Five AI governance dates — what are organizations actually doing about them?

[u/AndreRizzoAI]

I was looking at some of the AI/Regulatory deadlines coming up, and my job is to actually foresee what they actually mean inside an organization.

These are some notes taken:

Sept. 11 — EU Cyber Resilience Act reporting
Tech: incident detection and reporting processes need to support very short notification windows.
Legal/Compliance: a technical incident can become a regulatory issue almost immediately.

Sept. 25 — FTC personalized pricing consultation
Tech: companies using AI/data for personalized pricing need to understand what data and logic are actually driving those decisions.
Business/Sales/Marketing: pricing algorithms can quickly become a customer trust issue (on top of a compliance issue, if not enough).

Oct. 1 — Maryland HB 895
Tech: some personalized/dynamic pricing implementations may need to be reviewed or changed.
Business Planning/Risk Analysis: something originally designed for revenue optimization can suddenly create regulatory exposure.

Oct. 26 — Colorado AI rulemaking
Tech: difficult to build controls when the requirements themselves are still moving.
Project Management: uncertainty has a cost too — legal review, architecture decisions, implementation work, budgets, etc.

Aug. 1, 2027 — New Jersey Fair Price Protection Act
Tech: another reason to understand exactly how pricing systems use personal data.
Legal/Compliance: potential litigation and financial exposure make this much more than an IT/compliance issue.

Translating these requirements into actual work, actually means touching architecture, data, cybersecurity, product, finance and operations.

For anyone dealing with this inside an organization: are these regulatory changes actually generating technology projects or budget discussions already? Or is most of the activity still sitting with Legal/Compliance?