ai-laws-where-are-they-now", "source_label": "Cooley, state AI laws (April 2026)" }, { "id": "us-ca-ab853", "jurisdiction": "US, California", "law": "AB 853", "title": "Provenance duties extend to large online platforms", "date": "2027-01-01", "status": "upcoming", "applies_to": "Large online platforms (2027) and capture-device manufacturers (2028)", "summary": "Extends SB 942 obligations to platforms from 1 January 2027 and to capture devices from 1 January 2028.", "evidence": "Platform provenance handling (platforms only).", "source": "https://www.cooley.com/news/insight/2026/2026-04-24-state-ai-laws-where-are-they-now", "source_label": "Cooley, state AI laws (April 2026)" }, { "id": "kr-grace-end", "jurisdiction": "South Korea", "law": "AI Basic Act", "title": "End of the one-year grace period for fines (expected)", "date": "2027-01-22", "status": "upcoming", "applies_to": "All businesses in scope of the Act", "summary": "The grace period on administrative fines runs at least one year from 22 January 2026. Treat this date as the earliest point at which routine fines start.", "evidence": "All generative-AI notices and high-impact assessments complete.", "source": "https://www.cooley.com/news/insight/2026/2026-01-27-south-koreas-ai-basic-act-overview-and-key-takeaways", "source_label": "Cooley, Korea AI Basic Act overview" }, { "id": "eu-annex-iii", "jurisdiction": "EU", "law": "EU AI Act as amended by Reg. 2026/1744", "title": "High-risk obligations for stand-alone systems (Annex III)", "date": "2027-12-02", "status": "deferred", "applies_to": "Providers and deployers of high-risk AI in employment, education, credit, essential services, law enforcement, migration and justice", "summary": "Risk management, data governance, technical documentation, logging, human oversight, conformity assessment and registration. Deferred from 2 August 2026 by the Digital Omnibus.", "evidence": "Risk classification record, impact assessment, vendor documentation, oversight design.", "source": "https://www.gibsondunn.com/eu-ai-act-omnibus-agreement-postponed-high-risk-deadlines-and-other-key-changes/", "source_label": "Gibson Dunn, Omnibus agreement" }, { "id": "eu-annex-i", "jurisdiction": "EU", "law": "EU AI Act as amended by Reg. 2026/1744", "title": "High-risk obligations for AI in regulated products (Annex I)", "date": "2028-08-02", "status": "deferred", "applies_to": "AI embedded in products under EU product law (machinery, medical devices, vehicles and similar)", "summary": "Deferred from 2 August 2027 by the Digital Omnibus.", "evidence": "Product conformity files updated for AI components.", "source": "https://www.gibsondunn.com/eu-ai-act-omnibus-agreement-postponed-high-risk-deadlines-and-other-key-changes/", "source_label": "Gibson Dunn, Omnibus agreement" } ] }