2030 compliance deadlines

Colorado AI ActColorado

Mandatory cure period ends

The AG's obligation to offer a 60-day notice-and-cure period expires.

CCPA / CPRACalifornia

Cybersecurity audit due: revenue under $50M

First cybersecurity audit report (covering 2029) due for covered businesses with 2028 annual gross revenue under $50M (11 CCR 7121(a)(3)); annual by April 1 thereafter.

Public-authority high-risk systems must comply

Providers and deployers of high-risk AI systems intended for use by public authorities that were placed on the market before the Chapter III application date must comply (Art 111(2), as replaced by the Omnibus).

First CRA evaluation

Commission evaluation and review report, then every four years (Art 70(1)).

Large-scale EU IT systems must comply

AI systems that are components of the large-scale IT systems in Annex X (e.g. SIS, VIS, Eurodac, EES, ETIAS) placed on the market before 2 Aug 2027 must be brought into compliance (Art 111(1)).