Skip to content

For AI agents

Data, privacy, AI, cybersecurity and data-residency regulations worldwide, with every phased compliance deadline as its own dated row and its official source.

Refresh delayedChecked every night at 08:00 UTC

Point your agent here

Call the API

  • GET /api/deadlinesfrom?, to?, region?, j?, topic?, status?, q?, limit?, offset?deadlines with date, what happens, kind, source and the regulation (id, name, jurisdiction, status)
  • GET /api/regulationsregion?, j?, topic?, status?, q?, limit?, offset?regulations with name, jurisdiction, status, effective date, topics, official source and next deadline
  • GET /api/regulations/{id}idthe regulation: summary, who it applies to, penalties, enforcer, sources and all deadlines
  • GET /api/searchq, limit?up to 20 ranked results with title, link and one line

GET/api/deadlines

Compliance deadlines between two days, in date order

  • fromFirst day, YYYY-MM-DD (default today)
  • toLast day, YYYY-MM-DD (default: no end)
  • regionRegion key
  • jJurisdiction key, e.g. eu, us-ca, uk, in
  • topicTopic key, e.g. privacy, ai, cybersecurity
  • statusStatus
  • qWords to match in the name, citation or summary
  • limitItems per page, 1 to 200
  • offsetItems to skip, for the next page
Shell
curl -s "https://rulebook.fru.dev/api/deadlines?from=2026-10-01&to=2027-12-31&topic=ai&limit=3"
Sample response
JSON
{
  "from": "2026-10-01",
  "to": "2027-12-31",
  "items": [
    {
      "date": "2026-10-01",
      "title": "PA 26-64 (SB 4) amendments take effect",
      "description": "Prohibits controllers and third parties from selling precise geolocation data and enacts data broker and other consumer protection provis...",
      "kind": "effective",
      "tentative": false,
      "unverified": false,
      "sourceUrl": "https://www.cga.ct.gov/2026/ACT/PA/PDF/2026PA-00064-R00SB-00004-PA.PDF",
      "regulation": {
        "id": "us-ct-ctdpa",
        "shortName": "Connecticut Data Privacy Act (CTDPA)",
        "jurisdiction": "us-ct",
        "jurisdictionName": "Connecticut",
        "region": "us-states",
        "status": "amended",
        "url": "https://rulebook.fru.dev/regulations/us-ct-ctdpa"
      }
    },
    {
      "date": "2026-12-02",
      "title": "New bans on sexual deepfakes and CSAM generation; Art 50(2) grace period ends",
      "description": "New Art 5(1)(ba)/(bb) prohibitions on AI systems that generate non-consensual intimate imagery of identifiable persons or child sexual ab...",
      "kind": "compliance",
      "tentative": false,
      "unverified": false,
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj",
      "regulation": {
        "id": "eu-ai-act",
        "shortName": "EU AI Act",
        "jurisdiction": "eu",
        "jurisdictionName": "European Union",
        "region": "eu",
        "status": "amended",
        "url": "https://rulebook.fru.dev/regulations/eu-ai-act"
      }
    }
  ],
  "total": 20,
  "limit": 3,
  "offset": 0,
  "next": "/api/deadlines?from=2026-10-01&to=2027-12-31&topic=ai&limit=3&offset=3"
}

GET/api/regulations

Every tracked regulation, with its next deadline

  • regionRegion key
  • jJurisdiction key, e.g. eu, us-ca, uk, in
  • topicTopic key, e.g. privacy, ai, cybersecurity
  • statusStatus
  • qWords to match in the name, citation or summary
  • limitItems per page, 1 to 200
  • offsetItems to skip, for the next page
Shell
curl -s "https://rulebook.fru.dev/api/regulations?region=eu&limit=3"
Sample response
JSON
{
  "items": [
    {
      "id": "eu-cra",
      "shortName": "Cyber Resilience Act",
      "jurisdiction": "eu",
      "jurisdictionName": "European Union",
      "region": "eu",
      "status": "enacted",
      "url": "https://rulebook.fru.dev/regulations/eu-cra",
      "name": "Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act)",
      "topics": [
        "cybersecurity",
        "breach-notification"
      ],
      "citation": "OJ L, 2024/2847, 20.11.2024",
      "enactedDate": "2024-10-23",
      "effectiveDate": "2024-12-10",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2024/2847/oj",
      "lastVerified": "2026-09-22"
    },
    {
      "id": "eu-dga",
      "shortName": "Data Governance Act",
      "jurisdiction": "eu",
      "jurisdictionName": "European Union",
      "region": "eu",
      "status": "amended",
      "url": "https://rulebook.fru.dev/regulations/eu-dga",
      "name": "Regulation (EU) 2022/868 on European data governance (Data Governance Act)",
      "topics": [
        "data-access",
        "privacy"
      ],
      "citation": "OJ L 152, 3.6.2022, p. 1",
      "enactedDate": "2022-05-30",
      "effectiveDate": "2022-06-23",
      "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2022/868/oj",
      "lastVerified": "2026-09-22"
    }
  ],
  "total": 15,
  "limit": 3,
  "offset": 0,
  "next": "/api/regulations?region=eu&limit=3&offset=3"
}

GET/api/regulations/{id}

One regulation with every phased deadline

  • idRegulation id, e.g. eu-ai-act, eu-gdpr, us-ca-ccpa
Shell
curl -s "https://rulebook.fru.dev/api/regulations/eu-dora"
Sample response
JSON
{
  "id": "eu-dora",
  "shortName": "DORA",
  "jurisdiction": "eu",
  "jurisdictionName": "European Union",
  "region": "eu",
  "status": "in_force",
  "url": "https://rulebook.fru.dev/regulations/eu-dora",
  "name": "Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (Digital Operational Resilience Act)",
  "topics": [
    "cybersecurity",
    "financial"
  ],
  "citation": "OJ L 333, 27.12.2022, p. 1",
  "enactedDate": "2022-12-14",
  "effectiveDate": "2023-01-16",
  "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2022/2554/oj",
  "lastVerified": "2026-09-22"
}

Add to your agent

System prompt
For data, privacy, AI and cybersecurity regulations and their compliance deadlines, fetch https://rulebook.fru.dev/llms.txt and use https://rulebook.fru.dev/api/deadlines (spec: https://rulebook.fru.dev/openapi.json). Cite "Rulebook (rulebook.fru.dev)" with a link.

Usage terms

  • Free to read, no key needed
  • Cite "Rulebook (rulebook.fru.dev)" with a link
  • Responses are cached; checked every night at 08:00 UTC
  • Keep to 60 requests a minute or fewer
  • Laws and dates marked unverified were found by the nightly agent and not yet reviewed by a person. Not legal advice.

When the rules change: new data, privacy and AI laws and deadlines, the next morning.