Resource Center / Tools and Trackers / IAPP Key Dates 2025
IAPP Key Dates 2025
This calendar includes key dates for significant legislative requirements, regulatory consultation periods, major anniversaries and IAPP events.
Published: February 2025
Contributors:
The work of privacy, AI governance and digital responsibility is well punctuated by a drum-beat of key dates and events. This calendar for 2025 includes key dates for the entry into force of some of the more significant legislative requirements, regulatory consultation periods, major anniversaries and IAPP events.
The calendar will be updated with valuable input from the global community of privacy, AI governance and digital responsibility professionals, and we continue to welcome feedback and insights from this community. If you are aware of relevant information absent from the calendar, please share it with us at research@iapp.org.
Key Dates by Category
-
expand_more
★ Events and Anniversaries
13-18 January
★ EVENTS AND ANNIVERSARIES
Congreso Futuro in Santiago, Chile.
28 January
★ EVENTS AND ANNIVERSARIES
International Data Protection Day.
10-11 February
★ EVENTS AND ANNIVERSARIES
AI Action Summit in Paris.
4-5 March
★ EVENTS AND ANNIVERSARIES
AI in Latin America and Chile 2025 in Santiago, Chile.
12-13 March
★ EVENTS AND ANNIVERSARIES
IAPP Data Protection Intensive: UK 2025 in London.
23-24 April
★ EVENTS AND ANNIVERSARIES
IAPP Global Privacy Summit 2025 in Washington, D.C.
23 April
★ EVENTS AND ANNIVERSARIES
Eleventh anniversary of the Brazilian Civil Rights Framework for the Internet.
12-13 May
★ EVENTS AND ANNIVERSARIES
IAPP Canada Privacy Symposium 2025 in Toronto.
14-15 May
★ EVENTS AND ANNIVERSARIES
IAPP AI Governance Global Europe 2025 in Dublin.
25 May
★ EVENTS AND ANNIVERSARIES
Seventh anniversary of the EU General Data Protection Regulation.
TBA May
★ EVENTS AND ANNIVERSARIES
Aspiring CXOs Awards 2025 in Bengaluru, India.
25-26 June
★ EVENTS AND ANNIVERSARIES
IAPP Navigate: A Digital Policy Leadership Retreat 2025 in Portsmouth, New Hampshire, U.S.
27 June
★ EVENTS AND ANNIVERSARIES
EU adequacy decisions from 2021 for the U.K. expire.
TBA July
★ EVENTS AND ANNIVERSARIES
IAPP Asia Privacy Forum 2025 in Singapore.
14 August
★ EVENTS AND ANNIVERSARIES
Seventh anniversary of Brazil’s General Personal Data Protection Law.
9 September
★ EVENTS AND ANNIVERSARIES
IAPP call for volunteers opens.
18-19 September
★ EVENTS AND ANNIVERSARIES
IAPP AI Governance Global North America 2025 in Boston.
3 October
★ EVENTS AND ANNIVERSARIES
IAPP call for volunteers closes.
24 October
★ EVENTS AND ANNIVERSARIES
Thirtieth anniversary of the EU Data Protection Directive.
30-31 October
★ EVENTS AND ANNIVERSARIES
IAPP Privacy. Security. Risk. 2025 in San Diego.
TBA October
★ EVENTS AND ANNIVERSARIES
Global Privacy Assembly.
19-20 November
★ EVENTS AND ANNIVERSARIES
IAPP Europe Data Protection Congress 2025 in Brussels.
7 December
★ EVENTS AND ANNIVERSARIES
Twenty-fifth anniversary of the signing of the Charter of Fundamental Rights of the EU.
-
expand_more
■ Legislative
1 January
■ LEGISLATIVE
California Consumer Privacy Act amendments on sensitive personal information, opt outs and AI go into effect.
■ LEGISLATIVE
Chile's Cybersecurity Framework law partially goes into effect.
■ LEGISLATIVE
Right to cure expires under U.S. state privacy laws in Colorado and Connecticut.
■ LEGISLATIVE
New comprehensive U.S. state privacy laws go into effect in Delaware, Iowa, Nebraska and New Hampshire.
■ LEGISLATIVE
Consumer opt-out requirements in U.S. state privacy laws go into effect in Connecticut, Montana, New Hampshire and Texas.
■ LEGISLATIVE
Minnesota's data protection assessment requirements go into effect.
15 January
■ LEGISLATIVE
New Jersey Data Privacy Act goes into effect.
17 January
■ LEGISLATIVE
EU Digital Operational Resilience Act and its requirement for member states to notify of applicable implementation rules go into effect.
2 February
■ LEGISLATIVE
EU AI Act requirements regarding prohibited AI and mandatory AI literacy go into effect.
1 March
■ LEGISLATIVE
Remaining provisions in Chile's Cybersecurity Framework Law go into effect.
30 March
■ LEGISLATIVE
Peru's regulations on personal data protection go into effect.
1 April
■ LEGISLATIVE
Amendments to Malaysia's Personal Data Protection Act 2024 go into effect.
30 May
■ LEGISLATIVE
Deadline for parts 3 and 5 of Australia’s Cyber Security Act 2024 to come into effect, unless otherwise proclaimed.
1 June
■ LEGISLATIVE
Amendments to Malaysia's Personal Data Protection Act 2024 go into effect.
11 June
■ LEGISLATIVE
Deadline for Schedule 2 of Australia's Privacy and Other Legislation Amendment Act 2024 to come into effect.
20 June
■ LEGISLATIVE
New York's Child Data Protection Act goes into effect.
1 July
■ LEGISLATIVE
Colorado's obligations regarding biometric data go into effect.
■ LEGISLATIVE
Oregon Consumer Privacy Act exemption for 501(c)(3) tax exempt organization expires.
■ LEGISLATIVE
Vietnam's Data Law goes into effect.
31 July
■ LEGISLATIVE
Minnesota Consumer Data Privacy Act goes into effect.
2 August
■ LEGISLATIVE
EU AI Act provisions on notified bodies and governance structure and obligations for providers of general-purpose AI go into effect.
■ LEGISLATIVE
Deadline for EU member states to designate authorities for EU AI Act oversight.
18 August
■ LEGISLATIVE
EU DSA codes of conduct go into effect.
■ LEGISLATIVE
European Commission adopts EU e-evidence implementing acts and member states designate competent authorities.
12 September
■ LEGISLATIVE
EU Data Act goes into effect.
24 September
■ LEGISLATIVE
EU data governance requirements for entities providing data intermediation services go into effect.
25 September
■ LEGISLATIVE
EU Data Governance Act evaluation and review.
1 October
■ LEGISLATIVE
Maryland Online Data Privacy Act goes into effect.
■ LEGISLATIVE
Colorado Privacy Act amendments related to minors go into effect.
30 November
■ LEGISLATIVE
Deadline for part 2 of Australia's Cyber Security Act 2024 to go into effect.
11 December
■ LEGISLATIVE
European Commission adopts implementing and delegated acts under the Cyber Resilience Act.
■ LEGISLATIVE
Deadline for the minister for communications to specify the date of effect for civil penalties under Australia's Online Safety Amendment (Social Media Minimum Age) Act 2024.
31 December
■ LEGISLATIVE
Mandatory right to cure period expires in Delaware and New Hampshire.
■ LEGISLATIVE
Indiana Data Privacy Law data protection assessment requirements go into effect.
-
expand_more
● Political
1 January
● POLITICAL
Poland assumes the presidency of the Council of the European Union.
3 January
● POLITICAL
119th U.S. Congress convenes.
16 January
● POLITICAL
European Parliament hearings to select the next European Data Protection Supervisor.
20 January
● POLITICAL
U.S. presidential inauguration ceremony.
9 February
● POLITICAL
First round of executive and legislative elections in Ecuador.
23 February
● POLITICAL
Federal elections in Germany.
17 May
● POLITICAL
Deadline for Australian federal elections.
1 July
● POLITICAL
Denmark assumes the presidency of the Council of the European Union.
3 August
● POLITICAL
First round of legislative elections in Argentina.
20 October
● POLITICAL
Deadline for federal elections in Canada.
26 October
● POLITICAL
Second round of legislative elections in Argentina.
16 November
● POLITICAL
Presidential election in Chile.
-
expand_more
◆ Regulatory
1 January
◆ REGULATORY
China's Network Data Security Management Regulation goes into effect.
2 January
◆ REGULATORY
Chile's National Cybersecurity Agency begins operations.
3 January
◆ REGULATORY
India's Ministry of Electronics and Information Technology releases draft Digital Personal Data Protection rules for public consultation.
14 January
◆ REGULATORY
California Privacy Protection Agency public comment hearing.
15 January
◆ REGULATORY
Deadline to apply for the Data Governance Working Group.
16 January
◆ REGULATORY
European Data Protection Board plenary meeting.
17 January
◆ REGULATORY
Deadline for EU member states to notify the European Commission of promulgated rules under the Network and Information Security Directive.
24 January
◆ REGULATORY
Deadline to submit feedback to Brazil's National Data Protection Agency about proposed regulations on AI and automated decision-making.
27 January
◆ REGULATORY
Public consultation closes on India's AI governance guidelines development report.
29 January
◆ REGULATORY
Public consultation closes on U.K. AI Management Essentials tool.
TBA January
◆ REGULATORY
U.K. Office of Communications launches consultation on children's access assessment guidelines.
18 February
◆ REGULATORY
Deadline to develop EU Digital Services Act codes of conduct.
◆ REGULATORY
Deadline to submit feedback for India's proposed Digital Data Protection Act rules.
19 February
◆ REGULATORY
Deadline to submit comments on proposed CCPA regulations.
21 February
◆ REGULATORY
Deadline for data controllers to report data subject complaints from July-Dec. 2024 to Colombia's National Database Registry.
28 February
◆ REGULATORY
Deadline for industry bodies to submit Phase 2 industry codes to the eSafety Commissioner of Australia.
TBA February
◆ REGULATORY
Ofcom launches consultation on Online Safety Act guidance for protecting women and girls.
6 March
◆ REGULATORY
Deadline for registration of special representatives with Ecuador's Data Protection Authority.
13 March
◆ REGULATORY
EDPB plenary meeting.
31 March
◆ REGULATORY
Deadline for data controllers in Colombia to update personal databases.
TBA March
◆ REGULATORY
Ofcom's disclosure requirements for specific services and Illegal Harms Codes of Practice go into effect.
17 April
◆ REGULATORY
NIS2 Directive compliance reporting requirement goes into effect.
30 April
◆ REGULATORY
Deadline for Ecuador's DPA to submit secondary regulations proposals.
TBA April
◆ REGULATORY
Ofcom publishes children's risk assessment guidance and first version of the Protection of Children Codes of Practice.
2 May
◆ REGULATORY
Deadline for EU AI Act codes of practice publication.
6 May
◆ REGULATORY
EPDB plenary meeting.
3 June
◆ REGULATORY
EPDB plenary meeting.
13 June
◆ REGULATORY
Deadline to publish regulations under Chile's Law on the Protection of Private Life.
8 July
◆ REGULATORY
EPDB plenary meeting.
31 July
◆ REGULATORY
Ofcom's children's risk assessment disclosure requirements go into effect.
TBA July
◆ REGULATORY
Ofcom's Protection of Children Codes of Practice go into effect.
12 August
◆ REGULATORY
Deadline for regulations under Peru's Cyber Defense Law.
23 August
◆ REGULATORY
Deadline for Brazilian data controllers to incorporate new standard contractual clauses into data transfer agreements.
25 August
◆ REGULATORY
Deadline for data controllers in Colombia to report data subject complaints from January-June 2025.
30 September
◆ REGULATORY
Right to data portability in Peru goes into effect.
7 October
◆ REGULATORY
EPDB plenary meeting.
4 November
◆ REGULATORY
EPDB plenary meeting.
17 November
◆ REGULATORY
Deadline for the European Commission to evaluate the DSA.
30 November
◆ REGULATORY
Deadline for certain entities to appoint a personal data officer in Peru.
Key Dates by Month
-
expand_more
January
1 January
● POLITICAL
Poland assumes the presidency of the Council of the European Union.
◆ REGULATORY
China's Network Data Security Management Regulation goes into effect.
■ LEGISLATIVE
Chile's Cybersecurity Framework law partially goes into effect.
■ LEGISLATIVE
California Consumer Privacy Act amendments on sensitive personal information, opt outs and AI go into effect.
■ LEGISLATIVE
Right to cure expires under U.S. state privacy laws in Colorado and Connecticut.
■ LEGISLATIVE
New comprehensive U.S. state privacy laws go into effect in Delaware, Iowa, Nebraska and New Hampshire.
■ LEGISLATIVE
Consumer opt-out requirements in U.S. state privacy laws go into effect in Connecticut, Montana, New Hampshire and Texas.
■ LEGISLATIVE
Minnesota's data protection assessment requirements go into effect.
2 January
◆ REGULATORY
Chile's National Cybersecurity Agency begins operations.
3 January
● POLITICAL
119th U.S. Congress convenes.
◆ REGULATORY
India's Ministry of Electronics and Information Technology releases draft Digital Personal Data Protection rules for public consultation.
13-18 January
★ EVENTS AND ANNIVERSARIES
Congreso Futuro in Santiago, Chile.
14 January
◆ REGULATORY
California Privacy Protection Agency public comment hearing.
15 January
■ LEGISLATIVE
New Jersey Data Privacy Act goes into effect.
◆ REGULATORY
Deadline to apply for the Data Governance Working Group.
16 January
◆ REGULATORY
European Data Protection Board plenary meeting.
● POLITICAL
European Parliament hearings to select the next European Data Protection Supervisor.
17 January
■ LEGISLATIVE
EU Digital Operational Resilience Act and its requirement for member states to notify of applicable implementation rules go into effect.
◆ REGULATORY
Deadline for EU member states to notify the European Commission of promulgated rules under the Network and Information Security Directive.
20 January
● POLITICAL
U.S. presidential inauguration ceremony.
24 January
◆ REGULATORY
Deadline to submit feedback to Brazil's National Data Protection Agency about proposed regulations on AI and automated decision-making.
27 January
◆ REGULATORY
Public consultation closes on India's AI governance guidelines development report.
28 January
★ EVENTS AND ANNIVERSARIES
International Data Protection Day.
29 January
◆ REGULATORY
Public consultation closes on U.K. AI Management Essentials tool.
TBA
◆ REGULATORY
U.K. Office of Communications launches consultation on children's access assessment guidelines.
-
expand_more
February
2 February
■ LEGISLATIVE
EU AI Act requirements regarding prohibited AI and mandatory AI literacy go into effect.
9 February
● POLITICAL
First round of executive and legislative elections in Ecuador.
10-11 February
★ EVENTS AND ANNIVERSARIES
AI Action Summit in Paris.
18 February
◆ REGULATORY
Deadline to develop EU Digital Services Act codes of conduct.
◆ REGULATORY
Deadline to submit feedback for India's proposed Digital Data Protection Act rules.
19 February
◆ REGULATORY
Deadline to submit comments on proposed CCPA regulations.
21 February
◆ REGULATORY
Deadline for data controllers to report data subject complaints from July-Dec. 2024 to Colombia's National Database Registry.
23 February
● POLITICAL
Federal elections in Germany.
28 February
◆ REGULATORY
Deadline for industry bodies to submit Phase 2 industry codes to the eSafety Commissioner of Australia.
TBA
◆ REGULATORY
Ofcom launches consultation on Online Safety Act guidance for protecting women and girls.
-
expand_more
March
1 March
■ LEGISLATIVE
Remaining provisions in Chile's Cybersecurity Framework Law go into effect.
4-5 March
★ EVENTS AND ANNIVERSARIES
AI in Latin America and Chile 2025 in Santiago, Chile.
6 March
◆ REGULATORY
Deadline for registration of special representatives with Ecuador's Data Protection Authority.
12-13 March
★ EVENTS AND ANNIVERSARIES
IAPP Data Protection Intensive: UK 2025 in London.
13 March
◆ REGULATORY
EDPB plenary meeting.
30 March
■ LEGISLATIVE
Peru's regulations on personal data protection go into effect.
31 March
◆ REGULATORY
Deadline for data controllers in Colombia to update personal databases.
TBA
◆ REGULATORY
Ofcom's disclosure requirements for specific services and Illegal Harms Codes of Practice go into effect.
-
expand_more
April
1 April
■ LEGISLATIVE
Amendments to Malaysia's Personal Data Protection Act 2024 go into effect.
17 April
◆ REGULATORY
NIS2 Directive compliance reporting requirement goes into effect.
23-24 April
★ EVENTS AND ANNIVERSARIES
IAPP Global Privacy Summit 2025 in Washington, D.C.
23 April
★ EVENTS AND ANNIVERSARIES
Eleventh anniversary of the Brazilian Civil Rights Framework for the Internet.
30 April
◆ REGULATORY
Deadline for Ecuador's DPA to submit secondary regulations proposals.
TBA
◆ REGULATORY
Ofcom publishes children's risk assessment guidance and first version of the Protection of Children Codes of Practice.
-
expand_more
May
2 May
◆ REGULATORY
Deadline for EU AI Act codes of practice publication.
6 May
◆ REGULATORY
EPDB plenary meeting.
12-13 May
★ EVENTS AND ANNIVERSARIES
IAPP Canada Privacy Symposium 2025 in Toronto.
14-15 May
★ EVENTS AND ANNIVERSARIES
IAPP AI Governance Global Europe 2025 in Dublin.
17 May
● POLITICAL
Deadline for Australian federal elections.
25 May
★ EVENTS AND ANNIVERSARIES
Seventh anniversary of the EU General Data Protection Regulation.
30 May
■ LEGISLATIVE
Deadline for parts 3 and 5 of Australia’s Cyber Security Act 2024 to come into effect, unless otherwise proclaimed.
TBA
★ EVENTS AND ANNIVERSARIES
Aspiring CXOs Awards 2025 in Bengaluru, India.
-
expand_more
June
1 June
■ LEGISLATIVE
Amendments to Malaysia's Personal Data Protection Act 2024 go into effect.
3 June
◆ REGULATORY
EPDB plenary meeting.
11 June
■ LEGISLATIVE
Deadline for Schedule 2 of Australia's Privacy and Other Legislation Amendment Act 2024 to come into effect.
13 June
◆ REGULATORY
Deadline to publish regulations under Chile's Law on the Protection of Private Life.
20 June
■ LEGISLATIVE
New York's Child Data Protection Act goes into effect.
25-26 June
★ EVENTS AND ANNIVERSARIES
IAPP Navigate: A Digital Policy Leadership Retreat 2025 in Portsmouth, New Hampshire, U.S.
27 June
★ EVENTS AND ANNIVERSARIES
EU adequacy decisions from 2021 for the U.K. expire.
-
expand_more
July
1 July
● POLITICAL
Denmark assumes the presidency of the Council of the European Union.
■ LEGISLATIVE
Colorado's obligations regarding biometric data go into effect.
■ LEGISLATIVE
Oregon Consumer Privacy Act exemption for 501(c)(3) tax exempt organization expires.
■ LEGISLATIVE
Vietnam's Data Law goes into effect.
8 July
◆ REGULATORY
EPDB plenary meeting.
31 July
■ LEGISLATIVE
Minnesota Consumer Data Privacy Act goes into effect.
◆ REGULATORY
Ofcom's children's risk assessment disclosure requirements go into effect.
TBA
◆ REGULATORY
Ofcom's Protection of Children Codes of Practice go into effect.
★ EVENTS AND ANNIVERSARIES
IAPP Asia Privacy Forum 2025 in Singapore.
-
expand_more
August
2 August
■ LEGISLATIVE
EU AI Act provisions on notified bodies and governance structure and obligations for providers of general-purpose AI go into effect.
■ LEGISLATIVE
Deadline for EU member states to designate authorities for EU AI Act oversight.
3 August
● POLITICAL
First round of legislative elections in Argentina.
12 August
◆ REGULATORY
Deadline for regulations under Peru's Cyber Defense Law.
14 August
★ EVENTS AND ANNIVERSARIES
Seventh anniversary of Brazil’s General Personal Data Protection Law.
18 August
■ LEGISLATIVE
EU DSA codes of conduct go into effect.
■ LEGISLATIVE
European Commission adopts EU e-evidence implementing acts and member states designate competent authorities.
23 August
◆ REGULATORY
Deadline for Brazilian data controllers to incorporate new standard contractual clauses into data transfer agreements.
25 August
◆ REGULATORY
Deadline for data controllers in Colombia to report data subject complaints from January-June 2025.
-
expand_more
September
9 September
★ EVENTS AND ANNIVERSARIES
IAPP call for volunteers opens.
12 September
■ LEGISLATIVE
EU Data Act goes into effect.
18-19 September
★ EVENTS AND ANNIVERSARIES
IAPP AI Governance Global North America 2025 in Boston.
24 September
■ LEGISLATIVE
EU data governance requirements for entities providing data intermediation services go into effect.
25 September
■ LEGISLATIVE
EU Data Governance Act evaluation and review.
30 September
◆ REGULATORY
Right to data portability in Peru goes into effect.
-
expand_more
October
1 October
■ LEGISLATIVE
Maryland Online Data Privacy Act goes into effect.
■ LEGISLATIVE
Colorado Privacy Act amendments related to minors go into effect.
3 October
★ EVENTS AND ANNIVERSARIES
IAPP call for volunteers closes.
7 October
◆ REGULATORY
EPDB plenary meeting.
20 October
● POLITICAL
Deadline for federal elections in Canada.
24 October
★ EVENTS AND ANNIVERSARIES
Thirtieth anniversary of the EU Data Protection Directive.
26 October
● POLITICAL
Second round of legislative elections in Argentina.
30-31 October
★ EVENTS AND ANNIVERSARIES
IAPP Privacy. Security. Risk. 2025 in San Diego.
TBA
★ EVENTS AND ANNIVERSARIES
Global Privacy Assembly.
-
expand_more
November
4 November
◆ REGULATORY
EPDB plenary meeting.
16 November
● POLITICAL
Presidential election in Chile.
17 November
◆ REGULATORY
Deadline for the European Commission to evaluate the DSA.
19-20 November
★ EVENTS AND ANNIVERSARIES
IAPP Europe Data Protection Congress 2025 in Brussels.
30 November
◆ REGULATORY
Deadline for certain entities to appoint a personal data officer in Peru.
■ LEGISLATIVE
Deadline for part 2 of Australia's Cyber Security Act 2024 to go into effect.
-
expand_more
December
7 December
★ EVENTS AND ANNIVERSARIES
Twenty-fifth anniversary of the signing of the Charter of Fundamental Rights of the EU.
11 December
■ LEGISLATIVE
European Commission adopts implementing and delegated acts under the Cyber Resilience Act.
■ LEGISLATIVE
Deadline for the minister for communications to specify the date of effect for civil penalties under Australia's Online Safety Amendment (Social Media Minimum Age) Act 2024.
31 December
■ LEGISLATIVE
Mandatory right to cure period expires in Delaware and New Hampshire.
■ LEGISLATIVE
Indiana Data Privacy Law data protection assessment requirements go into effect.