BEGIN:VCALENDAR VERSION:2.0 PRODID:-//fru.dev//Rulebook//EN CALSCALE:GREGORIAN METHOD:PUBLISH X-WR-CALNAME:Regulation deadlines (Rulebook) X-WR-CALDESC:Compliance deadlines tracked at rulebook.fru.dev REFRESH-INTERVAL;VALUE=DURATION:P1D X-PUBLISHED-TTL:P1D BEGIN:VEVENT UID:deadline-139@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20140702 DTEND;VALUE=DATE:20140703 SUMMARY:Singapore PDPA: PDPA data protection obligations take effect DESCRIPTION:Main data protection provisions come into force.\n\nPersonal Da ta Protection Act 2012 (Singapore) (Singapore)\n\nSource: https://sso.agc. gov.sg/Act/PDPA2012\n\nhttps://rulebook.fru.dev/regulations/sg-pdpa URL:https://rulebook.fru.dev/regulations/sg-pdpa CATEGORIES:Singapore,privacy,breach-notification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-31@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20170601 DTEND;VALUE=DATE:20170602 SUMMARY:China Cybersecurity Law: Cybersecurity Law takes effect DESCRIPTION:Original CSL obligations for network operators and CII operator s apply.\n\nCybersecurity Law of the People's Republic of China (as amende d by the NPC Standing Committee Decision of 28 October 2025) (China)\n\nSo urce: https://www.gov.cn/yaowen/liebiao/202510/content_7046194.htm\n\nhttp s://rulebook.fru.dev/regulations/cn-csl URL:https://rulebook.fru.dev/regulations/cn-csl CATEGORIES:China,cybersecurity,data-residency,ai,privacy TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-134@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20201201 DTEND;VALUE=DATE:20201202 SUMMARY:New Zealand Privacy Act: Privacy Act 2020 in force DESCRIPTION:IPPs\, mandatory breach notification and compliance notices app ly.\n\nPrivacy Act 2020 (New Zealand)\, as amended by the Privacy Amendmen t Act 2025 (New Zealand)\n\nSource: https://www.justice.govt.nz/justice-se ctor-policy/key-initiatives/enhancing-the-privacy-act/\n\nhttps://rulebook .fru.dev/regulations/nz-privacy-act URL:https://rulebook.fru.dev/regulations/nz-privacy-act CATEGORIES:New Zealand,privacy,breach-notification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-140@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20210201 DTEND;VALUE=DATE:20210202 SUMMARY:Singapore PDPA: 2020 amendments largely in force DESCRIPTION:Mandatory data breach notification and revised consent framewor k apply.\n\nPersonal Data Protection Act 2012 (Singapore) (Singapore)\n\nS ource: https://sso.agc.gov.sg/Act/PDPA2012\n\nhttps://rulebook.fru.dev/reg ulations/sg-pdpa URL:https://rulebook.fru.dev/regulations/sg-pdpa CATEGORIES:Singapore,privacy,breach-notification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-33@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20210901 DTEND;VALUE=DATE:20210902 SUMMARY:China Data Security Law: Data Security Law takes effect DESCRIPTION:Data classification\, important-data protection and data export restrictions apply (Art. 55).\n\nData Security Law of the People's Republ ic of China (China)\n\nSource: http://www.cac.gov.cn/2021-06/11/c_16249945 66919140.htm\n\nhttps://rulebook.fru.dev/regulations/cn-dsl URL:https://rulebook.fru.dev/regulations/cn-dsl CATEGORIES:China,cybersecurity,data-residency,data-access TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-36@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20211101 DTEND;VALUE=DATE:20211102 SUMMARY:China PIPL: PIPL takes effect DESCRIPTION:All PIPL obligations (legal bases\, consent\, cross-border rule s\, data subject rights) apply (Art. 74).\n\nPersonal Information Protecti on Law of the People's Republic of China (China)\n\nSource: http://www.cac .gov.cn/2021-08/20/c_1631050028355286.htm\n\nhttps://rulebook.fru.dev/regu lations/cn-pipl URL:https://rulebook.fru.dev/regulations/cn-pipl CATEGORIES:China,privacy,data-residency,biometrics,children TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-121@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20220401 DTEND;VALUE=DATE:20220402 SUMMARY:Japan APPI: 2020 amendments in force DESCRIPTION:Mandatory breach reporting\, pseudonymized information and stri cter cross-border rules apply.\n\nAct on the Protection of Personal Inform ation (Act No. 57 of 2003)\, as amended including the 2026 amendment act ( Japan)\n\nSource: https://www.ppc.go.jp/en/legal/\n\nhttps://rulebook.fru. dev/regulations/jp-appi URL:https://rulebook.fru.dev/regulations/jp-appi CATEGORIES:Japan,privacy,children,biometrics,breach-notification,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-142@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20220601 DTEND;VALUE=DATE:20220602 SUMMARY:Thailand PDPA: PDPA main obligations take effect DESCRIPTION:Core data protection obligations and penalties apply after post ponement Royal Decrees.\n\nPersonal Data Protection Act B.E. 2562 (2019) ( Thailand)\n\nSource: https://www.ratchakitcha.soc.go.th/DATA/PDF/2562/A/06 9/T_0052.PDF\n\nhttps://rulebook.fru.dev/regulations/th-pdpa URL:https://rulebook.fru.dev/regulations/th-pdpa CATEGORIES:Thailand,privacy,breach-notification,data-residency TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-141@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20221001 DTEND;VALUE=DATE:20221002 SUMMARY:Singapore PDPA: Higher financial penalty cap applies DESCRIPTION:Maximum penalty rises to 10% of Singapore turnover for organiza tions with turnover above SGD 10 million.\n\nPersonal Data Protection Act 2012 (Singapore) (Singapore)\n\nSource: https://sso.agc.gov.sg/Act/PDPA201 2\n\nhttps://rulebook.fru.dev/regulations/sg-pdpa URL:https://rulebook.fru.dev/regulations/sg-pdpa CATEGORIES:Singapore,privacy,breach-notification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-112@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20221017 DTEND;VALUE=DATE:20221018 SUMMARY:Indonesia PDP Law: PDP Law enacted and in force DESCRIPTION:Law takes effect on enactment\, starting a 2-year transition.\n \nLaw No. 27 of 2022 on Personal Data Protection (Undang-Undang Pelindunga n Data Pribadi) (Indonesia)\n\nSource: https://peraturan.bpk.go.id/Details /229798/uu-no-27-tahun-2022\n\nhttps://rulebook.fru.dev/regulations/id-pdp URL:https://rulebook.fru.dev/regulations/id-pdp CATEGORIES:Indonesia,privacy,breach-notification,data-residency,children TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-30@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20240322 DTEND;VALUE=DATE:20240323 SUMMARY:China Cross-Border Data Flow Provisions: Cross-border data flow pro visions take effect DESCRIPTION:Exemptions and volume thresholds apply from publication (Art. 1 4)\; security assessment results are valid for 3 years (Art. 9).\n\nProvis ions on Promoting and Regulating Cross-Border Data Flows (CAC Order No. 16 ) (China)\n\nSource: https://www.cac.gov.cn/2024-03/22/c_1712776611775634. htm\n\nhttps://rulebook.fru.dev/regulations/cn-cross-border URL:https://rulebook.fru.dev/regulations/cn-cross-border CATEGORIES:China,data-residency,privacy TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-113@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20241017 DTEND;VALUE=DATE:20241018 SUMMARY:Indonesia PDP Law: PDP Law transition ends DESCRIPTION:Controllers and processors must fully comply (Art. 74 two-year transition).\n\nLaw No. 27 of 2022 on Personal Data Protection (Undang-Und ang Pelindungan Data Pribadi) (Indonesia)\n\nSource: https://peraturan.bpk .go.id/Details/229798/uu-no-27-tahun-2022\n\nhttps://rulebook.fru.dev/regu lations/id-pdp URL:https://rulebook.fru.dev/regulations/id-pdp CATEGORIES:Indonesia,privacy,breach-notification,data-residency,children TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-4@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20241211 DTEND;VALUE=DATE:20241212 SUMMARY:Australia Privacy Act: Most POLA Act 2024 amendments commence DESCRIPTION:Tiered penalties\, infringement notices\, OAIC powers\, securit y and overseas-transfer clarifications and doxxing offences commence the d ay after Royal Assent.\n\nPrivacy Act 1988 (Cth)\, as amended by the Priva cy and Other Legislation Amendment Act 2024 (Australia)\n\nSource: https:/ /www.legislation.gov.au/C2024A00128/asmade\n\nhttps://rulebook.fru.dev/reg ulations/au-privacy-act URL:https://rulebook.fru.dev/regulations/au-privacy-act CATEGORIES:Australia,privacy,children,breach-notification,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-34@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20250101 DTEND;VALUE=DATE:20250102 SUMMARY:China Network Data Security Regulations: Network Data Regulations t ake effect DESCRIPTION:All provisions\, including the 10-million-person threshold duti es and annual important-data risk assessments\, apply.\n\nRegulations on N etwork Data Security Management (State Council Order No. 790) (China)\n\nS ource: https://www.gov.cn/zhengce/content/202409/content_6977766.htm\n\nht tps://rulebook.fru.dev/regulations/cn-network-data-regs URL:https://rulebook.fru.dev/regulations/cn-network-data-regs CATEGORIES:China,privacy,cybersecurity,data-residency TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-129@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20250101 DTEND;VALUE=DATE:20250102 SUMMARY:Malaysia PDPA: PDPA amendments phase 1 DESCRIPTION:Miscellaneous provisions commence (e.g. electronic service of n otices).\n\nPersonal Data Protection Act 2010 (Act 709)\, as amended by th e Personal Data Protection (Amendment) Act 2024 (Act A1727) (Malaysia)\n\n Source: https://www.pdp.gov.my/ppdpv1/en/personal-data-protection-amendmen t-act-2024-commencement-date-determination/\n\nhttps://rulebook.fru.dev/re gulations/my-pdpa URL:https://rulebook.fru.dev/regulations/my-pdpa CATEGORIES:Malaysia,privacy,breach-notification,biometrics,data-residency TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-130@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20250401 DTEND;VALUE=DATE:20250402 SUMMARY:Malaysia PDPA: PDPA amendments phase 2 DESCRIPTION:'Data controller' terminology\, biometric data as sensitive dat a\, higher penalties\, Security Principle for processors\, and removal of the cross-border whitelist take effect.\n\nPersonal Data Protection Act 20 10 (Act 709)\, as amended by the Personal Data Protection (Amendment) Act 2024 (Act A1727) (Malaysia)\n\nSource: https://www.pdp.gov.my/ppdpv1/en/pe rsonal-data-protection-amendment-act-2024-commencement-date-determination/ \n\nhttps://rulebook.fru.dev/regulations/my-pdpa URL:https://rulebook.fru.dev/regulations/my-pdpa CATEGORIES:Malaysia,privacy,breach-notification,biometrics,data-residency TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-35@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20250501 DTEND;VALUE=DATE:20250502 SUMMARY:China PI Compliance Audit Measures: PI compliance audit measures ta ke effect DESCRIPTION:Self-audit and regulator-ordered audit regime applies\; 10M+ pr ocessors must audit at least every two years.\n\nAdministrative Measures f or Personal Information Protection Compliance Audits (CAC Order No. 18) (C hina)\n\nSource: https://www.cac.gov.cn/2025-02/14/c_1741233507681519.htm\ n\nhttps://rulebook.fru.dev/regulations/cn-pi-compliance-audit URL:https://rulebook.fru.dev/regulations/cn-pi-compliance-audit CATEGORIES:China,privacy TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-2@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20250530 DTEND;VALUE=DATE:20250531 SUMMARY:Australia Cyber Security Act (ransomware reporting): Ransomware pay ment reporting starts DESCRIPTION:Reporting business entities must report ransomware/cyber-extort ion payments to ASD within 72 hours of payment.\n\nCyber Security Act 2024 (Cth) and Cyber Security (Ransomware Payment Reporting) Rules 2025 (Austr alia)\n\nSource: https://www.homeaffairs.gov.au/cyber-security-subsite/fil es/factsheet-ransomware-payment-reporting.pdf\n\nhttps://rulebook.fru.dev/ regulations/au-cyber-security-act URL:https://rulebook.fru.dev/regulations/au-cyber-security-act CATEGORIES:Australia,cybersecurity,breach-notification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-131@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20250601 DTEND;VALUE=DATE:20250602 SUMMARY:Malaysia PDPA: PDPA amendments phase 3 DESCRIPTION:Mandatory DPO appointment\, data breach notification\, and data portability take effect.\n\nPersonal Data Protection Act 2010 (Act 709)\, as amended by the Personal Data Protection (Amendment) Act 2024 (Act A172 7) (Malaysia)\n\nSource: https://www.pdp.gov.my/ppdpv1/en/personal-data-pr otection-amendment-act-2024-commencement-date-determination/\n\nhttps://ru lebook.fru.dev/regulations/my-pdpa URL:https://rulebook.fru.dev/regulations/my-pdpa CATEGORIES:Malaysia,privacy,breach-notification,biometrics,data-residency TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-119@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20250604 DTEND;VALUE=DATE:20250605 SUMMARY:Japan AI Promotion Act: AI Promotion Act promulgated and partly in force DESCRIPTION:Most provisions\, including basic principles and stakeholder du ties\, take effect on promulgation.\n\nAct on Promotion of Research and De velopment\, and Utilization of Artificial Intelligence-Related Technology (Japan)\n\nSource: https://www8.cao.go.jp/cstp/ai/ai_act/ai_act.html\n\nht tps://rulebook.fru.dev/regulations/jp-ai-act URL:https://rulebook.fru.dev/regulations/jp-ai-act CATEGORIES:Japan,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-5@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20250610 DTEND;VALUE=DATE:20250611 SUMMARY:Australia Privacy Act: Statutory tort for serious invasions of priv acy commences DESCRIPTION:Individuals can sue for serious invasions of privacy (Schedule 2)\, 6 months after Royal Assent.\n\nPrivacy Act 1988 (Cth)\, as amended b y the Privacy and Other Legislation Amendment Act 2024 (Australia)\n\nSour ce: https://www.legislation.gov.au/C2024A00128/asmade\n\nhttps://rulebook. fru.dev/regulations/au-privacy-act URL:https://rulebook.fru.dev/regulations/au-privacy-act CATEGORIES:Australia,privacy,children,breach-notification,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-29@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20250901 DTEND;VALUE=DATE:20250902 SUMMARY:China AI Content Labeling Measures: AI content labeling measures an d GB 45438-2025 take effect DESCRIPTION:Explicit and implicit labeling duties for AI-generated content and platform detection duties apply.\n\nMeasures for Labeling AI-Generated Synthetic Content (China)\n\nSource: https://www.cac.gov.cn/2025-03/14/c_ 1743654684782215.htm\n\nhttps://rulebook.fru.dev/regulations/cn-ai-labelin g URL:https://rulebook.fru.dev/regulations/cn-ai-labeling CATEGORIES:China,ai,online-safety TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-120@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20250901 DTEND;VALUE=DATE:20250902 SUMMARY:Japan AI Promotion Act: AI Promotion Act fully in force DESCRIPTION:Provisions establishing the AI Strategy Headquarters and AI Bas ic Plan take effect.\n\nAct on Promotion of Research and Development\, and Utilization of Artificial Intelligence-Related Technology (Japan)\n\nSour ce: https://www8.cao.go.jp/cstp/ai/ai_act/ai_act.html\n\nhttps://rulebook. fru.dev/regulations/jp-ai-act URL:https://rulebook.fru.dev/regulations/jp-ai-act CATEGORIES:Japan,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-135@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20250924 DTEND;VALUE=DATE:20250925 SUMMARY:New Zealand Privacy Act: Privacy Amendment Act 2025 technical chang es commence DESCRIPTION:Technical amendments commence the day after Royal Assent (23 Se p 2025).\n\nPrivacy Act 2020 (New Zealand)\, as amended by the Privacy Ame ndment Act 2025 (New Zealand)\n\nSource: https://www.justice.govt.nz/justi ce-sector-policy/key-initiatives/enhancing-the-privacy-act/\n\nhttps://rul ebook.fru.dev/regulations/nz-privacy-act URL:https://rulebook.fru.dev/regulations/nz-privacy-act CATEGORIES:New Zealand,privacy,breach-notification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-116@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20251113 DTEND;VALUE=DATE:20251114 SUMMARY:India DPDP Act: DPDP Rules published\; Board and procedural rules i n force DESCRIPTION:Rules 1\, 2 and 17-21 (Data Protection Board constitution and f unctioning) take effect on publication in the Official Gazette.\n\nDigital Personal Data Protection Act\, 2023 and Digital Personal Data Protection Rules\, 2025 (India)\n\nSource: https://egazette.gov.in/WriteReadData/2025 /267650.pdf\n\nhttps://rulebook.fru.dev/regulations/in-dpdp URL:https://rulebook.fru.dev/regulations/in-dpdp CATEGORIES:India,privacy,children,breach-notification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-8@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20251210 DTEND;VALUE=DATE:20251211 SUMMARY:Australia Social Media Minimum Age: Social media minimum age obliga tion applies DESCRIPTION:Age-restricted platforms must take reasonable steps to prevent under-16s from holding accounts.\n\nOnline Safety Amendment (Social Media Minimum Age) Act 2024 (Australia)\n\nSource: https://www.legislation.gov.a u/C2024A00127/asmade\n\nhttps://rulebook.fru.dev/regulations/au-social-med ia-min-age URL:https://rulebook.fru.dev/regulations/au-social-media-min-age CATEGORIES:Australia,children,online-safety TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-3@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20260101 DTEND;VALUE=DATE:20260102 SUMMARY:Australia Cyber Security Act (ransomware reporting): Ransomware rep orting moves to compliance phase DESCRIPTION:The education-first phase (30 May-31 Dec 2025) ends\; Home Affa irs moves to a compliance and education approach for missed reports.\n\nCy ber Security Act 2024 (Cth) and Cyber Security (Ransomware Payment Reporti ng) Rules 2025 (Australia)\n\nSource: https://www.homeaffairs.gov.au/cyber -security-subsite/files/factsheet-ransomware-payment-reporting.pdf\n\nhttp s://rulebook.fru.dev/regulations/au-cyber-security-act URL:https://rulebook.fru.dev/regulations/au-cyber-security-act CATEGORIES:Australia,cybersecurity,breach-notification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-32@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20260101 DTEND;VALUE=DATE:20260102 SUMMARY:China Cybersecurity Law: 2025 amendments take effect DESCRIPTION:Higher fines\, first-violation fines\, AI governance provisions and PIPL-alignment duties apply under the 28 Oct 2025 NPCSC Decision.\n\n Cybersecurity Law of the People's Republic of China (as amended by the NPC Standing Committee Decision of 28 October 2025) (China)\n\nSource: https: //www.gov.cn/yaowen/liebiao/202510/content_7046194.htm\n\nhttps://rulebook .fru.dev/regulations/cn-csl URL:https://rulebook.fru.dev/regulations/cn-csl CATEGORIES:China,cybersecurity,data-residency,ai,privacy TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-111@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20260101 DTEND;VALUE=DATE:20260102 SUMMARY:Hong Kong Critical Infrastructure Cyber Ordinance: PCICSO comes int o operation DESCRIPTION:Commissioner's Office is established and designation of CIOs be gins\; obligations apply to designated operators.\n\nProtection of Critica l Infrastructures (Computer Systems) Ordinance (Cap. 653) (Hong Kong)\n\nS ource: https://www.info.gov.hk/gia/general/202506/27/P2025062700238.htm\n\ nhttps://rulebook.fru.dev/regulations/hk-pcico URL:https://rulebook.fru.dev/regulations/hk-pcico CATEGORIES:Hong Kong,cybersecurity,breach-notification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-324@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20260101 DTEND;VALUE=DATE:20260102 SUMMARY:Vietnam PDPL: PDPL and Decree 356/2025 take effect DESCRIPTION:Personal data protection obligations\, DPIA/TIA filing and pena lty framework apply\; Decree 13/2023 replaced.\n\nLaw on Personal Data Pro tection (Law No. 91/2025/QH15) (Vietnam)\n\nSource: https://vanban.chinhph u.vn/?pageid=27160&docid=214590\n\nhttps://rulebook.fru.dev/regulations/vn -pdpl URL:https://rulebook.fru.dev/regulations/vn-pdpl CATEGORIES:Vietnam,privacy,data-residency,children,breach-notification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-124@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20260122 DTEND;VALUE=DATE:20260123 SUMMARY:South Korea AI Basic Act: AI Basic Act and Enforcement Decree take effect DESCRIPTION:Transparency\, labeling\, high-impact AI\, and domestic represe ntative obligations apply (fines deferred during the grace period).\n\nFra mework Act on the Development of Artificial Intelligence and Establishment of a Foundation for Trust (AI Basic Act) (South Korea)\n\nSource: https:/ /www.law.go.kr/법령/인공지능발전과신뢰기반조성등에관한 기본법\n\nhttps://rulebook.fru.dev/regulations/kr-ai-basic-act URL:https://rulebook.fru.dev/regulations/kr-ai-basic-act CATEGORIES:South Korea,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-321@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20260301 DTEND;VALUE=DATE:20260302 SUMMARY:Vietnam AI Law: AI Law takes effect DESCRIPTION:Risk classification\, transparency and labeling obligations app ly to new AI systems.\n\nLaw on Artificial Intelligence (Law No. 134/2025/ QH15) (Vietnam)\n\nSource: https://beta-en.mic.gov.vn/first-ever-law-on-ar tificial-intelligence-approved-197251215231241888.htm\n\nhttps://rulebook. fru.dev/regulations/vn-ai-law URL:https://rulebook.fru.dev/regulations/vn-ai-law CATEGORIES:Vietnam,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-125@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20260310 DTEND;VALUE=DATE:20260311 SUMMARY:South Korea PIPA: 2026 PIPA amendment promulgated (Act No. 21445) DESCRIPTION:Amendment raising fines to 10% of revenue and adding CEO accoun tability promulgated.\n\nPersonal Information Protection Act (as amended b y Act No. 21445\, 2026) (South Korea)\n\nSource: https://www.law.go.kr/법 령/개인정보보호법\n\nhttps://rulebook.fru.dev/regulations/kr-pipa URL:https://rulebook.fru.dev/regulations/kr-pipa CATEGORIES:South Korea,privacy,breach-notification,biometrics,data-residenc y TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-136@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20260501 DTEND;VALUE=DATE:20260502 SUMMARY:New Zealand Privacy Act: IPP 3A indirect-collection notification ap plies DESCRIPTION:Agencies collecting personal information from third parties mus t take reasonable steps to notify individuals\, subject to exceptions.\n\n Privacy Act 2020 (New Zealand)\, as amended by the Privacy Amendment Act 2 025 (New Zealand)\n\nSource: https://www.justice.govt.nz/justice-sector-po licy/key-initiatives/enhancing-the-privacy-act/\n\nhttps://rulebook.fru.de v/regulations/nz-privacy-act URL:https://rulebook.fru.dev/regulations/nz-privacy-act CATEGORIES:New Zealand,privacy,breach-notification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-122@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20260717 DTEND;VALUE=DATE:20260718 SUMMARY:Japan APPI: 2026 APPI amendment act promulgated DESCRIPTION:Amendment enacted by the Diet on 10 July 2026 and promulgated\; main provisions take effect by cabinet order within two years of promulga tion.\n\nAct on the Protection of Personal Information (Act No. 57 of 2003 )\, as amended including the 2026 amendment act (Japan)\n\nSource: https:/ /www.ppc.go.jp/files/pdf/260731_shiryou-1.pdf\n\nhttps://rulebook.fru.dev/ regulations/jp-appi URL:https://rulebook.fru.dev/regulations/jp-appi CATEGORIES:Japan,privacy,children,biometrics,breach-notification,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-126@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20260911 DTEND;VALUE=DATE:20260912 SUMMARY:South Korea PIPA: 2026 PIPA amendments take effect DESCRIPTION:10%-of-revenue fines\, CEO accountability\, and notice duties f or possible breaches apply.\n\nPersonal Information Protection Act (as ame nded by Act No. 21445\, 2026) (South Korea)\n\nSource: https://www.law.go. kr/법령/개인정보보호법\n\nhttps://rulebook.fru.dev/regulations/kr -pipa URL:https://rulebook.fru.dev/regulations/kr-pipa CATEGORIES:South Korea,privacy,breach-notification,biometrics,data-residenc y TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-117@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20261113 DTEND;VALUE=DATE:20261114 SUMMARY:India DPDP Act: Consent Manager registration rule in force (12 mont hs) DESCRIPTION:Rule 4 (registration and obligations of Consent Managers) comes into force one year after publication.\n\nDigital Personal Data Protectio n Act\, 2023 and Digital Personal Data Protection Rules\, 2025 (India)\n\n Source: https://egazette.gov.in/WriteReadData/2025/267650.pdf\n\nhttps://r ulebook.fru.dev/regulations/in-dpdp URL:https://rulebook.fru.dev/regulations/in-dpdp CATEGORIES:India,privacy,children,breach-notification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-6@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20261210 DTEND;VALUE=DATE:20261211 SUMMARY:Australia Privacy Act: Children's Online Privacy Code must be regis tered DESCRIPTION:OAIC must develop and register the Children's Online Privacy Co de within 24 months of Royal Assent.\n\nPrivacy Act 1988 (Cth)\, as amende d by the Privacy and Other Legislation Amendment Act 2024 (Australia)\n\nS ource: https://www.oaic.gov.au/privacy/privacy-registers/privacy-codes/chi ldrens-online-privacy-code\n\nhttps://rulebook.fru.dev/regulations/au-priv acy-act URL:https://rulebook.fru.dev/regulations/au-privacy-act CATEGORIES:Australia,privacy,children,breach-notification,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-7@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20261210 DTEND;VALUE=DATE:20261211 SUMMARY:Australia Privacy Act: Automated decision-making transparency appli es DESCRIPTION:Privacy policies must disclose the kinds of personal informatio n used in substantially automated decisions that significantly affect indi viduals (24 months after assent).\n\nPrivacy Act 1988 (Cth)\, as amended b y the Privacy and Other Legislation Amendment Act 2024 (Australia)\n\nSour ce: https://www.legislation.gov.au/C2024A00128/asmade\n\nhttps://rulebook. fru.dev/regulations/au-privacy-act URL:https://rulebook.fru.dev/regulations/au-privacy-act CATEGORIES:Australia,privacy,children,breach-notification,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-114@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20270116 DTEND;VALUE=DATE:20270117 SUMMARY:Indonesia PDP Law: Implementing regulation GR 33/2026 takes effect DESCRIPTION:Detailed PDP implementing rules (DPIA\, cross-border\, children 's consent) apply\, 6 months after the 16 Jul 2026 enactment.\n\nLaw No. 2 7 of 2022 on Personal Data Protection (Undang-Undang Pelindungan Data Prib adi) (Indonesia)\n\nSource: https://www.kk-advocates.com/news/read/indones ia-gr-pdp-personal-data-protection-compliance-regime-new-phase\n\nhttps:// rulebook.fru.dev/regulations/id-pdp URL:https://rulebook.fru.dev/regulations/id-pdp CATEGORIES:Indonesia,privacy,breach-notification,data-residency,children TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-322@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20270301 DTEND;VALUE=DATE:20270302 SUMMARY:Vietnam AI Law: Transition ends for existing AI systems (general) DESCRIPTION:Existing AI systems in most sectors must comply (12-month trans ition).\n\nLaw on Artificial Intelligence (Law No. 134/2025/QH15) (Vietnam )\n\nSource: https://www.vilaf.com.vn/blog/vietnam-enacts-its-first-law-on -artificial-intelligence-key-regulatory-obligations-from-1-march-2026/\n\n https://rulebook.fru.dev/regulations/vn-ai-law URL:https://rulebook.fru.dev/regulations/vn-ai-law CATEGORIES:Vietnam,ai TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-118@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20270513 DTEND;VALUE=DATE:20270514 SUMMARY:India DPDP Act: Main data fiduciary obligations apply (18 months) DESCRIPTION:Rules 3\, 5-16\, 22 and 23 (notice\, security safeguards\, brea ch notification\, retention\, children's consent\, SDF duties\, cross-bord er) come into force 18 months after publication.\n\nDigital Personal Data Protection Act\, 2023 and Digital Personal Data Protection Rules\, 2025 (I ndia)\n\nSource: https://egazette.gov.in/WriteReadData/2025/267650.pdf\n\n https://rulebook.fru.dev/regulations/in-dpdp URL:https://rulebook.fru.dev/regulations/in-dpdp CATEGORIES:India,privacy,children,breach-notification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-127@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20270701 DTEND;VALUE=DATE:20270702 SUMMARY:South Korea PIPA: Mandatory ISMS-P certification DESCRIPTION:ISMS-P certification becomes mandatory for private entities mee ting the statutory criteria.\n\nPersonal Information Protection Act (as am ended by Act No. 21445\, 2026) (South Korea)\n\nSource: https://www.law.go .kr/법령/개인정보보호법\n\nhttps://rulebook.fru.dev/regulations/k r-pipa URL:https://rulebook.fru.dev/regulations/kr-pipa CATEGORIES:South Korea,privacy,breach-notification,biometrics,data-residenc y TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-323@regulations.fru.dev DTSTAMP:20260924T150628Z DTSTART;VALUE=DATE:20270901 DTEND;VALUE=DATE:20270902 SUMMARY:Vietnam AI Law: Transition ends for existing AI systems in health\, education and finance DESCRIPTION:Existing AI systems in healthcare\, education and finance must comply (18-month transition).\n\nLaw on Artificial Intelligence (Law No. 1 34/2025/QH15) (Vietnam)\n\nSource: https://www.vilaf.com.vn/blog/vietnam-e nacts-its-first-law-on-artificial-intelligence-key-regulatory-obligations- from-1-march-2026/\n\nhttps://rulebook.fru.dev/regulations/vn-ai-law URL:https://rulebook.fru.dev/regulations/vn-ai-law CATEGORIES:Vietnam,ai TRANSP:TRANSPARENT END:VEVENT END:VCALENDAR