Data Governance Signal

Calendar

Key dates

Application dates, consultation deadlines, votes and compliance deadlines from the developments we cover — each linked to the article and its sources. Dates are taken from official sources where we have them.

  1. CPPA Board meeting (5–6 November) due to consider opening formal rulemaking on the draft

    CPPA staff propose naming Global Privacy Control in CCPA opt-out signal rules and widening metrics reporting

  2. Deadline for collection-sector organisations to register for the AP roundtable

    Dutch AP warns debt collectors that AI scoring and file enrichment may breach GDPR automated decision rules

  3. Effective date of GM judgment; 180-day privacy programme and 60-day enrolment procedure clocks start

    GM driver-data judgment sets out privacy programme, data inventory and consent terms running to 2046

  4. AP roundtable with the debt collection sector on the report's findings

    Dutch AP warns debt collectors that AI scoring and file enrichment may breach GDPR automated decision rules

  5. Pennsylvania AI Deceptive Advertising Act takes effect

    Pennsylvania enacts AI advertising law requiring disclosure of misleading synthetic content

  6. Opt Me Out Act takes effect, requiring browser developers to offer GPC functionality

    CPPA staff propose naming Global Privacy Control in CCPA opt-out signal rules and widening metrics reporting

  7. Colorado Automated Decision-Making Technology Act (SB 26-189) takes effect

    FPF urges Colorado to narrow ADMT 'de minimis' test and tie developer disclosures to deployer duties

  8. New York youth chatbot safety law (S9051B/A10379C) takes effect

    New York enacts youth chatbot safety law with age assurance and age-data deletion duties

  9. MAS AI guidelines: governance and oversight requirements take effect

    Singapore's MAS sets AI risk management expectations for financial institutions, phased from 2027

  10. MAS AI guidelines: life cycle and capability requirements take effect

    Singapore's MAS sets AI risk management expectations for financial institutions, phased from 2027

  11. GM privacy programme obligations under the Oregon judgment end

    GM driver-data judgment sets out privacy programme, data inventory and consent terms running to 2046