What changed and when, across every product guide here. Regulation is the part of a build that moves after you have finished, so this records when each rule arrived — and which ones have not arrived yet.
One dated record of what changed and when, across every product guide on this site.
It exists because regulation is the part of a build that moves after you have finished. A guide tells you the rule as at the day it was written; this tells you when the rule arrived, and what is still coming.
Every entry links to the guide that relies on it, where the instrument is named, dated and typed by source. Nothing here is a summary of the law — it is an index of when things moved, with a route to the page that explains each one.
| Already in force | Still ahead |
|---|---|
| 46 changes, the earliest in 2017 | 13 dates, out to 2028 |
The date to circle is 1 January 2027. Three separate instruments commence that day — IRDAI’s named-seller requirement, the RBI Responsible Business Conduct Second Amendment on bundling and dark patterns, and the Fourth Amendment on recovery conduct. Anyone touching insurance distribution or collections has one deadline for three unrelated pieces of work, and they were notified months apart.
Sorted by date. These have not happened yet.
| Date | Who | What changed |
|---|---|---|
| 2 December 2026 | EU | Machine-readable marking of synthetic content for systems placed on the market before 2 August 2026. New prohibitions take effect. |
| 31 December 2026 | NPCI | Scheduled expiry of the 30% third-party app provider cap on UPI. Extended three times so far. guide → |
| 1 January 2027 | IRDAI | Named seller required on every proposal, policy and certificate. guide → |
| 1 January 2027 | RBI | Responsible Business Conduct Second Amendment commences — bundling and dark patterns. guide → |
| 1 January 2027 | RBI | Responsible Business Conduct Fourth Amendment commences — recovery conduct. Three separate instruments, one date. guide → |
| 31 January 2027 | IRDAI | Existing registrants must apply for a fresh certificate. Grace to 31 March 2027 with a ₹750 fee. guide → |
| 2 August 2027 | EU | General-purpose AI models placed on the market before 2 August 2025 must comply. National regulatory sandboxes due. |
| 2 December 2027 | EU | AI Act high-risk obligations for standalone Annex III systems — hiring, credit scoring, education, critical infrastructure. guide → |
| 2 August 2028 | EU | AI Act high-risk obligations for product-embedded Annex I systems — medical devices, machinery, toys. |
| 13 November 2026 | MeitY | DPDP consent-manager provisions commence. guide → |
| 31 March 2027 | IRDAI | Last date for late applications for a fresh intermediary certificate, on reasons and an additional fee. guide → |
| 13 May 2027 | MeitY | DPDP substantive obligations commence. Penalties reach ₹250 crore. guide → |
| 31 March 2028 | RBI | Existing TReDS operators must comply with the 2026 Directions. guide → |
Most recent first.
| Date | Who | What changed |
|---|---|---|
| 23 June 2026 | RBI | Trade Receivables Discounting System Directions, 2026 replace the 2014 TReDS guidelines. guide → |
| 5 June 2026 | RBI | Sahamati recognised as the Account Aggregator self-regulatory organisation. guide → |
| 21 April 2026 | RBI | The recurring payments rules changed. Most published guidance predates this. guide → |
| 5 February 2026 | IRDAI | Sabka Bima Sabki Raksha (Amendment of Insurance Laws) Act, 2025 in force, replacing three-year renewal cycles. guide → |
| 1 January 2026 | RBI | Co-Lending Arrangements Directions take effect and repeal the 2020 circular. guide → |
| 28 November 2025 | RBI | Sector-specific KYC Master Directions replace the earlier consolidated direction. guide → |
| 13 November 2025 | MeitY | DPDP Rules, 2025 notified. Consent becomes the operative basis, with no legitimate-interest fallback. guide → |
| 6 August 2025 | RBI | Co-Lending Arrangements Directions, 2025 issued. guide → |
| 4 August 2025 | IRDAI | A ₹5 crore order against an online distributor whose minimum remittance period was three working days by design, against the 24-hour rule in section 64VB. guide → |
| 8 May 2025 | RBI | Digital Lending Directions, 2025. Camera, microphone and location permitted with consent; contacts, call logs and media files prohibited. guide → |
| 1 January 2025 | RBI | Credit reporting moves to fortnightly — the 15th and last day of each month, within seven calendar days. guide → |
| 1 April 2024 | IRDAI | Operations and Allied Matters of Insurers Regulations, 2024 — eight regulations and 41 circulars consolidated. guide → |
| 31 October 2023 | RBI | The OPGSP framework withdrawn, replaced by the Payment Aggregator — Cross Border regime. guide → |
| 1 August 2023 | GSTN | E-invoicing threshold falls to ₹5 crore aggregate annual turnover, applying to any financial year from 2017-18 onward. Permanent once crossed. guide → |
| 5 November 2020 | RBI | Co-Lending by Banks and NBFCs to Priority Sector. Repealed in 2026. guide → |
| 2 September 2016 | RBI | Master Direction — NBFC-Account Aggregator. The licence that makes consent-based data sharing possible. guide → |
| 14 September 2026 | GoI | MDR notification: no charge on UPI transactions at or below ₹2,000, none on RuPay debit, P2P stays free. guide → |
| 6 August 2026 | RBI | Responsible Business Conduct (Fourth Amendment) Directions, 2026 notified, with parallel NBFC circulars. Recovery agent certification, one day’s notice before a visit, call recording, device-locking restricted. guide → |
| 2 August 2026 | EU | AI Act Article 50 transparency duties apply as scheduled. Chatbots and synthetic content are in scope. |
| 30 July 2026 | IRDAI | Insurance Intermediaries (Amendment) Regulations, 2026 notified. A named seller on every proposal and policy. guide → |
| 27 July 2026 | EU | Digital Omnibus on AI enters into force, six days before the original high-risk deadline. |
| 1 July 2026 | RBI | Weekly credit reporting begins — the 9th, 16th, 23rd and last day of each month. guide → |
| 1 July 2026 | RBI | Reserve Bank Integrated Ombudsman Scheme, 2026 takes effect. Complain to the entity first; 30 days to reply, then 90 days to escalate. guide → |
| 24 June 2026 | RBI | Draft Guidance on Regulatory Principles for Model Risk Management. Still a draft. guide → |
| 16 June 2026 | EU | Parliament adopts the Digital Omnibus on AI, deferring the AI Act high-risk timetable. |
| 15 June 2026 | RBI | Responsible Business Conduct (Second Amendment) Directions, 2026 notified. No compulsory bundling, dark patterns prohibited, full refund for mis-selling. guide → |
| 8 January 2026 | FIU-IND | AML and CFT guidelines for virtual digital asset service providers — same standard as other regulated financial institutions. guide → |
| 31 December 2025 | RBI | Deadline for physical payment aggregators to apply for authorisation; merchants onboarded before this date fall into the remediation cohort. guide → |
| 3 November 2025 | UIDAI | Aadhaar Data Vault FAQs updated. guide → |
| 4 October 2025 | RBI | Continuous cheque clearing takes effect. Hourly settlement, same-working-day realisation, replacing two batch sessions. guide → |
| 15 September 2025 | RBI | Payment Aggregator Directions, 2025. A decade of circulars consolidated into one Master Direction covering online, physical and cross-border aggregators. guide → |
| 13 August 2025 | RBI | Circular RBI/2025-26/73 — continuous clearing and settlement on realisation in CTS. guide → |
| 2 August 2025 | EU | AI Act general-purpose AI model obligations apply. Models already on the market get until 2 August 2027. |
| 18 July 2025 | UIDAI | Circular No. 14 of 2025 revises the Aadhaar Data Vault: single logical instance, AES-256 or higher, keys in an HSM not shared with any other legal entity, isolated network zone. guide → |
| 1 April 2025 | GSTN | 30-day IRP reporting window becomes effective. A missed IRN costs your customer their input tax credit, not you. guide → |
| 10 February 2025 | SEBI | Regulation 16C: an intermediary is solely liable for AI and ML tools it uses, whether built in-house or bought. guide → |
| 5 November 2024 | GSTN | Advisory on the 30-day IRP reporting window for taxpayers above ₹10 crore turnover. guide → |
| 1 September 2023 | SEBI | EOP framework takes effect. guide → |
| 13 June 2023 | SEBI | Execution Only Platform framework issued. Advice and execution separated: an IA may not execute, an EOP may not advise. guide → |
| 12 August 2022 | RBI | Recovery agents circular — conduct requirements extended across regulated entities, including digital lending and tele-calling. guide → |
| 24 April 2020 | SEBI | Masked Aadhaar extended to securities-market intermediaries. guide → |
| 29 May 2019 | RBI | KYC Master Direction amended: regulated entities must redact the first eight digits and the QR code before storing an Aadhaar document. guide → |
| 29 January 2019 | IRDAI | Masked Aadhaar accepted by insurers and their intermediaries. guide → |
| 31 December 2018 | RBI | Non-CTS-2010 cheques removed from clearing. Still valid instruments; no longer clearable. guide → |
| 23 October 2018 | UIDAI | Masked Aadhaar — showing only the last four digits — established as valid proof of identity for KYC. guide → |
| 25 July 2017 | UIDAI | First Aadhaar Data Vault circular. Aadhaar numbers to be tokenised to a Reference Key and held outside business databases. guide → |
All nineteen, by what you are trying to build.
Which body owns the question you are asking.
The instruments themselves, in depth.
The EU AI Act timeline, and why it reaches Indian companies.
This is an index of dates, not a statement of the law. Indian and European regulation both change by notification, sometimes between one update of this page and the next. Every entry links to a guide where the instrument is named and dated — check there, and then check the instrument. Nothing here is legal advice.
This page is an index of dates. Each guide it links to carries the instrument, dated and typed.
Checked 17 September 2026. Forward dates are as currently notified and have moved before — the AI Act high-risk timetable shifted twice in 2026 alone.
Opens your assistant with this page as the source, and a question rather than a summary. It will ask what you are building before it answers.
Nothing is sent from here. The link carries only this page’s title and address.