Compliance Deadlines Calendar

Enterprise Compliance Deadlines Calendar 2026–2027

Important Disclaimer: Dates are based on publicly available information as of July 2026 and are subject to change. Some EU AI Act timelines have proposed amendments. Always consult legal counsel and verify official sources. This is for informational purposes only. Alayer.AI offers free pre-assessments to help enterprises map these deadlines to their specific environment.

Date	Regulation / Standard	Key Obligation / Action	Recommended Preparation
August 2, 2026	EU AI Act	High-risk AI systems & GPAI obligations apply (current law)	Gap analysis, risk management system, transparency measures
January 1, 2027	Colorado AI Act (Revised)	Transparency & disclosure for automated decision-making in consequential decisions	Impact assessments, consumer notice processes
August 2, 2027	EU AI Act	Additional phases & GPAI already on market compliance	Full AIMS alignment, ongoing monitoring
Ongoing / Annual	CCPA/CPRA & U.S. State Privacy Laws	Privacy notices, consumer rights, DPIAs, data broker updates	Annual review & program updates
Recurring (9–12 months post-cert)	ISO 27001	Annual surveillance audits; 3-year recertification	Internal audits, management review
3–12 months typical	ISO 42001	Certification process (no fixed external deadline)	AIMS design, risk assessment, internal audit
Annual Recommended	SOC 2	Type II attestation	Control testing, evidence collection

Next Step: Get your Free Pre-Assessment — We’ll map these deadlines to your specific AI systems, data flows, and compliance maturity.

Ongoing / Varies by State State & Local Government Privacy / Public Records Laws FOIA-style requests, data protection for public records, vendor contracts Annual policy reviews, procurement AI clauses January 1, 2027 (and ongoing) Colorado AI Act & State AI Governance Policies Transparency for automated decisions; many states require AI inventories or impact assessments for public agencies Agency-specific AI policies, procurement standards Ongoing Federal Guidance Federal AI Executive Orders & OMB Memos (applicable to state/federal-funded entities) Risk management, transparency, and responsible AI use in government operations Alignment with NIST frameworks, annual reporting Ongoing / Best Practice (April 2026 concept note released) NIST AI Risk Management Framework (AI RMF 1.0 + Profiles) Risk management, governance, and trustworthy AI practices (widely used by government & enterprises) Map to ISO 42001, conduct self-assessments, adopt sector profiles (e.g., Critical Infrastructure)