# Rulebook > Data, privacy, AI, cybersecurity and data-residency regulations worldwide, with every phased compliance deadline as its own dated row. Rulebook (rulebook.fru.dev) tracks 110 regulations in 55 jurisdictions and 326 dated deadlines (70 still ahead). Each regulation records jurisdiction, status (proposed, enacted, in force, amended), effective date, who it applies to, penalties, the official source URL and the date it was last verified. Records were researched from official sources (official journals, legislatures, regulators, gazettes). An agent scans part of the world every night for new laws and moved dates; its finds are marked Unverified until reviewed, and a changed date never replaces a verified one without review. Not legal advice. Disclaimer: summaries for reference, not legal advice. Check the official text. Logos via logo.dev; trademarks belong to their owners. Corrections: use "Suggest a correction" on any regulation page. Freshness: Refresh delayed. Last successful agent run: 2026-09-24 08:48 UTC. Last attempt: 2026-09-24 08:48 UTC (skipped: run budget of 3 model calls used). Records last verified 2026-09-24. Next scheduled run: 2026-09-25 08:00 UTC. ## Pages - [Deadlines timeline](https://rulebook.fru.dev/deadlines): every deadline in date order, with a calendar view - [All regulations](https://rulebook.fru.dev/regulations): table, cards and map views with filters - [Jurisdictions](https://rulebook.fru.dev/jurisdictions): by country and US state - [EU data, AI and cybersecurity regulations](https://rulebook.fru.dev/regions/eu) - [US federal data and cybersecurity rules](https://rulebook.fru.dev/regions/us-federal) - [US state privacy and AI laws](https://rulebook.fru.dev/regions/us-states) - [UK and non-EU European data laws](https://rulebook.fru.dev/regions/uk-europe) - [Asia-Pacific data protection and AI laws](https://rulebook.fru.dev/regions/apac) - [Canada and Latin America data protection laws](https://rulebook.fru.dev/regions/americas) - [Middle East and Africa data protection laws](https://rulebook.fru.dev/regions/mea) - [Data privacy laws](https://rulebook.fru.dev/topics/privacy) - [AI laws and regulations](https://rulebook.fru.dev/topics/ai) - [Cybersecurity regulations](https://rulebook.fru.dev/topics/cybersecurity) - [Data residency and cross-border transfer rules](https://rulebook.fru.dev/topics/data-residency) - [Data access and data sharing rules](https://rulebook.fru.dev/topics/data-access) - [Children and teen online privacy laws](https://rulebook.fru.dev/topics/children) - [Health data privacy laws](https://rulebook.fru.dev/topics/health) - [Financial sector data and resilience rules](https://rulebook.fru.dev/topics/financial) - [Biometric privacy laws](https://rulebook.fru.dev/topics/biometrics) - [Breach and incident notification rules](https://rulebook.fru.dev/topics/breach-notification) - [Online safety laws](https://rulebook.fru.dev/topics/online-safety) - [About and methodology](https://rulebook.fru.dev/about) ## Key regulations - [EU AI Act](https://rulebook.fru.dev/regulations/eu-ai-act): Amended, next deadline 2026-12-02 (New bans on sexual deepfakes and CSAM generation; Art 50(2) grace period ends) - [GDPR](https://rulebook.fru.dev/regulations/eu-gdpr): Amended, next deadline 2027-04-02 (GDPR Procedural Regulation applies) - [DORA](https://rulebook.fru.dev/regulations/eu-dora): In force - [NIS2](https://rulebook.fru.dev/regulations/eu-nis2): Amended, next deadline 2027-04-17 (Next biennial entity notification) - [EU Data Act](https://rulebook.fru.dev/regulations/eu-data-act): In force, next deadline 2027-01-12 (Cloud switching charges abolished) - [Cyber Resilience Act](https://rulebook.fru.dev/regulations/eu-cra): Enacted, next deadline 2027-12-11 (CRA fully applies) - [CCPA / CPRA](https://rulebook.fru.dev/regulations/us-ca-ccpa): Amended, next deadline 2027-01-01 (ADMT requirements compliance date) - [Colorado AI Act](https://rulebook.fru.dev/regulations/us-co-ai-act): Enacted, next deadline 2027-01-01 (ADMT obligations apply) - [India DPDP Act](https://rulebook.fru.dev/regulations/in-dpdp): Enacted, next deadline 2026-11-13 (Consent Manager registration rule in force (12 months)) - [China PIPL](https://rulebook.fru.dev/regulations/cn-pipl): In force - [Data (Use and Access) Act](https://rulebook.fru.dev/regulations/uk-duaa): In force, next deadline 2026-09-30 (ICO abolished; Information Commission takes over) - [Brazil LGPD](https://rulebook.fru.dev/regulations/br-lgpd): In force ## Data - [Full plain-text dump](https://rulebook.fru.dev/llms-full.txt): one line per deadline - [JSON API](https://rulebook.fru.dev/api/data): every regulation with its deadlines - [Calendar feed (ICS)](https://rulebook.fru.dev/calendar.ics): upcoming deadlines; filter with ?region=, ?j=, ?topic=, ?status=, ?year=, ?id= - [Sitemap](https://rulebook.fru.dev/sitemap.xml)