Resource Center / Tools and Trackers / IAPP Key Dates 2025
IAPP Key Dates 2025
This calendar includes key dates for significant legislative requirements, regulatory consultation periods, major anniversaries and IAPP events.
Published: December 2024
Contributors:
The work of privacy, AI governance and digital responsibility is well punctuated by a drum-beat of key dates and events. This calendar for 2025 includes key dates for the entry into force of some of the more significant legislative requirements, regulatory consultation periods, major anniversaries and IAPP events.
The calendar will be updated with valuable input from the global community of privacy, AI governance and digital responsibility professionals, and we continue to welcome feedback and insights from this community. If you are aware of relevant information absent from the calendar, please share it with us at research@iapp.org.
Key Dates by Category
-
expand_more
★ Events and Anniversaries
28 January
★ EVENTS AND ANNIVERSARIES
International Data Protection Day.
10-11 February
★ EVENTS AND ANNIVERSARIES
AI Action Summit in Paris.
12-13 March
★ EVENTS AND ANNIVERSARIES
IAPP Data Protection Intensive: UK 2025.
23-24 April
★ EVENTS AND ANNIVERSARIES
IAPP Global Privacy Summit 2025.
12-13 May
★ EVENTS AND ANNIVERSARIES
IAPP Canada Privacy Symposium 2025.
14-15 May
★ EVENTS AND ANNIVERSARIES
IAPP AI Governance Global Europe 2025.
25 May
★ EVENTS AND ANNIVERSARIES
EU General Data Protection Regulation's seventh anniversary.
25-26 June
★ EVENTS AND ANNIVERSARIES
IAPP Navigate: A Digital Policy Leadership Retreat.
27 June
★ EVENTS AND ANNIVERSARIES
EU adequacy decisions from 2021 for the U.K. expire.
TBA July
★ EVENTS AND ANNIVERSARIES
IAPP Asia Privacy Forum 2025.
9 September
★ EVENTS AND ANNIVERSARIES
IAPP call for volunteers opens.
3 October
★ EVENTS AND ANNIVERSARIES
IAPP call for volunteers closes.
24 October
★ EVENTS AND ANNIVERSARIES
EU Data Protection Directive's 30th anniversary.
30-31 October
★ EVENTS AND ANNIVERSARIES
IAPP Privacy. Security. Risk. 2025.
TBA October
★ EVENTS AND ANNIVERSARIES
Global Privacy Assembly.
19-20 November
★ EVENTS AND ANNIVERSARIES
IAPP Europe Data Protection Congress 2025.
7 December
★ EVENTS AND ANNIVERSARIES
Signing of the Charter of Fundamental Rights of the EU's 25th anniversary.
-
expand_more
■ Legislative
1 January
■ LEGISLATIVE
California Consumer Privacy Act amendments on sensitive personal information, opt outs and artificial intelligence go into effect.
■ LEGISLATIVE
Right to cure expires under U.S. state privacy laws in Colorado and Connecticut.
■ LEGISLATIVE
New comprehensive U.S. state privacy laws go into effect in Delaware, Iowa, Nebraska and New Hampshire.
■ LEGISLATIVE
Consumer opt-out requirements in U.S. state privacy laws go into effect in Connecticut, Montana, New Hampshire and Texas.
■ LEGISLATIVE
Minnesota's data protection assessment requirements begin to apply.
15 January
■ LEGISLATIVE
New Jersey Data Privacy Act goes into effect.
17 January
■ LEGISLATIVE
EU Digital Operational Resilience Act and its requirement for member states to notify of applicable implementation rules go into effect.
2 February
■ LEGISLATIVE
EU AI Act requirements regarding prohibited AI and mandatory AI go into effect.
20 June
■ LEGISLATIVE
New York's Child Data Protection Act goes into effect.
1 July
■ LEGISLATIVE
Colorado's obligations regarding biometric data go into effect.
■ LEGISLATIVE
Oregon Consumer Privacy Act exemption for 501(c)(3) tax exempt organization expires.
31 July
■ LEGISLATIVE
Minnesota Consumer Data Privacy Act goes into effect.
2 August
■ LEGISLATIVE
EU AI Act provisions on notified bodies and governance structure and obligations for providers of general-purpose AI go into effect.
■ LEGISLATIVE
Deadline for EU member states to designate authorities for EU AI Act oversight.
18 August
■ LEGISLATIVE
EU DSA codes of conduct go into effect.
■ LEGISLATIVE
European Commission adopts EU e-evidence implementing acts and member states designate competent authorities.
12 September
■ LEGISLATIVE
EU Data Act goes into effect.
24 September
■ LEGISLATIVE
EU data governance requirements for entities providing data intermediation services go into effect.
25 September
■ LEGISLATIVE
EU Data Governance Act evaluation and review.
1 October
■ LEGISLATIVE
Maryland Online Data Privacy Act goes into effect.
■ LEGISLATIVE
Colorado Privacy Act amendments related to minors go into effect.
11 December
■ LEGISLATIVE
European Commission adopts implementing and delegated acts under the Cyber Resilience Act.
31 December
■ LEGISLATIVE
Mandatory right to cure period expires in Delaware and New Hampshire.
■ LEGISLATIVE
Indiana Data Privacy Law data protection assessment requirements go into effect.
-
expand_more
● Political
1 January
● POLITICAL
Poland assumes the presidency of the Council of the European Union.
3 January
● POLITICAL
119th U.S. Congress convenes.
16 January
● POLITICAL
European Parliament hearings to select the next European Data Protection Supervisor.
20 January
● POLITICAL
U.S. presidential inauguration ceremony.
17 May
● POLITICAL
Deadline for federal elections in Australia.
1 July
● POLITICAL
Denmark assumes the presidency of the Council of the European Union.
28 September
● POLITICAL
Federal elections in Germany.
20 October
● POLITICAL
Deadline for federal elections in Canada.
-
expand_more
◆ Regulatory
1 January
◆ REGULATORY
California Consumer Privacy Act amendments on sensitive personal information, opt outs and artificial intelligence go into effect.
14 January
◆ REGULATORY
California Privacy Protection Agency public comment hearing.
◆ REGULATORY
Deadline for public comment period on proposed CCPA regulations.
16 January
◆ REGULATORY
European Data Protection Board plenary meeting.
17 January
◆ REGULATORY
Deadline for EU member states to notify the European Commission of promulgated rules under the Network and Information Security Directive.
29 January
◆ REGULATORY
Consultation closes on U.K. AI Management Essentials tool.
TBA January
◆ REGULATORY
U.K. Office of Communications launches consultation on children's access assessment guidelines.
18 February
◆ REGULATORY
Development of EU Digital Services Act codes of conduct.
TBA February
◆ REGULATORY
Ofcom launches consultation on Online Safety Act guidance for protecting women and girls.
13 March
◆ REGULATORY
EDPB plenary meeting.
TBA March
◆ REGULATORY
Ofcom's disclosure requirements for specific services and Illegal Harms Codes of Practice go into effect.
17 April
◆ REGULATORY
NIS2 Directive compliance reporting requirement goes into effect.
TBA April
◆ REGULATORY
Ofcom publishes children's risk assessment guidance and first version of the Protection of Children Codes of Practice.
2 May
◆ REGULATORY
Deadline for EU AI Act codes of practice publication.
6 May
◆ REGULATORY
EPDB plenary meeting.
3 June
◆ REGULATORY
EPDB plenary meeting.
8 July
◆ REGULATORY
EPDB plenary meeting.
31 July
◆ REGULATORY
Ofcom's children's risk assessment disclosure requirements go into effect.
TBA July
◆ REGULATORY
Ofcom's Protection of Children Codes of Practice go into effect.
7 October
◆ REGULATORY
EPDB plenary meeting.
4 November
◆ REGULATORY
EPDB plenary meeting.
17 November
◆ REGULATORY
EU DSA evaluation and report.
2 December
◆ REGULATORY
EPDB plenary meeting.
Key Dates by Month
-
expand_more
January
1 January
● POLITICAL
Poland assumes the presidency of the Council of the European Union.
◆ REGULATORY
China's Network Data Security Management Regulation goes into effect.
■ LEGISLATIVE
California Consumer Privacy Act amendments on sensitive personal information, opt outs and artificial intelligence go into effect.
■ LEGISLATIVE
Right to cure expires under U.S. state privacy laws in Colorado and Connecticut.
■ LEGISLATIVE
New comprehensive U.S. state privacy laws go into effect in Delaware, Iowa, Nebraska and New Hampshire.
■ LEGISLATIVE
Consumer opt-out requirements in U.S. state privacy laws go into effect in Connecticut, Montana, New Hampshire and Texas.
■ LEGISLATIVE
Minnesota's data protection assessment requirements begin to apply.
3 January
● POLITICAL
119th U.S. Congress convenes.
14 January
◆ REGULATORY
California Privacy Protection Agency public comment hearing.
◆ REGULATORY
Deadline for public comment period on proposed CCPA regulations.
15 January
■ LEGISLATIVE
New Jersey Data Privacy Act goes into effect.
16 January
◆ REGULATORY
European Data Protection Board plenary meeting.
● POLITICAL
European Parliament hearings to select the next European Data Protection Supervisor.
17 January
■ LEGISLATIVE
EU Digital Operational Resilience Act and its requirement for member states to notify of applicable implementation rules go into effect.
◆ REGULATORY
Deadline for EU member states to notify the European Commission of promulgated rules under the Network and Information Security Directive.
20 January
● POLITICAL
U.S. presidential inauguration ceremony.
28 January
★ EVENTS AND ANNIVERSARIES
International Data Protection Day.
29 January
◆ REGULATORY
Consultation closes on U.K. AI Management Essentials tool.
TBA
◆ REGULATORY
U.K. Office of Communications launches consultation on children's access assessment guidelines.
-
expand_more
February
2 February
■ LEGISLATIVE
EU AI Act requirements regarding prohibited AI and mandatory AI go into effect.
10-11 February
★ EVENTS AND ANNIVERSARIES
AI Action Summit in Paris.
18 February
◆ REGULATORY
Development of EU Digital Services Act codes of conduct.
TBA
◆ REGULATORY
Ofcom launches consultation on Online Safety Act guidance for protecting women and girls.
-
expand_more
March
12-13 March
★ EVENTS AND ANNIVERSARIES
IAPP Data Protection Intensive: UK 2025.
13 March
◆ REGULATORY
EDPB plenary meeting.
TBA
◆ REGULATORY
Ofcom's disclosure requirements for specific services and Illegal Harms Codes of Practice go into effect.
-
expand_more
April
17 April
◆ REGULATORY
NIS2 Directive compliance reporting requirement goes into effect.
23-24 April
★ EVENTS AND ANNIVERSARIES
IAPP Global Privacy Summit 2025.
TBA
◆ REGULATORY
Ofcom publishes children's risk assessment guidance and first version of the Protection of Children Codes of Practice.
-
expand_more
May
2 May
◆ REGULATORY
Deadline for EU AI Act codes of practice publication.
6 May
◆ REGULATORY
EPDB plenary meeting.
12-13 May
★ EVENTS AND ANNIVERSARIES
IAPP Canada Privacy Symposium 2025.
14-15 May
★ EVENTS AND ANNIVERSARIES
IAPP AI Governance Global Europe 2025.
17 May
● POLITICAL
Deadline for federal elections in Australia.
25 May
★ EVENTS AND ANNIVERSARIES
EU General Data Protection Regulation's seventh anniversary.
-
expand_more
June
3 June
◆ REGULATORY
EPDB plenary meeting.
20 June
■ LEGISLATIVE
New York's Child Data Protection Act goes into effect.
25-26 June
★ EVENTS AND ANNIVERSARIES
IAPP Navigate: A Digital Policy Leadership Retreat.
27 June
★ EVENTS AND ANNIVERSARIES
EU adequacy decisions from 2021 for the U.K. expire.
-
expand_more
July
1 July
● POLITICAL
Denmark assumes the presidency of the Council of the European Union.
■ LEGISLATIVE
Colorado's obligations regarding biometric data go into effect.
■ LEGISLATIVE
Oregon Consumer Privacy Act exemption for 501(c)(3) tax exempt organization expires.
8 July
◆ REGULATORY
EPDB plenary meeting.
31 July
■ LEGISLATIVE
Minnesota Consumer Data Privacy Act goes into effect.
◆ REGULATORY
Ofcom's children's risk assessment disclosure requirements go into effect.
TBA
◆ REGULATORY
Ofcom's Protection of Children Codes of Practice go into effect.
★ EVENTS AND ANNIVERSARIES
IAPP Asia Privacy Forum 2025.
-
expand_more
August
2 August
■ LEGISLATIVE
EU AI Act provisions on notified bodies and governance structure and obligations for providers of general-purpose AI go into effect.
■ LEGISLATIVE
Deadline for EU member states to designate authorities for EU AI Act oversight.
18 August
■ LEGISLATIVE
EU DSA codes of conduct go into effect.
■ LEGISLATIVE
European Commission adopts EU e-evidence implementing acts and member states designate competent authorities.
-
expand_more
September
9 September
★ EVENTS AND ANNIVERSARIES
IAPP call for volunteers opens.
12 September
■ LEGISLATIVE
EU Data Act goes into effect.
24 September
■ LEGISLATIVE
EU data governance requirements for entities providing data intermediation services go into effect.
25 September
■ LEGISLATIVE
EU Data Governance Act evaluation and review.
28 September
● POLITICAL
Federal elections in Germany.
-
expand_more
October
1 October
■ LEGISLATIVE
Maryland Online Data Privacy Act goes into effect.
■ LEGISLATIVE
Colorado Privacy Act amendments related to minors go into effect.
3 October
★ EVENTS AND ANNIVERSARIES
IAPP call for volunteers closes.
7 October
◆ REGULATORY
EPDB plenary meeting.
20 October
● POLITICAL
Deadline for federal elections in Canada.
24 October
★ EVENTS AND ANNIVERSARIES
EU Data Protection Directive's 30th anniversary.
30-31 October
★ EVENTS AND ANNIVERSARIES
IAPP Privacy. Security. Risk. 2025.
TBA
★ EVENTS AND ANNIVERSARIES
Global Privacy Assembly.
-
expand_more
November
4 November
◆ REGULATORY
EPDB plenary meeting.
17 November
◆ REGULATORY
EU DSA evaluation and report.
19-20 November
★ EVENTS AND ANNIVERSARIES
-
expand_more
December
2 December
◆ REGULATORY
EPDB plenary meeting.
7 December
★ EVENTS AND ANNIVERSARIES
Signing of the Charter of Fundamental Rights of the EU's 25th anniversary.
11 December
■ LEGISLATIVE
European Commission adopts implementing and delegated acts under the Cyber Resilience Act.
31 December
■ LEGISLATIVE
Mandatory right to cure period expires in Delaware and New Hampshire.
■ LEGISLATIVE
Indiana Data Privacy Law data protection assessment requirements go into effect.