{ "openapi": "3.1.0", "info": { "title": "Rulebook API", "version": "1.0.0", "summary": "Data, privacy, AI, cybersecurity and data-residency regulations worldwide, with every phased compliance deadline as its own dated row and its official source", "description": "Data, privacy, AI, cybersecurity and data-residency regulations worldwide, with every phased compliance deadline as its own dated row and its official source. Checked every night at 08:00 UTC. Free to read; please cite \"Rulebook (rulebook.fru.dev)\" with a link. Responses are cached at the edge; keep to about 60 requests a minute. Guide: https://rulebook.fru.dev/agents", "contact": { "name": "fru.dev", "url": "https://fru.dev", "email": "fru.dev3@gmail.com" } }, "externalDocs": { "description": "For AI agents", "url": "https://rulebook.fru.dev/agents" }, "servers": [ { "url": "https://rulebook.fru.dev" } ], "paths": { "/api/deadlines": { "get": { "operationId": "deadlines_between", "summary": "Compliance deadlines between two days, in date order", "description": "Compliance deadlines between two days, in date order. Returns deadlines with date, what happens, kind, source and the regulation (id, name, jurisdiction, status).", "parameters": [ { "name": "from", "in": "query", "required": false, "description": "First day, YYYY-MM-DD (default today)", "schema": { "type": "string" }, "example": "2026-10-01" }, { "name": "to", "in": "query", "required": false, "description": "Last day, YYYY-MM-DD (default: no end)", "schema": { "type": "string" }, "example": "2027-12-31" }, { "name": "region", "in": "query", "required": false, "description": "Region key", "schema": { "type": "string", "enum": [ "eu", "us-federal", "us-states", "uk-europe", "apac", "americas", "mea" ] } }, { "name": "j", "in": "query", "required": false, "description": "Jurisdiction key, e.g. eu, us-ca, uk, in", "schema": { "type": "string" }, "example": "eu" }, { "name": "topic", "in": "query", "required": false, "description": "Topic key, e.g. privacy, ai, cybersecurity", "schema": { "type": "string" }, "example": "ai" }, { "name": "status", "in": "query", "required": false, "description": "Status", "schema": { "type": "string", "enum": [ "proposed", "enacted", "in_force", "amended" ] } }, { "name": "q", "in": "query", "required": false, "description": "Words to match in the name, citation or summary", "schema": { "type": "string" }, "example": "ai act" }, { "name": "limit", "in": "query", "required": false, "description": "Items per page, 1 to 200", "schema": { "type": "integer", "minimum": 1, "maximum": 200, "default": 200 } }, { "name": "offset", "in": "query", "required": false, "description": "Items to skip, for the next page", "schema": { "type": "integer", "minimum": 0, "default": 0 } } ], "responses": { "200": { "description": "deadlines with date, what happens, kind, source and the regulation (id, name, jurisdiction, status)", "content": { "application/json": { "schema": { "type": "object" }, "example": { "from": "2026-10-01", "to": "2027-12-31", "items": [ { "date": "2026-10-01", "title": "PA 26-64 (SB 4) amendments take effect", "description": "Prohibits controllers and third parties from selling precise geolocation data and enacts data broker and other consumer protection provis...", "kind": "effective", "tentative": false, "unverified": false, "sourceUrl": "https://www.cga.ct.gov/2026/ACT/PA/PDF/2026PA-00064-R00SB-00004-PA.PDF", "regulation": { "id": "us-ct-ctdpa", "shortName": "Connecticut Data Privacy Act (CTDPA)", "jurisdiction": "us-ct", "jurisdictionName": "Connecticut", "region": "us-states", "status": "amended", "url": "https://rulebook.fru.dev/regulations/us-ct-ctdpa" } }, { "date": "2026-12-02", "title": "New bans on sexual deepfakes and CSAM generation; Art 50(2) grace period ends", "description": "New Art 5(1)(ba)/(bb) prohibitions on AI systems that generate non-consensual intimate imagery of identifiable persons or child sexual ab...", "kind": "compliance", "tentative": false, "unverified": false, "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj", "regulation": { "id": "eu-ai-act", "shortName": "EU AI Act", "jurisdiction": "eu", "jurisdictionName": "European Union", "region": "eu", "status": "amended", "url": "https://rulebook.fru.dev/regulations/eu-ai-act" } } ], "total": 20, "limit": 3, "offset": 0, "next": "/api/deadlines?from=2026-10-01&to=2027-12-31&topic=ai&limit=3&offset=3" } } } } } } }, "/api/regulations": { "get": { "operationId": "list_regulations", "summary": "Every tracked regulation, with its next deadline", "description": "Every tracked regulation, with its next deadline. Returns regulations with name, jurisdiction, status, effective date, topics, official source and next deadline.", "parameters": [ { "name": "region", "in": "query", "required": false, "description": "Region key", "schema": { "type": "string", "enum": [ "eu", "us-federal", "us-states", "uk-europe", "apac", "americas", "mea" ] } }, { "name": "j", "in": "query", "required": false, "description": "Jurisdiction key, e.g. eu, us-ca, uk, in", "schema": { "type": "string" }, "example": "eu" }, { "name": "topic", "in": "query", "required": false, "description": "Topic key, e.g. privacy, ai, cybersecurity", "schema": { "type": "string" }, "example": "ai" }, { "name": "status", "in": "query", "required": false, "description": "Status", "schema": { "type": "string", "enum": [ "proposed", "enacted", "in_force", "amended" ] } }, { "name": "q", "in": "query", "required": false, "description": "Words to match in the name, citation or summary", "schema": { "type": "string" }, "example": "ai act" }, { "name": "limit", "in": "query", "required": false, "description": "Items per page, 1 to 200", "schema": { "type": "integer", "minimum": 1, "maximum": 200, "default": 200 } }, { "name": "offset", "in": "query", "required": false, "description": "Items to skip, for the next page", "schema": { "type": "integer", "minimum": 0, "default": 0 } } ], "responses": { "200": { "description": "regulations with name, jurisdiction, status, effective date, topics, official source and next deadline", "content": { "application/json": { "schema": { "type": "object" }, "example": { "items": [ { "id": "eu-cra", "shortName": "Cyber Resilience Act", "jurisdiction": "eu", "jurisdictionName": "European Union", "region": "eu", "status": "enacted", "url": "https://rulebook.fru.dev/regulations/eu-cra", "name": "Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act)", "topics": [ "cybersecurity", "breach-notification" ], "citation": "OJ L, 2024/2847, 20.11.2024", "enactedDate": "2024-10-23", "effectiveDate": "2024-12-10", "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2024/2847/oj", "lastVerified": "2026-09-22" }, { "id": "eu-dga", "shortName": "Data Governance Act", "jurisdiction": "eu", "jurisdictionName": "European Union", "region": "eu", "status": "amended", "url": "https://rulebook.fru.dev/regulations/eu-dga", "name": "Regulation (EU) 2022/868 on European data governance (Data Governance Act)", "topics": [ "data-access", "privacy" ], "citation": "OJ L 152, 3.6.2022, p. 1", "enactedDate": "2022-05-30", "effectiveDate": "2022-06-23", "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2022/868/oj", "lastVerified": "2026-09-22" } ], "total": 15, "limit": 3, "offset": 0, "next": "/api/regulations?region=eu&limit=3&offset=3" } } } } } } }, "/api/regulations/{id}": { "get": { "operationId": "get_regulation", "summary": "One regulation with every phased deadline", "description": "One regulation with every phased deadline. Returns the regulation: summary, who it applies to, penalties, enforcer, sources and all deadlines.", "parameters": [ { "name": "id", "in": "path", "required": true, "description": "Regulation id, e.g. eu-ai-act, eu-gdpr, us-ca-ccpa", "schema": { "type": "string" }, "example": "eu-ai-act" } ], "responses": { "200": { "description": "the regulation: summary, who it applies to, penalties, enforcer, sources and all deadlines", "content": { "application/json": { "schema": { "type": "object" }, "example": { "id": "eu-dora", "shortName": "DORA", "jurisdiction": "eu", "jurisdictionName": "European Union", "region": "eu", "status": "in_force", "url": "https://rulebook.fru.dev/regulations/eu-dora", "name": "Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (Digital Operational Resilience Act)", "topics": [ "cybersecurity", "financial" ], "citation": "OJ L 333, 27.12.2022, p. 1", "enactedDate": "2022-12-14", "effectiveDate": "2023-01-16", "sourceUrl": "https://eur-lex.europa.eu/eli/reg/2022/2554/oj", "lastVerified": "2026-09-22" } } } }, "404": { "description": "Not found" } } } }, "/api/search": { "get": { "operationId": "search", "summary": "Search regulations, places, topics and years", "description": "Search regulations, places, topics and years. Returns up to 20 ranked results with title, link and one line.", "parameters": [ { "name": "q", "in": "query", "required": true, "description": "Law, place or topic", "schema": { "type": "string" }, "example": "nis2" }, { "name": "limit", "in": "query", "required": false, "description": "Results, 1 to 20", "schema": { "type": "integer", "minimum": 1, "maximum": 20, "default": 20 } } ], "responses": { "200": { "description": "up to 20 ranked results with title, link and one line", "content": { "application/json": { "schema": { "type": "object" }, "example": { "q": "nis2", "results": [ { "id": "reg:eu-nis2", "group": "items", "title": "NIS2", "subtitle": "European Union · Amended · next date 2027-04-17", "href": "/regulations/eu-nis2", "keywords": [ "Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS2 Directive)", "OJ L 333, 27.12.2022, p. 80" ], "icon": "book-open", "boost": 10, "score": 1035 }, { "id": "reg:us-ca-sb243", "group": "items", "title": "California SB 243 (companion chatbots)", "subtitle": "California · In force · next date 2027-07-01", "href": "/regulations/us-ca-sb243", "keywords": [ "California SB 243, Companion Chatbots (Stats. 2025, ch. 677)", "SB 243 (2025), Stats. 2025, ch. 677" ], "icon": "book-open", "boost": 10, "score": 95 } ] } } } } } } } } }