Become a Member

Regulation TrackerLaws, orders and treaties read for their security duties and clocks Standards & FrameworksAttack taxonomies, control catalogues and frontier frameworks AI Incident DatabaseThe security incident record, with mechanism and lesson Research Paper LibraryThe papers that define the field, summarised OSS DirectoryRed teaming, guardrail, supply chain and evaluation tools Case StudiesProgrammes built, with measured outcomes AI Vulnerability TrackerCVEs and advisories for the components AI systems are built from

Latest in the tracker

New York Stop Addictive Feeds Exploitation (SAFE) for Kids Act and implementing rulesNew York's law restricting algorithmic feeds for minors takes effect on 25 January 2027 under final rules published in July 2026, with certified age assurance and $5,000-per-violation penalties.

Knowledge Base Regulation Tracker Standards & Frameworks OSS Directory AI Incident Database Research Paper Library Case Studies Society Articles News Jobs About Charter Become a Member

Home/News/July 2026

Digital Omnibus on AI enters into force, moving high-risk deadlines to December 2027 and August 2028

Regulation (EU) 2026/1744 defers Annex III and Annex I obligations, adds prohibitions on nudifier and CSAM systems from 2 December 2026, expands AI Office supervision and leaves Article 50, GPAI duties and penalties unchanged.

RegulationEuropean Union27 Jul 2026

Published on 24 July after Parliament's endorsement on 16 June and Council adoption on 29 June, the amendment gives providers time for the harmonised standards to arrive but changes nothing in Article 15's cybersecurity substance. The Cyber Resilience Act's reporting duties, which begin on 11 September 2026, are unaffected.

What to do: update roadmaps to the new dates without pausing control work, and build the Article 15 catalogue against ETSI TS 104 223 and NIST AI 100-2 while the CEN/CENELEC specification is finished.