Compliance deadline tracker for AI, privacy, product, and GCC teams.

Baseline EU AI Act legal framework is in force.

Article 5 prohibited practices and AI literacy duties started applying.

General-purpose AI model obligations and governance rules started applying.

AI interaction, synthetic content, deepfake, and user disclosure duties become a practical launch gate.

High-risk system controls and technical documentation phase in depending on system type and transition rules.

Track proposed timeline and implementation changes before relying on any shifted date.

Consent Manager and registration-related readiness milestone for Indian privacy operations.

Target date for most DPDP operational readiness work: notices, consent, rights, grievance, processors, and breach.

GDPR is already active. Keep ROPA, lawful basis, DSR, breach, processor, SCC, and TIA evidence current.

Saudi PDPL readiness should cover notices, consent, rights, breach, transfers, vendors, and SDAIA-aligned evidence.

UAE, DIFC, and ADGM workflows should keep DPIA, rights, complaint, processor, breach, and transfer evidence together.

CRA vulnerability and incident reporting readiness becomes a major software-product milestone.

CRA full conformity, CE marking, technical documentation, and declaration draft-field duties may apply.

Notice, written release, retention, deletion, vendor, and security evidence should exist before collection.

ESPR and product-category delegated acts determine specific DPP evidence and passport timing.