Skip to content
Rulebook.

US federal data and cybersecurity rules

Federal statutes and agency rules: COPPA, HIPAA, GLBA, SEC cyber disclosure, the DOJ bulk data rule and more.

12 regulations

Add to calendar
Apple Calendar or OutlookGoogle Calendar Download .ics

12 of 12 regulations

Upcoming deadlines

DateRegulation
in 47dCMMC 2.0

Phase 2: Level 2 C3PAO certification

in 14moCMMC 2.0

Phase 3: Level 3 certification

in 2.1yCMMC 2.0

Phase 4: full implementation

Past deadlines

DateRegulation
4mo agoSEC Reg S-P

Smaller entities must comply

4mo agoTAKE IT DOWN Act

Platform notice-and-removal process required

5mo agoCOPPA Rule

Full compliance with amended COPPA Rule

7mo agoHIPAA

Notice of Privacy Practices updates (Part 2 alignment)

10mo agoSEC Reg S-P

Larger entities must comply

10mo agoCMMC 2.0

DFARS rule effective; Phase 1 begins

12mo agoDOJ Bulk Data Rule

Due diligence, audit and reporting obligations apply

15mo agoCOPPA Rule

Amended COPPA Rule takes effect

16mo agoTAKE IT DOWN Act

Criminal provisions effective on enactment

18mo agoDOJ Bulk Data Rule

Prohibitions and restrictions take effect

19mo agoHIPAA

Security Rule NPRM comment period closed

21mo agoHIPAA

Reproductive health privacy compliance date (vacated)

21mo agoSEC Cyber Rules

Inline XBRL tagging of Item 1.05 disclosures

21mo agoCMMC 2.0

CMMC Program rule (32 CFR Part 170) effective

21mo agoSEC Cyber Rules

Inline XBRL tagging of annual cybersecurity disclosures

2.1y agoSEC Reg S-P

Amendments effective

2.2y agoFTC HBNR

2024 amendments effective

2.2y agoCIRCIA

NPRM comment period closed

2.2y agoHIPAA

Reproductive health care privacy rule effective (later vacated)

2.3y agoPADFA

PADFA takes effect

2.3y agoSEC Cyber Rules

Smaller reporting companies: Item 1.05 compliance

2.4y agoGLBA Safeguards

FTC breach notification requirement effective

2.5y agoFCC CPNI Rule

Order effective except revised notification rules

2.8y agoSEC Cyber Rules

Form 8-K Item 1.05 incident disclosure begins

2.8y agoSEC Cyber Rules

Annual cybersecurity disclosures begin (Item 106 / 16K)

3.3y agoGLBA Safeguards

Compliance with expanded security program elements

4.7y agoGLBA Safeguards

2021 Safeguards Rule amendments effective

16.6y agoFTC HBNR

Full compliance with original Rule

When the rules change: new data, privacy and AI laws and deadlines, the next morning.