Deadline tracker, free compliance tools, a verified vendor directory and a practical compliance kit for companies that use AI under the EU AI Act, Korea's AI Basic Act and US state laws. https://getdutybound.com/feed.xml 2026-09-21T00:00:00Z Dutyboundhttps://getdutybound.com/about/ Free to reuse with attribution. Operational guidance, not legal advice. https://getdutybound.com/deadlines/us-ut-sb149/ 2026-09-21T00:00:00Z

Disclose the use of generative AI on request in consumer interactions and proactively in regulated professions. Applies to: Businesses using generative AI with Utah consumers, with stricter duties in regulated professions. Source: https://www.cooley.com/news/insight/2026/2026-04-24-state-ai-laws-where-are-they-now

https://getdutybound.com/deadlines/eu-art4-literacy/ 2026-09-21T00:00:00Z

Take measures, to your best extent, so that staff and others operating AI on your behalf have sufficient AI literacy. The Digital Omnibus (July 2026) clarified that no specific level must be guaranteed. The duty itself was kept. Applies to: Providers and deployers of AI systems. Source: https://artificialintelligenceact.eu/article/4/

https://getdutybound.com/deadlines/eu-gpai/ 2026-09-21T00:00:00Z

Technical documentation, copyright policy and a training-data summary for model providers, with extra duties for models with systemic risk. Companies that only use AI tools are not in scope. Applies to: Providers of general-purpose AI models only. Source: https://compliancehub.wiki/eu-digital-omnibus-ai-act-deadline-deferral-annex-iii-2027/

https://getdutybound.com/deadlines/us-tx-traiga/ 2026-09-21T00:00:00Z

Bans intentional development or deployment of AI that incites self-harm or crime, AI-generated child sexual abuse material, non-consensual deepfake pornography and government social scoring. Rules for state-government AI. Applies to: Developers and deployers of AI in Texas; state agencies. Source: https://www.kslaw.com/news-and-insights/new-state-ai-laws-are-effective-on-january-1-2026-but-a-new-executive-order-signals-disruption

https://getdutybound.com/deadlines/us-ca-ab2013/ 2026-09-21T00:00:00Z

Developers must publish documentation about the datasets used to train their generative AI. Applies to: Developers of generative AI systems made available to Californians. Source: https://www.cooley.com/news/insight/2026/2026-04-24-state-ai-laws-where-are-they-now

https://getdutybound.com/deadlines/kr-act/ 2026-09-21T00:00:00Z

Generative AI providers must notify users that AI is used and label AI-generated content, with clear notice where generated audio, image or video is hard to tell from real. One-year grace period before administrative fines, except serious cases. Applies to: Domestic and foreign AI developers and businesses using AI in products; foreign firms above revenue or user thresholds must appoint a Korean representative. Source: https://www.cooley.com/news/insight/2026/2026-01-27-south-koreas-ai-basic-act-overview-and-key-takeaways

https://getdutybound.com/deadlines/us-ny-raise/ 2026-09-21T00:00:00Z

Transparency and reporting on training, deployment, safety protocols and incidents for frontier developers. Not relevant to companies that only use AI. Applies to: Developers of frontier AI models only. Source: https://www.cooley.com/news/insight/2026/2026-04-24-state-ai-laws-where-are-they-now

https://getdutybound.com/deadlines/kr-high-impact/ 2026-09-21T00:00:00Z

Impact assessment on fundamental rights before deployment, meaningful explanation of outcomes, human oversight, a user protection plan and documentation. Fines up to KRW 30 million for notification failures, missing representative or refusing inspection. Applies to: Operators of high-impact AI (healthcare, energy, transport, hiring, biometric analysis and similar). Source: https://www.cooley.com/news/insight/2026/2026-01-27-south-koreas-ai-basic-act-overview-and-key-takeaways

https://getdutybound.com/deadlines/eu-art50/ 2026-09-21T00:00:00Z

Chatbots must disclose they are AI unless obvious. Generated audio, image, video and text must be marked as artificial in a machine-readable way. Deepfakes and AI-generated public-interest text must be disclosed. Disclosure must be clear and given at the latest at first interaction. Not deferred by the Omnibus. Applies to: Providers of AI that talks to people or generates content; deployers of emotion recognition, biometric categorisation, deepfakes and AI-written public-interest text. Source: https://artificialintelligenceact.eu/article/50/

https://getdutybound.com/deadlines/us-ca-sb942/ 2026-09-21T00:00:00Z

Offer AI detection tools, watermark options and disclosures for AI-generated content. Delayed from 1 January 2026 to 2 August 2026. Applies to: Providers of generative image, video or audio tools with more than 1 million monthly users. Source: https://www.cooley.com/news/insight/2026/2026-04-24-state-ai-laws-where-are-they-now

https://getdutybound.com/deadlines/pl-act-main/ 2026-09-21T00:00:00Z

National law implementing the EU AI Act. Creates KRiBSI (Komisja Rozwoju i Bezpieczeństwa Sztucznej Inteligencji) as supervisor, a binding individual-opinion procedure (150 PLN fee, 30 to 60 days) and a regulatory sandbox that is free for SMEs. Applies to: Companies and public bodies operating in Poland. Source: https://www.ktzr.pl/ustawa-o-systemach-sztucznej-inteligencji/

https://getdutybound.com/deadlines/pl-kribsi-enforcement/ 2026-09-21T00:00:00Z

KRiBSI may inspect on 7 days' notice, remotely by default, covering documentation, procedures, internal logs, cloud systems and contractor agreements, and may impose the AI Act fine tiers. For SMEs the cap is the lower of the fixed amount and the percentage of turnover. Applies to: Companies and public bodies operating in Poland. Source: https://www.ktzr.pl/ustawa-o-systemach-sztucznej-inteligencji/

https://getdutybound.com/deadlines/eu-marking/ 2026-09-21T00:00:00Z

New obligation introduced by the Digital Omnibus: generated output must carry machine-readable marking. The same package bans generating non-consensual intimate imagery and child sexual abuse material, with penalties up to €35M or 7% of global turnover. Applies to: Providers of generative AI systems and, in practice, companies publishing generated content. Source: https://compliancehub.wiki/eu-digital-omnibus-ai-act-deadline-deferral-annex-iii-2027/

https://getdutybound.com/deadlines/us-co-sb189/ 2026-09-21T00:00:00Z

Replaces the 2024 Colorado AI Act. Requires pre-use consumer notices, an explanation within 30 days of an adverse outcome, meaningful human review rights and developer documentation. The earlier risk-management-programme and impact-assessment duties were removed. Applies to: Developers and deployers of automated decision-making technology affecting Colorado consumers. Source: https://www.cooley.com/news/insight/2026/2026-04-24-state-ai-laws-where-are-they-now

https://getdutybound.com/deadlines/us-ca-admt/ 2026-09-21T00:00:00Z

Notices, opt-out and access rights around automated decisions with significant effects. Applies to: Businesses under the CCPA using automated decision-making for significant decisions about consumers. Source: https://www.cooley.com/news/insight/2026/2026-04-24-state-ai-laws-where-are-they-now

https://getdutybound.com/deadlines/us-ca-ab853/ 2026-09-21T00:00:00Z

Extends SB 942 obligations to platforms from 1 January 2027 and to capture devices from 1 January 2028. Applies to: Large online platforms (2027) and capture-device manufacturers (2028). Source: https://www.cooley.com/news/insight/2026/2026-04-24-state-ai-laws-where-are-they-now

https://getdutybound.com/deadlines/kr-grace-end/ 2026-09-21T00:00:00Z

The grace period on administrative fines runs at least one year from 22 January 2026. Treat this date as the earliest point at which routine fines start. Applies to: All businesses in scope of the Act. Source: https://www.cooley.com/news/insight/2026/2026-01-27-south-koreas-ai-basic-act-overview-and-key-takeaways

https://getdutybound.com/deadlines/eu-annex-iii/ 2026-09-21T00:00:00Z

Risk management, data governance, technical documentation, logging, human oversight, conformity assessment and registration. Deferred from 2 August 2026 by the Digital Omnibus. Applies to: Providers and deployers of high-risk AI in employment, education, credit, essential services, law enforcement, migration and justice. Source: https://www.gibsondunn.com/eu-ai-act-omnibus-agreement-postponed-high-risk-deadlines-and-other-key-changes/

https://getdutybound.com/deadlines/eu-annex-i/ 2026-09-21T00:00:00Z

Deferred from 2 August 2027 by the Digital Omnibus. Applies to: AI embedded in products under EU product law (machinery, medical devices, vehicles and similar). Source: https://www.gibsondunn.com/eu-ai-act-omnibus-agreement-postponed-high-risk-deadlines-and-other-key-changes/

https://getdutybound.com/guides/ai-inventory-in-one-day/ 2026-09-21T00:00:00.000ZT00:00:00Z

An eight-hour plan to find every AI system your company uses, record the 21 facts that matter, and get it signed off. The inventory is the first thing every AI regulation asks for.

https://getdutybound.com/guides/article-50-ai-disclosure/ 2026-09-21T00:00:00.000ZT00:00:00Z

What each paragraph of Article 50 requires, where the disclosure has to appear, the exceptions people misread, and the five mistakes we see most.

https://getdutybound.com/guides/eu-ai-act-what-applies-2026/ 2026-09-21T00:00:00.000ZT00:00:00Z

The four duties that apply now, the two that were deferred, and what to do this quarter. Written for companies that use AI tools rather than build models.