Skip to content
Rulebook.

2029 compliance deadlines

4 data, privacy, AI and cybersecurity deadlines fall in 2029, across 4 regulations.

Add to calendar
Apple Calendar or OutlookGoogle Calendar Download .ics

March 20291 deadline

  1. European Health Data Space (EHDS)

    Primary use for first data categories; secondary use framework applies

    Patient rights and EHR rules apply to patient summaries, ePrescriptions and eDispensations (Art 14(1)(a)-(c)). Chapter IV secondary-use rules (data permits, Health Data Access Bodies) apply.

    Compliance deadlinein 2.5 yearsSource

April 20291 deadline

  1. CCPA / CPRA

    Cybersecurity audit due: revenue $50M-$100M

    First cybersecurity audit report (covering 2028) due for businesses with 2027 annual gross revenue between $50M and $100M (11 CCR 7121(a)(2)).

    Reportingin 2.5 yearsSource

June 20291 deadline

  1. Vermont VDPOSA

    Mandatory 60-day cure period expires

    The AG's duty to issue a cure notice before enforcement ends June 30, 2029 (Act 145 sec. 3).

    Enforcementin 2.8 yearsSource

July 20291 deadline

  1. Minnesota Consumer Data Privacy Act (MCDPA)

    Postsecondary institutions must comply

    Postsecondary institutions regulated by the Office of Higher Education must comply by July 31, 2029.

    Compliance deadlinein 2.9 yearsSource

When the rules change: new data, privacy and AI laws and deadlines, the next morning.