🔴Illinois HB 3773IN EFFECTUp to ~$70K/violation|🔴Texas TRAIGA (HB 149)IN EFFECTAG-enforced|🔴Utah AI Policy ActIN EFFECT$2,500/violation|⚠️Colorado AI Act (SB 205)Jan 1, 2027AG-enforced|⚠️California SB 942Aug 2, 2026$5K/day|⚠️EU AI Act Art. 50Aug 2, 2026€35M or 7% revenue|⚠️New York RAISE ActJan 1, 2027AG civil penalties|
European Union · EU AI ActAI statute in force from 1 September 2026 — Federal Law 243-FZ on the support of AI technology development

Russia AI Law Deadlines

EU AI Act + GDPR + national-law dates that businesses serving this country must meet.

Deadline: Federal Law No. 243-FZ was signed on 26 July 2026 and takes effect on 1 September 2026, which is the only AI-specific date in Russian law. The 2020 Moscow experimental regime carried a five-year term that ran out on 1 July 2025 and imposes nothing today; this page marks it expired rather than dropping it, because a reader who meets a reference to 123-ФЗ needs to know it is spent.Penalty: Penalty provisions are deliberately NOT quoted. 243-ФЗ is framed as a support-and-development statute rather than a sanctioning one, and the operative penalty articles of the Кодекс об административных правонарушениях that a Russian AI matter would actually be decided under were not read at source in this pass. An unsourced fine figure is not something this product publishes.

How AI law works in Russia

Russia's AI instrument is Федеральный закон от 26.07.2026 № 243-ФЗ, «О поддержке развития технологий искусственного интеллекта в Российской Федерации», published on the official portal publication.pravo.gov.ru on 26 July 2026 and in force from 1 September 2026. Above it sits Указ Президента № 490 of 10 October 2019, which approved the Национальная стратегия развития искусственного интеллекта — a presidential strategy, so a policy framework and not a source of obligations. Underneath, Федеральный закон № 123-ФЗ of 24 April 2020 established the Moscow experimental legal regime for AI; its five-year term expired on 1 July 2025 and it is recorded here as spent. ⚠️ Two things a reader should not be allowed to assume. First, the register at pd.rkn.gov.ru/registerOffenders is NOT an enforcement-decision corpus: it lists domains and IP addresses a court has ordered blocked, naming no penalty and describing no conduct, and this product models it as a separate data type rather than counting hostnames as enforcement matters. Second, Russia has no subordinate AI regulation on the federal publication portal — a search of publication.pravo.gov.ru returned exactly one federal AI-titled instrument, 243-ФЗ itself, and that reading is re-asked weekly against a control term so that a new decree cannot pass unnoticed.

Applicable laws

  • 📜 Федеральный закон от 26.07.2026 № 243-ФЗ «О поддержке развития технологий искусственного интеллекта в Российской Федерации» — in force from 1 September 2026
  • 📜 Указ Президента РФ от 10.10.2019 № 490 «О развитии искусственного интеллекта в Российской Федерации» — National AI Development Strategy
  • 📜 Федеральный закон от 24.04.2020 № 123-ФЗ — Moscow AI experimental legal regime, EXPIRED 1 July 2025

The EU AI Act enters into force and becomes enforceable on August 2, 2026 — a fixed, non-negotiable deadline applicable across all 27 EU member states and the EEA. This is not a deadline for planning or preparation; it is the date on which regulators and private parties can begin filing complaints, triggering investigations, and seeking penalties. Unlike GDPR, which had a 2-year grace period before enforcement (May 2016 adoption, May 2018 enforcement), the EU AI Act's enforcement timeline is compressed: the directive was adopted in December 2023, and enforcement begins August 2, 2026 — less than 20 months from adoption to active penalty risk. Businesses should treat August 2 as the same kind of hard cutoff as GDPR's May 25, 2018: compliance is required from day one, and non-compliance creates daily exposure.

Within the August 2, 2026 deadline, nested compliance deadlines apply to different system categories. Prohibited AI systems (facial recognition in law enforcement, social credit scoring, subliminal manipulation) cannot be deployed at all after August 2 — deployment is not a compliance violation, it is an immediate prohibited activity. High-risk systems must have completed conformity assessments (including bias and fairness testing) before August 2, must document human-review processes, and must implement transparency disclosures to affected individuals by the enforcement date. Limited-risk systems must provide transparency disclosures by August 2. Prohibited systems already in deployment must be removed by August 2. The deadline structure means a single non-compliance — one high-risk system without pre-deployment assessment, one prohibited system still in operation, one missing disclosure notice — creates measurable enforcement exposure on day one of the deadline.

National implementation and enforcement begin immediately on August 2, 2026. Each EU member state has designated a national AI authority responsible for complaint intake, investigation, and penalty assessment. In Russia, [National AI Authority details]. These authorities are staffed and equipped to begin enforcement on August 2 — they do not wait for national regulations to be finalized or enforcement guidance to be published. The first enforcement actions will likely target the highest-impact, most visible violations: prohibited systems still in operation, high-risk hiring systems without documented assessment, and chatbots that fail to disclose AI use. Smaller or less visible violations will be addressed through complaint-driven enforcement, but the baseline assumption should be that enforcement begins immediately.

The most urgent remediation timeline is now until August 2, 2026. Businesses should immediately: conduct a complete inventory of all AI systems, identify high-risk and prohibited systems, remove any prohibited systems from production, complete conformity assessments for high-risk systems, implement transparency disclosures, establish human-review processes, and document all compliance activities. For businesses with high-risk systems already in production, this timeline is extremely compressed — you must complete risk assessment, bias testing, and remediation of identified issues within months, not years. Attempting to compress months of work into weeks creates quality risk (assessment documents become rubber stamps, bias testing becomes superficial) that invites regulatory scrutiny.

After August 2, 2026, compliance obligations become ongoing and permanent. You must maintain conformity assessments for high-risk systems, re-assess annually, conduct bias re-testing after model updates, monitor human-review patterns and escalation rates, maintain audit logs, handle individual requests for explanation and appeal, and respond to regulatory inquiries. The deadline of August 2 is not the end of compliance work — it is the beginning of continuous compliance as a permanent operational function.

Russia AI law deadlines

Already in effect
⚠️ EU AI Act prohibited-practices ban + AI literacy obligations (Art. 4) since February 2, 2025.
Already in effect
GPAI obligations (general-purpose AI models) since August 2, 2025.
August 2, 2026
⚠️ EU AI Act high-risk-AI obligations bite — full conformity assessment, CE marking, and registration required for systems serving Russia users.
August 2, 2027
Final phase: high-risk AI embedded in regulated products covered by NLF legislation.
72 hours
Personal-data breach notification window under GDPR (notify the Russia DPA).
Annual
Refresh DPIAs and bias assessments; review the supervisory authority's latest guidance for Russia.

More Russia resources

AI Compliance Checklist💰 AI Law Fines & Penalties📋 AI Compliance Requirements📖 AI Compliance Guide← All Russia resources

Other countries

Germany (EU)France (EU)Netherlands (EU)Spain (EU)Italy (EU)Sweden (EU)
Editorial standards

Anchored to the primary government source (statute, bill text, or agency rule) and verified directly against it · Last verified Sep 3, 2026. See our methodology.

Primary sources · Russia