# AI compliance checklist for banks, by quarter

Source: https://www.bankingnewsai.com/ai-regulation/compliance-checklist
Last updated: Oct 12, 2026

Obligations and dates from the tracked documents, grouped by quarter and recomputed daily. As of Oct 15, 2026.

## Q4 2026

- [ ] Oct 20, 2026 — Comment deadline: [CFTC Compute Derivatives RFC](https://www.bankingnewsai.com/ai-regulation/documents/cftc-compute-derivatives-rfc-2026) — CFTC Compute Derivatives RFC: comment period closes ([CFTC](https://www.bankingnewsai.com/ai-regulation/cftc))
- [ ] Oct 26, 2026 — Comment deadline: [Colorado AG proposed ADMT rules](https://www.bankingnewsai.com/ai-regulation/documents/co-ag-admt-proposed-rules-2026) — Colorado AG proposed ADMT rules: comment period closes ([Colorado AI Act](https://www.bankingnewsai.com/ai-regulation/colorado-ai-act))
- [ ] Oct 31, 2026 — Milestone: Deadline for significant institutions to submit AI-cyber action plans to their JSTs ([ECB](https://www.bankingnewsai.com/ai-regulation/ecb))
- [ ] Nov 2026 — Milestone: RAISE Act: DFS begins directing large frontier developers to register ([NY DFS](https://www.bankingnewsai.com/ai-regulation/ny-dfs))
- [ ] Nov 20, 2026 — Takes effect: [Consumer Credit Directive (EU) 2023/2225](https://www.bankingnewsai.com/ai-regulation/documents/eu-consumer-credit-directive-2023-2225) — Consumer Credit Directive (EU) 2023/2225 takes effect ([EU AI Act](https://www.bankingnewsai.com/ai-regulation/eu-ai-act))
- [ ] Dec 1, 2026 — Milestone: Regulation 10-1-1: annual life insurer reports and non-use attestations due ([Colorado AI Act](https://www.bankingnewsai.com/ai-regulation/colorado-ai-act))
- [ ] Dec 2, 2026 — Milestone: Article 50(2) marking transition ends ([EU AI Act](https://www.bankingnewsai.com/ai-regulation/eu-ai-act))

## Q1 2027

- [ ] Jan 1, 2027 — Takes effect: [SB 26-189](https://www.bankingnewsai.com/ai-regulation/documents/co-sb26-189) — SB 26-189 takes effect ([Colorado AI Act](https://www.bankingnewsai.com/ai-regulation/colorado-ai-act))
- [ ] Jan 1, 2027 — Takes effect: [HB 26-1263](https://www.bankingnewsai.com/ai-regulation/documents/co-hb26-1263) — HB 26-1263 takes effect ([Colorado AI Act](https://www.bankingnewsai.com/ai-regulation/colorado-ai-act))
- [ ] Jan 1, 2027 — Takes effect: [AB 1609](https://www.bankingnewsai.com/ai-regulation/documents/ca-ab-1609-2026) — AB 1609 takes effect ([California CPPA](https://www.bankingnewsai.com/ai-regulation/california))
- [ ] Jan 1, 2027 — Takes effect: [New York RAISE Act](https://www.bankingnewsai.com/ai-regulation/documents/ny-raise-act) — New York RAISE Act takes effect ([NY DFS](https://www.bankingnewsai.com/ai-regulation/ny-dfs))
- [ ] Jan 1, 2027 — Milestone: RAISE Act takes effect ([NY DFS](https://www.bankingnewsai.com/ai-regulation/ny-dfs))

## Q2 2027

- [ ] May 1, 2027 — Takes effect: [OSFI Guideline E-23](https://www.bankingnewsai.com/ai-regulation/documents/osfi-guideline-e-23) — OSFI Guideline E-23 takes effect ([OSFI](https://www.bankingnewsai.com/ai-regulation/osfi))

## Q3 2027

- [ ] Jul 1, 2027 — Takes effect: [SB 947](https://www.bankingnewsai.com/ai-regulation/documents/ca-sb-947-2026) — SB 947 takes effect ([California CPPA](https://www.bankingnewsai.com/ai-regulation/california))
- [ ] Jul 1, 2027 — Milestone: Scheduled repeal of the Artificial Intelligence Policy Act (Title 13, Chapter 72) ([Utah Division of Consumer Protection](https://www.bankingnewsai.com/ai-regulation/utah))
- [ ] Jul 10, 2027 — Milestone: EU Anti-Money Laundering Regulation applies ([EBA](https://www.bankingnewsai.com/ai-regulation/eba))
- [ ] Aug 2, 2027 — Milestone: Deadline for general-purpose AI models placed on the market before August 2025 ([EU AI Act](https://www.bankingnewsai.com/ai-regulation/eu-ai-act))

## Q4 2027

- [ ] Oct 7, 2027 — Takes effect: [MAS Guidelines on Artificial Intelligence Risk Management](https://www.bankingnewsai.com/ai-regulation/documents/mas-guidelines-ai-risk-management-2026) — MAS Guidelines on Artificial Intelligence Risk Management takes effect ([MAS](https://www.bankingnewsai.com/ai-regulation/mas))
- [ ] Dec 2, 2027 — Milestone: High-risk AI obligations for stand-alone Annex III systems become applicable ([EU AI Act](https://www.bankingnewsai.com/ai-regulation/eu-ai-act))
- [ ] Dec 2, 2027 — Milestone: BaFin begins monitoring high-risk AI system requirements ([BaFin](https://www.bankingnewsai.com/ai-regulation/bafin))

## Q3 2028

- [ ] Aug 2, 2028 — Milestone: Deferred deadline for high-risk AI embedded in regulated products ([EU AI Act](https://www.bankingnewsai.com/ai-regulation/eu-ai-act))

## Open consultations

- [CFTC Compute Derivatives RFC](https://www.bankingnewsai.com/ai-regulation/documents/cftc-compute-derivatives-rfc-2026) — comments due Oct 20, 2026
- [Colorado AG proposed ADMT rules](https://www.bankingnewsai.com/ai-regulation/documents/co-ag-admt-proposed-rules-2026) — comments due Oct 26, 2026

## In force now (most recent)

- [FIN-2026-Alert005 (Digital Asset Investment Scam Centers)](https://www.bankingnewsai.com/ai-regulation/documents/fincen-alert-2026-scam-centers) — FinCEN Alert on Money Laundering Activity Associated with Digital Asset Investment Scam Centers (Sep 3, 2026)
- [FCA multi-firm review: Frontier AI and cyber resilience (Sep 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fca-frontier-ai-cyber-resilience-2026) — Frontier AI and Cyber Resilience (Sep 2, 2026)
- [ESA Statement on ICT risks from frontier AI models (JC 2026 25)](https://www.bankingnewsai.com/ai-regulation/documents/esas-jc-2026-25-frontier-ai-statement) — ESA Statement: Toward a consistent and risk-based approach for ICT risks from frontier AI models (Jul 31, 2026)
- [FIN-2026-Alert004 (Federal Student Aid Fraud)](https://www.bankingnewsai.com/ai-regulation/documents/fincen-alert-2026-federal-student-aid-fraud) — FinCEN Alert on Fraud Schemes Targeting Federal Student Aid (Jul 24, 2026)
- [Regulation (EU) 2026/1744 (Digital Omnibus on AI)](https://www.bankingnewsai.com/ai-regulation/documents/eu-digital-omnibus-ai-regulation-2026-1744) — Regulation (EU) 2026/1744 amending Regulation (EU) 2024/1689 as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI) (Jul 27, 2026)
- [Commission guidelines on AI Act Article 50 transparency](https://www.bankingnewsai.com/ai-regulation/documents/eu-commission-guidelines-ai-act-article-50-transparency-2026) — Commission Guidelines on the implementation of the transparency obligations for certain AI systems under Article 50 of Regulation (EU) 2024/1689 (AI Act) (Jul 20, 2026)
- [ECB 'Dear CEO' letter on AI-enabled cybersecurity threats (SSM-2026-0301)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-letter-ai-enabled-cybersecurity-threats-2026) — Addressing AI-enabled cybersecurity threats — letter from the Chair of the Supervisory Board to CEOs of significant institutions (Jul 7, 2026)
- [SFC Circular 26EC32 (AI-enabled cyberattacks)](https://www.bankingnewsai.com/ai-regulation/documents/sfc-circular-ai-enabled-cyberattacks-2026) — Circular to licensed corporations, SFC-licensed virtual asset service providers and associated entities - Enhanced cybersecurity measures to address evolving risks arising from artificial intelligence-enabled cyberattacks (Jun 2, 2026)
- [IOSCO FR/02/2026](https://www.bankingnewsai.com/ai-regulation/documents/iosco-ai-capital-markets-fr02-2026) — Supervisory Toolkit for AI Use in Capital Markets: Final Report (May 25, 2026)
- [Japan FSA/BOJ frontier AI request](https://www.bankingnewsai.com/ai-regulation/documents/japan-fsa-boj-frontier-ai-request-2026) — Request regarding 'Short-term Responses by Financial Institutions in Light of Threat Changes from Frontier AI' (「フロンティアAIによる脅威変化を踏まえた金融機関等の短期的な対応」に係る要請について) (May 22, 2026)
- [DFS Frontier AI Models Industry Letter (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2026-05-21-frontier-ai-models) — Heightened Cybersecurity Risks Associated with Frontier AI Models (May 21, 2026)
- [DFS Heightened Threat Environment Guidance (May 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ny-dfs-industry-letter-2026-05-21-heightened-threat-environment) — Guidance on Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment (May 21, 2026)

---

Canonical page: https://www.bankingnewsai.com/ai-regulation/compliance-checklist
Part of [BankingNewsAI](https://www.bankingnewsai.com/) — a free daily brief on AI in banking, an AI regulation tracker (41 authorities, 238 documents) and AI-strategy profiles of the 120 largest US banks. Markdown versions of every reference page: append `.md` to the page URL; index at https://www.bankingnewsai.com/llms.txt.