What just became enforceable
As of August 2, 2026, the transparency obligations under Article 50 of the EU AI Act (Regulation (EU) 2024/1689) are now in force. If your app is offered in the EU and includes any generative AI feature, you're expected to:
- Tell users clearly when they're interacting with an AI system (chatbot, AI assistant, etc.), and
- Label AI-generated content so it's identifiable as such.
This applies to both providers (you built the AI feature) and deployers (you integrated someone else's model into your product). The June 2026 "digital Omnibus" review did not push this date back — it's live now, not a future deadline.
For a small builder team, the practical takeaway is simple: if your onboarding flow, chat widget, or content generator doesn't currently disclose "this is AI," it's worth checking that this week rather than later.
→ Full details: /law/eu-ai-act
What's coming in the next 180 days
December 2, 2026 — EU AI Act: grace period ends for content-marking There's a second, related deadline that's easy to miss. The digital Omnibus grace period expires on this date. AI systems that were already on the market before August 2, 2026 get until now to add the machine-readable marking required under Article 50(2) for AI-generated content. In other words: if you shipped a generative feature before this summer, you have until early December to add proper machine-readable labeling — not just a human-readable disclaimer.
If you're not sure whether your app falls into the "already on the market before Aug 2026" bucket, this is worth flagging to whoever manages your compliance docs.
November 1, 2026 — India's DPDP Act enters into force The Digital Personal Data Protection Act, 2023 (DPDP Act) becomes enforceable, along with its implementing rules. This is not limited to Indian companies: it applies to anyone processing digital personal data of people in India, including apps based elsewhere that offer goods or services there. Two things to know:
- The rules bring in verifiable consent requirements and specific obligations for "data fiduciaries" (roughly, whoever controls the data).
- If your app has users in India — even a modest share — this law reaches you regardless of where your servers or company are based.
→ Full details: /law/dpdp · Official text: indiacode.nic.in
December 1, 2026 — Chile's Ley 21.719 takes effect Chile is replacing its older data-protection law (Ley 19.628) with Ley 21.719, a full data-protection regime plus a new supervisory agency. If you have Chilean users, this is the law that will govern how you collect, store, and process their personal data going forward — think of it as Chile's answer to GDPR-style frameworks.
→ Official text: bcn.cl
Why this matters if you shipped fast
None of these deadlines are urgent in the sense of "act today or get fined tomorrow" — but they share a pattern that's worth noticing: AI transparency and data-protection obligations are increasingly extraterritorial. You don't need a legal entity in the EU, India, or Chile for these rules to apply — you just need users there. For apps built quickly with tools like Lovable, Bolt, or v0, it's common to launch with a generic privacy policy or no AI disclosure at all, then add compliance later. These four dates are a good checkpoint to close that gap before it becomes one.
Check where your app stands
If you're not sure whether your app already has the disclosures these rules require — AI transparency labels, a privacy policy that covers India or Chile, or cookie consent that matches current EU rules — you can run a free check, no signup required:
It scans your live app and tells you what's missing against the current regulatory picture, so you can fix gaps before a deadline turns into a scramble.