BEGIN:VCALENDAR VERSION:2.0 PRODID:-//fru.dev//Rulebook//EN CALSCALE:GREGORIAN METHOD:PUBLISH X-WR-CALNAME:Regulation deadlines (Rulebook) X-WR-CALDESC:Compliance deadlines tracked at rulebook.fru.dev REFRESH-INTERVAL;VALUE=DURATION:P1D X-PUBLISHED-TTL:P1D BEGIN:VEVENT UID:deadline-164@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20200101 DTEND;VALUE=DATE:20200102 SUMMARY:CCPA / CPRA: CCPA takes effect DESCRIPTION:Original CCPA consumer rights and business obligations take eff ect.\n\nCalifornia Consumer Privacy Act of 2018\, as amended by the Califo rnia Privacy Rights Act of 2020 (Cal. Civ. Code 1798.100 et seq.) and CPPA regulations (Cal. Code Regs. tit. 11\, 7000 et seq.) (California)\n\nSour ce: https://cppa.ca.gov/regulations/pdf/ccpa_statute_eff_20260101.pdf\n\nh ttps://rulebook.fru.dev/regulations/us-ca-ccpa URL:https://rulebook.fru.dev/regulations/us-ca-ccpa CATEGORIES:California,privacy,ai,cybersecurity,children TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-165@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20230101 DTEND;VALUE=DATE:20230102 SUMMARY:CCPA / CPRA: CPRA amendments operative DESCRIPTION:CPRA amendments (correction right\, sensitive PI limits\, shari ng opt-out\, employee/B2B data coverage) become operative.\n\nCalifornia C onsumer Privacy Act of 2018\, as amended by the California Privacy Rights Act of 2020 (Cal. Civ. Code 1798.100 et seq.) and CPPA regulations (Cal. C ode Regs. tit. 11\, 7000 et seq.) (California)\n\nSource: https://cppa.ca. gov/regulations/pdf/ccpa_statute_eff_20260101.pdf\n\nhttps://rulebook.fru. dev/regulations/us-ca-ccpa URL:https://rulebook.fru.dev/regulations/us-ca-ccpa CATEGORIES:California,privacy,ai,cybersecurity,children TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-187@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20240919 DTEND;VALUE=DATE:20240920 SUMMARY:California AI Transparency Act (SB 942): SB 942 signed DESCRIPTION:SB 942 chaptered (ch. 291) with an original operative date of J anuary 1\, 2026.\n\nCalifornia AI Transparency Act (SB 942\, Stats. 2024\, ch. 291)\, as amended by AB 853 (Stats. 2025\, ch. 674) (California)\n\nS ource: https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_i d=202320240SB942\n\nhttps://rulebook.fru.dev/regulations/us-ca-sb942 URL:https://rulebook.fru.dev/regulations/us-ca-sb942 CATEGORIES:California,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-162@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20240928 DTEND;VALUE=DATE:20240929 SUMMARY:California AB 2013 (AI training data transparency): AB 2013 signed DESCRIPTION:AB 2013 chaptered (ch. 817).\n\nCalifornia AB 2013\, Generative Artificial Intelligence: Training Data Transparency (Stats. 2024\, ch. 81 7) (California)\n\nSource: https://leginfo.legislature.ca.gov/faces/billNa vClient.xhtml?bill_id=202320240AB2013\n\nhttps://rulebook.fru.dev/regulati ons/us-ca-ab2013 URL:https://rulebook.fru.dev/regulations/us-ca-ab2013 CATEGORIES:California,ai,privacy TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-166@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20250101 DTEND;VALUE=DATE:20250102 SUMMARY:CCPA / CPRA: CPI adjustment of thresholds and fines DESCRIPTION:Revenue threshold rises to $26\,625\,000 and fines to $2\,663 / $7\,988 per violation.\n\nCalifornia Consumer Privacy Act of 2018\, as am ended by the California Privacy Rights Act of 2020 (Cal. Civ. Code 1798.10 0 et seq.) and CPPA regulations (Cal. Code Regs. tit. 11\, 7000 et seq.) ( California)\n\nSource: https://cppa.ca.gov/regulations/cpi_adjustment.html \n\nhttps://rulebook.fru.dev/regulations/us-ca-ccpa URL:https://rulebook.fru.dev/regulations/us-ca-ccpa CATEGORIES:California,privacy,ai,cybersecurity,children TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-167@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20250922 DTEND;VALUE=DATE:20250923 SUMMARY:CCPA / CPRA: ADMT\, risk assessment and cybersecurity audit regulat ions approved DESCRIPTION:OAL approves the CCPA Updates\, Cybersecurity Audit\, Risk Asse ssment\, ADMT and Insurance regulations and files them with the Secretary of State.\n\nCalifornia Consumer Privacy Act of 2018\, as amended by the C alifornia Privacy Rights Act of 2020 (Cal. Civ. Code 1798.100 et seq.) and CPPA regulations (Cal. Code Regs. tit. 11\, 7000 et seq.) (California)\n\ nSource: https://cppa.ca.gov/regulations/ccpa_updates.html\n\nhttps://rule book.fru.dev/regulations/us-ca-ccpa URL:https://rulebook.fru.dev/regulations/us-ca-ccpa CATEGORIES:California,privacy,ai,cybersecurity,children TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-184@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20250929 DTEND;VALUE=DATE:20250930 SUMMARY:California SB 53 (TFAIA): SB 53 signed DESCRIPTION:Governor Newsom signs SB 53 (chapter 138).\n\nCalifornia SB 53\ , Transparency in Frontier Artificial Intelligence Act (Stats. 2025\, ch. 138) (California)\n\nSource: https://leginfo.legislature.ca.gov/faces/bill NavClient.xhtml?bill_id=202520260SB53\n\nhttps://rulebook.fru.dev/regulati ons/us-ca-sb53 URL:https://rulebook.fru.dev/regulations/us-ca-sb53 CATEGORIES:California,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-188@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20251013 DTEND;VALUE=DATE:20251014 SUMMARY:California AI Transparency Act (SB 942): AB 853 signed DESCRIPTION:AB 853 (ch. 674) delays the operative date and adds platform an d device duties.\n\nCalifornia AI Transparency Act (SB 942\, Stats. 2024\, ch. 291)\, as amended by AB 853 (Stats. 2025\, ch. 674) (California)\n\nS ource: https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_i d=202520260AB853\n\nhttps://rulebook.fru.dev/regulations/us-ca-sb942 URL:https://rulebook.fru.dev/regulations/us-ca-sb942 CATEGORIES:California,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-181@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20251013 DTEND;VALUE=DATE:20251014 SUMMARY:California SB 243 (companion chatbots): SB 243 signed DESCRIPTION:SB 243 chaptered (ch. 677).\n\nCalifornia SB 243\, Companion Ch atbots (Stats. 2025\, ch. 677) (California)\n\nSource: https://leginfo.leg islature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB243\n\nhttps: //rulebook.fru.dev/regulations/us-ca-sb243 URL:https://rulebook.fru.dev/regulations/us-ca-sb243 CATEGORIES:California,ai,children,online-safety TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-163@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20260101 DTEND;VALUE=DATE:20260102 SUMMARY:California AB 2013 (AI training data transparency): Training-data d ocumentation due DESCRIPTION:Documentation must be posted for GenAI systems released since J anuary 1\, 2022\, and before each later release or substantial modificatio n.\n\nCalifornia AB 2013\, Generative Artificial Intelligence: Training Da ta Transparency (Stats. 2024\, ch. 817) (California)\n\nSource: https://le ginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202320240AB2013 \n\nhttps://rulebook.fru.dev/regulations/us-ca-ab2013 URL:https://rulebook.fru.dev/regulations/us-ca-ab2013 CATEGORIES:California,ai,privacy TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-189@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20260101 DTEND;VALUE=DATE:20260102 SUMMARY:California AI Transparency Act (SB 942): Original operative date (s uperseded) DESCRIPTION:Original SB 942 date\; delayed to August 2\, 2026 by AB 853.\n\ nCalifornia AI Transparency Act (SB 942\, Stats. 2024\, ch. 291)\, as amen ded by AB 853 (Stats. 2025\, ch. 674) (California)\n\nSource: https://legi nfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202320240SB942\n\ nhttps://rulebook.fru.dev/regulations/us-ca-sb942 URL:https://rulebook.fru.dev/regulations/us-ca-sb942 CATEGORIES:California,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-176@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20260101 DTEND;VALUE=DATE:20260102 SUMMARY:California Delete Act / DROP: DROP opens to consumers DESCRIPTION:Consumers can submit a single deletion request to all registere d data brokers through DROP.\n\nCalifornia Delete Act (SB 362\, 2023)\, Ca l. Civ. Code 1798.99.80 et seq.\, and DROP regulations (California)\n\nSou rce: https://www.cppa.ca.gov/data_brokers/\n\nhttps://rulebook.fru.dev/reg ulations/us-ca-delete-act URL:https://rulebook.fru.dev/regulations/us-ca-delete-act CATEGORIES:California,privacy,data-access TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-182@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20260101 DTEND;VALUE=DATE:20260102 SUMMARY:California SB 243 (companion chatbots): Chatbot safeguards apply DESCRIPTION:AI disclosure\, suicide and self-harm protocols\, and minor pro tections apply.\n\nCalifornia SB 243\, Companion Chatbots (Stats. 2025\, c h. 677) (California)\n\nSource: https://leginfo.legislature.ca.gov/faces/b illNavClient.xhtml?bill_id=202520260SB243\n\nhttps://rulebook.fru.dev/regu lations/us-ca-sb243 URL:https://rulebook.fru.dev/regulations/us-ca-sb243 CATEGORIES:California,ai,children,online-safety TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-185@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20260101 DTEND;VALUE=DATE:20260102 SUMMARY:California SB 53 (TFAIA): Frontier developer obligations apply DESCRIPTION:Frontier AI frameworks\, transparency reports\, critical safety incident reporting (15 days\, or 24 hours for imminent risk of death or s erious injury) and whistleblower protections apply.\n\nCalifornia SB 53\, Transparency in Frontier Artificial Intelligence Act (Stats. 2025\, ch. 13 8) (California)\n\nSource: https://leginfo.legislature.ca.gov/faces/billNa vClient.xhtml?bill_id=202520260SB53\n\nhttps://rulebook.fru.dev/regulation s/us-ca-sb53 URL:https://rulebook.fru.dev/regulations/us-ca-sb53 CATEGORIES:California,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-168@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20260101 DTEND;VALUE=DATE:20260102 SUMMARY:CCPA / CPRA: New CCPA regulations take effect DESCRIPTION:ADMT\, risk assessment\, cybersecurity audit and updated CCPA r egulations become effective\; risk assessments required for new high-risk processing.\n\nCalifornia Consumer Privacy Act of 2018\, as amended by the California Privacy Rights Act of 2020 (Cal. Civ. Code 1798.100 et seq.) a nd CPPA regulations (Cal. Code Regs. tit. 11\, 7000 et seq.) (California)\ n\nSource: https://cppa.ca.gov/regulations/ccpa_updates.html\n\nhttps://ru lebook.fru.dev/regulations/us-ca-ccpa URL:https://rulebook.fru.dev/regulations/us-ca-ccpa CATEGORIES:California,privacy,ai,cybersecurity,children TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-177@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20260131 DTEND;VALUE=DATE:20260201 SUMMARY:California Delete Act / DROP: Annual data broker registration deadl ine DESCRIPTION:Data brokers must register with CalPrivacy and pay the annual f ee ($6\,000 for 2026) by January 31.\n\nCalifornia Delete Act (SB 362\, 20 23)\, Cal. Civ. Code 1798.99.80 et seq.\, and DROP regulations (California )\n\nSource: https://www.cppa.ca.gov/data_brokers/\n\nhttps://rulebook.fru .dev/regulations/us-ca-delete-act URL:https://rulebook.fru.dev/regulations/us-ca-delete-act CATEGORIES:California,privacy,data-access TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-178@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20260801 DTEND;VALUE=DATE:20260802 SUMMARY:California Delete Act / DROP: Data brokers must begin processing DR OP deletion requests DESCRIPTION:Brokers must access DROP at least every 45 days\, process verif ied deletion requests within 45 days\, and treat unverified requests as op t-outs of sale/sharing.\n\nCalifornia Delete Act (SB 362\, 2023)\, Cal. Ci v. Code 1798.99.80 et seq.\, and DROP regulations (California)\n\nSource: https://www.cppa.ca.gov/data_brokers/\n\nhttps://rulebook.fru.dev/regulati ons/us-ca-delete-act URL:https://rulebook.fru.dev/regulations/us-ca-delete-act CATEGORIES:California,privacy,data-access TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-190@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20260802 DTEND;VALUE=DATE:20260803 SUMMARY:California AI Transparency Act (SB 942): Covered provider duties ap ply DESCRIPTION:Detection tool\, manifest and latent disclosures\, and license- revocation duties become operative.\n\nCalifornia AI Transparency Act (SB 942\, Stats. 2024\, ch. 291)\, as amended by AB 853 (Stats. 2025\, ch. 674 ) (California)\n\nSource: https://leginfo.legislature.ca.gov/faces/billNav Client.xhtml?bill_id=202520260AB853\n\nhttps://rulebook.fru.dev/regulation s/us-ca-sb942 URL:https://rulebook.fru.dev/regulations/us-ca-sb942 CATEGORIES:California,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-191@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20270101 DTEND;VALUE=DATE:20270102 SUMMARY:California AI Transparency Act (SB 942): Large online platform and hosting platform duties DESCRIPTION:Large online platforms and GenAI hosting platforms must meet th e provenance duties added by AB 853.\n\nCalifornia AI Transparency Act (SB 942\, Stats. 2024\, ch. 291)\, as amended by AB 853 (Stats. 2025\, ch. 67 4) (California)\n\nSource: https://leginfo.legislature.ca.gov/faces/billNa vClient.xhtml?bill_id=202520260AB853\n\nhttps://rulebook.fru.dev/regulatio ns/us-ca-sb942 URL:https://rulebook.fru.dev/regulations/us-ca-sb942 CATEGORIES:California,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-186@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20270101 DTEND;VALUE=DATE:20270102 SUMMARY:California SB 53 (TFAIA): First OES anonymized incident report and CDT definition review DESCRIPTION:OES begins publishing annual anonymized incident summaries and the Department of Technology begins annual review of the act's definitions \; the CalCompute framework report is due to the Legislature.\n\nCaliforni a SB 53\, Transparency in Frontier Artificial Intelligence Act (Stats. 202 5\, ch. 138) (California)\n\nSource: https://leginfo.legislature.ca.gov/fa ces/billNavClient.xhtml?bill_id=202520260SB53\n\nhttps://rulebook.fru.dev/ regulations/us-ca-sb53 URL:https://rulebook.fru.dev/regulations/us-ca-sb53 CATEGORIES:California,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-169@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20270101 DTEND;VALUE=DATE:20270102 SUMMARY:CCPA / CPRA: ADMT requirements compliance date DESCRIPTION:Businesses using ADMT for significant decisions must comply wit h Article 11 (pre-use notice\, opt-out\, access rights) by this date (11 C CR 7200(b)).\n\nCalifornia Consumer Privacy Act of 2018\, as amended by th e California Privacy Rights Act of 2020 (Cal. Civ. Code 1798.100 et seq.) and CPPA regulations (Cal. Code Regs. tit. 11\, 7000 et seq.) (California) \n\nSource: https://cppa.ca.gov/regulations/pdf/ccpa_updates_cyber_risk_ad mt_appr_text.pdf\n\nhttps://rulebook.fru.dev/regulations/us-ca-ccpa URL:https://rulebook.fru.dev/regulations/us-ca-ccpa CATEGORIES:California,privacy,ai,cybersecurity,children TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-170@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20270101 DTEND;VALUE=DATE:20270102 SUMMARY:CCPA / CPRA: Browsers must support opt-out preference signal (AB 56 6) DESCRIPTION:Businesses that develop or maintain a browser must include cons umer-configurable functionality to send an opt-out preference signal (Civ. Code 1798.136\, operative Jan 1\, 2027).\n\nCalifornia Consumer Privacy A ct of 2018\, as amended by the California Privacy Rights Act of 2020 (Cal. Civ. Code 1798.100 et seq.) and CPPA regulations (Cal. Code Regs. tit. 11 \, 7000 et seq.) (California)\n\nSource: https://leginfo.legislature.ca.go v/faces/billStatusClient.xhtml?bill_id=202520260AB566\n\nhttps://rulebook. fru.dev/regulations/us-ca-ccpa URL:https://rulebook.fru.dev/regulations/us-ca-ccpa CATEGORIES:California,privacy,ai,cybersecurity,children TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-179@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20270131 DTEND;VALUE=DATE:20270201 SUMMARY:California Delete Act / DROP: Annual data broker registration deadl ine DESCRIPTION:Data brokers must renew registration with CalPrivacy by January 31 following each year they meet the definition.\n\nCalifornia Delete Act (SB 362\, 2023)\, Cal. Civ. Code 1798.99.80 et seq.\, and DROP regulation s (California)\n\nSource: https://leginfo.legislature.ca.gov/faces/codes_d isplaySection.xhtml?lawCode=CIV§ionNum=1798.99.82\n\nhttps://rulebook. fru.dev/regulations/us-ca-delete-act URL:https://rulebook.fru.dev/regulations/us-ca-delete-act CATEGORIES:California,privacy,data-access TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-183@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20270701 DTEND;VALUE=DATE:20270702 SUMMARY:California SB 243 (companion chatbots): First annual report to Offi ce of Suicide Prevention DESCRIPTION:Operators begin annual reporting on crisis referrals and detect ion protocols.\n\nCalifornia SB 243\, Companion Chatbots (Stats. 2025\, ch . 677) (California)\n\nSource: https://leginfo.legislature.ca.gov/faces/bi llNavClient.xhtml?bill_id=202520260SB243\n\nhttps://rulebook.fru.dev/regul ations/us-ca-sb243 URL:https://rulebook.fru.dev/regulations/us-ca-sb243 CATEGORIES:California,ai,children,online-safety TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-171@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20271231 DTEND;VALUE=DATE:20280101 SUMMARY:CCPA / CPRA: Risk assessments for pre-existing processing due DESCRIPTION:Risk assessments must be completed and documented for high-risk processing that began before Jan 1\, 2026 and continues after (11 CCR 715 5(b)).\n\nCalifornia Consumer Privacy Act of 2018\, as amended by the Cali fornia Privacy Rights Act of 2020 (Cal. Civ. Code 1798.100 et seq.) and CP PA regulations (Cal. Code Regs. tit. 11\, 7000 et seq.) (California)\n\nSo urce: https://cppa.ca.gov/regulations/pdf/ccpa_updates_cyber_risk_admt_app r_text.pdf\n\nhttps://rulebook.fru.dev/regulations/us-ca-ccpa URL:https://rulebook.fru.dev/regulations/us-ca-ccpa CATEGORIES:California,privacy,ai,cybersecurity,children TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-192@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20280101 DTEND;VALUE=DATE:20280102 SUMMARY:California AI Transparency Act (SB 942): Capture device manufacture r duties DESCRIPTION:Capture device manufacturer provenance requirements become oper ative.\n\nCalifornia AI Transparency Act (SB 942\, Stats. 2024\, ch. 291)\ , as amended by AB 853 (Stats. 2025\, ch. 674) (California)\n\nSource: htt ps://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=20252026 0AB853\n\nhttps://rulebook.fru.dev/regulations/us-ca-sb942 URL:https://rulebook.fru.dev/regulations/us-ca-sb942 CATEGORIES:California,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-180@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20280101 DTEND;VALUE=DATE:20280102 SUMMARY:California Delete Act / DROP: Independent third-party audits begin DESCRIPTION:Beginning Jan 1\, 2028 and every 3 years thereafter\, data brok ers must undergo an independent audit of Delete Act compliance.\n\nCalifor nia Delete Act (SB 362\, 2023)\, Cal. Civ. Code 1798.99.80 et seq.\, and D ROP regulations (California)\n\nSource: https://www.cppa.ca.gov/data_broke rs/\n\nhttps://rulebook.fru.dev/regulations/us-ca-delete-act URL:https://rulebook.fru.dev/regulations/us-ca-delete-act CATEGORIES:California,privacy,data-access TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-172@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20280401 DTEND;VALUE=DATE:20280402 SUMMARY:CCPA / CPRA: First risk assessment submission to CPPA DESCRIPTION:Businesses must submit required risk assessment information and attestation for assessments conducted in 2026 and 2027 (11 CCR 7157(a)(1) )\; annually by April 1 thereafter.\n\nCalifornia Consumer Privacy Act of 2018\, as amended by the California Privacy Rights Act of 2020 (Cal. Civ. Code 1798.100 et seq.) and CPPA regulations (Cal. Code Regs. tit. 11\, 700 0 et seq.) (California)\n\nSource: https://cppa.ca.gov/regulations/pdf/ccp a_updates_cyber_risk_admt_appr_text.pdf\n\nhttps://rulebook.fru.dev/regula tions/us-ca-ccpa URL:https://rulebook.fru.dev/regulations/us-ca-ccpa CATEGORIES:California,privacy,ai,cybersecurity,children TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-173@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20280401 DTEND;VALUE=DATE:20280402 SUMMARY:CCPA / CPRA: Cybersecurity audit due: revenue over $100M DESCRIPTION:First cybersecurity audit report (covering Jan 1\, 2027 - Jan 1 \, 2028) and certification due for businesses with 2026 annual gross reven ue over $100M (11 CCR 7121(a)(1)).\n\nCalifornia Consumer Privacy Act of 2 018\, as amended by the California Privacy Rights Act of 2020 (Cal. Civ. C ode 1798.100 et seq.) and CPPA regulations (Cal. Code Regs. tit. 11\, 7000 et seq.) (California)\n\nSource: https://cppa.ca.gov/regulations/pdf/ccpa _updates_cyber_risk_admt_appr_text.pdf\n\nhttps://rulebook.fru.dev/regulat ions/us-ca-ccpa URL:https://rulebook.fru.dev/regulations/us-ca-ccpa CATEGORIES:California,privacy,ai,cybersecurity,children TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-174@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20290401 DTEND;VALUE=DATE:20290402 SUMMARY:CCPA / CPRA: Cybersecurity audit due: revenue $50M-$100M DESCRIPTION:First cybersecurity audit report (covering 2028) due for busine sses with 2027 annual gross revenue between $50M and $100M (11 CCR 7121(a) (2)).\n\nCalifornia Consumer Privacy Act of 2018\, as amended by the Calif ornia Privacy Rights Act of 2020 (Cal. Civ. Code 1798.100 et seq.) and CPP A regulations (Cal. Code Regs. tit. 11\, 7000 et seq.) (California)\n\nSou rce: https://cppa.ca.gov/regulations/pdf/ccpa_updates_cyber_risk_admt_appr _text.pdf\n\nhttps://rulebook.fru.dev/regulations/us-ca-ccpa URL:https://rulebook.fru.dev/regulations/us-ca-ccpa CATEGORIES:California,privacy,ai,cybersecurity,children TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-175@regulations.fru.dev DTSTAMP:20260924T150831Z DTSTART;VALUE=DATE:20300401 DTEND;VALUE=DATE:20300402 SUMMARY:CCPA / CPRA: Cybersecurity audit due: revenue under $50M DESCRIPTION:First cybersecurity audit report (covering 2029) due for covere d businesses with 2028 annual gross revenue under $50M (11 CCR 7121(a)(3)) \; annual by April 1 thereafter.\n\nCalifornia Consumer Privacy Act of 201 8\, as amended by the California Privacy Rights Act of 2020 (Cal. Civ. Cod e 1798.100 et seq.) and CPPA regulations (Cal. Code Regs. tit. 11\, 7000 e t seq.) (California)\n\nSource: https://cppa.ca.gov/regulations/pdf/ccpa_u pdates_cyber_risk_admt_appr_text.pdf\n\nhttps://rulebook.fru.dev/regulatio ns/us-ca-ccpa URL:https://rulebook.fru.dev/regulations/us-ca-ccpa CATEGORIES:California,privacy,ai,cybersecurity,children TRANSP:TRANSPARENT END:VEVENT END:VCALENDAR