Calendar
Privacy, data and AI regulatory calendar
The dates that matter for Australian organisations, each labelled by status, from enacted law to proposals.
Checked on 16 October 2026. Dates come from the sources listed below; confirm against primary sources before relying on them.
| Date | Development | Jurisdiction | Status |
|---|---|---|---|
| February 2018 | Notifiable Data Breaches scheme commences | Australia | Law in force |
| 11 December 2024 | Most Privacy and Other Legislation Amendment Act 2024 changes commence | Australia | Law in force |
| 10 June 2025 | Statutory tort for serious invasions of privacy commences | Australia | Law in force |
| October 2025 | National AI Centre publishes the Guidance for AI Adoption | Australia | Regulator guidance |
| 14 October 2025 | ISO/IEC 27701:2025 published as a standalone standard | International | Voluntary standard |
| 30 April 2026 | APRA letter to industry on artificial intelligence | Australia | Regulator guidance |
| 27 July 2026 | EU Digital Omnibus on AI enters into force | European Union | Law in force |
| 2 August 2026 | EU AI Act Article 50 transparency obligations apply | European Union | Law in force |
| 31 August 2026 | Privacy Act tranche 2 exposure draft released | Australia | Exposure draft |
| 10 December 2026 | Automated decision-making disclosures in privacy policies commence | Australia | Law, commencing later |
| By 10 December 2026 | Children’s Online Privacy Code must be registered; start date not yet set | Australia | Being finalised |
| 2 December 2027 | EU AI Act Annex III high-risk obligations apply | European Union | Law, commencing later |
| 2 August 2028 | EU AI Act Annex I high-risk obligations apply | European Union | Law, commencing later |
The Privacy Act tranche 2 reforms have no commencement date. They are a proposal until a Bill is passed.