- 1 Dec 2026 AU Will your onboarding accept private-sector Digital IDs?
- 10 Dec 2026 AU Does your privacy policy explain your automated KYC decisions?
- End 2026 EU Is your ID verification ready for EUDI Wallets?
- End 2026 at earliest UK Have your directors and PSCs verified with Companies House?
- 1 Jan 2027 US Can your age checks keep up state by state?
- 1 Apr 2027 JP Is your eKYC ready for the IC-chip mandate?
- 10 Jul 2027 EU Is your CDD flow ready for the AMLR?
- 1 Jan 2028 US Are your adviser clients ready for FinCEN’s AML rule?
- 31 Mar 2029 AU Is your initial CDD on the new AUSTRAC model?
- Now AU Tranche 2 is live. Is your AML/CTF program running?
What you are required to do, and what is changing
One page per regulation: what the law requires, who it binds, what changes next, and which part of the work satisfies each obligation. Product-neutral, and useful whether or not you ever use StackGo.
Every regulation here is filed three ways: the jurisdiction it applies in, who it binds, and the kind of obligation it creates. A regulated business rarely faces one of these at a time, and the three kinds pull against each other: the anti-money-laundering rules tell you to keep a record for years, and the privacy rules govern what that record may contain and who may see it.
A regulation shows under an industry unless it is specific to other industries. Choosing Accounting hides obligations that only bind, say, law firms or real estate agents. Rules that bind platforms or banks rather than these industries show only under All.
What changes next
Dated changes checked against the regulator or the legislation. Proposed changes without a fixed date are on each regulation’s own page.
- CommencingAustraliaIdentityDigital ID Act 2024
The Australian Government Digital ID System starts to support private-sector participation. Businesses using myID contribute to its cost from 1 Jan 2027. Source
- CommencingAustraliaPrivacyPrivacy Act: automated decisions
Privacy policies must explain decisions made, or substantially and directly helped, by a computer program that significantly affect people. Source
- ProposedAustraliaPrivacyChildren’s Online Privacy Code
The OAIC must register a code on how online services likely to be used by children handle their personal information. Its start date is not yet announced. Source
- CommencingEuropean UnionIdentityeIDAS 2: EU Digital Identity Wallets
Each member state must offer at least one EU Digital Identity Wallet, 24 months after the first implementing acts took effect. Source
- CommencingUnited KingdomIdentityCompanies House identity verification
Companies House says the transition for existing directors and people with significant control completes no earlier than the end of 2026, when it starts compliance activity against those who have not verified. Each company’s deadline is its next confirmation statement. Source
- CommencingUnited StatesIdentityState app store age assurance laws
California’s Digital Age Assurance Act and Alabama’s law start; Utah and Louisiana follow in 2027. Dates have moved several times and some are in litigation. Source
- CommencingAustraliaAML/CTFScams Prevention Framework
Most obligations for banks, telcos and digital platforms start under the framework and sector codes. Source
- CommencingJapanIdentityJapan eKYC IC-chip mandate
Remote verification by photo of an ID document ends; reading the IC chip on a My Number Card or similar becomes the standard method. Out of StackGo’s markets; listed for reference. Source
- CommencingEuropean UnionAML/CTFEU AML Regulation (AMLR)
One directly applicable EU rulebook for customer due diligence, beneficial ownership and monitoring applies in all 27 member states. Source
- DelayedEuropean UnionIdentityEU AI Act: biometric systems
High-risk rules for biometric systems apply, moved back by the Digital Omnibus. Source
- CommencingEuropean UnionIdentityeIDAS 2: relying parties accept EUDI Wallets
Regulated private relying parties, including banks and others that must identify customers, must accept EU Digital Identity Wallets (date calculated from the 36-month rule). Source
- DelayedUnited StatesAML/CTFFinCEN investment adviser AML rule
AML/CFT program and suspicious activity reporting duties for registered and exempt reporting advisers, postponed from 2026. Source
- CommencingAustraliaAML/CTFAML/CTF Rules 2025: initial CDD transition
The transition for existing reporting entities moving to the new customer due diligence model ends. Source
No dated changes for this filter. Each regulation’s page lists what is proposed.
Know who your client is, check them against sanctions, PEP and adverse-media sources, rate the risk, and keep the record. These are the obligations that make a firm a reporting entity.
- Read the requirements →Australia
AML/CTF Act, Tranche 2 reforms
Applies to Accounting and advisory · Legal · Real estate · Conveyancing · Trust and company service providers · Precious metals and stones
Industries All industries
- Read the requirements →New Zealand
AML/CFT Act (New Zealand)
Applies to Accountants · Lawyers and conveyancers · Real estate agents · Trust and company service providers · Financial institutions
Industries All industries
- Read the requirements →Australia
AML/CTF Rules 2025
Applies to Existing reporting entities: banks, lenders, remitters, financial advisers, bullion dealers, gambling and digital currency businesses · Tranche 2 businesses from 1 Jul 2026
Industries All industries
Next 31 Mar 2029: AML/CTF Rules 2025: initial CDD transition
- Read the requirements →United States
Corporate Transparency Act: BOI reporting
Applies to Foreign companies registered to do business in a US state · Accountants and lawyers who filed BOI for clients · Firms onboarding US entity clients
Industries Trust and company services, Legal, Accounting
- Read the requirements →European Union
EU AML package: AMLR, AMLA and AMLD6
Applies to Auditors, external accountants and tax advisers · Notaries, lawyers and legal professionals · Estate agents · Trust and company service providers · Credit and financial institutions
Industries All industries
Next 10 Jul 2027: EU AML Regulation (AMLR)
- Read the requirements →United Kingdom
Failure to prevent fraud
Applies to Large companies and partnerships, including large accounting, law and financial services firms · Their employees, agents and others who perform services for them
Industries All industries
- Read the requirements →United States
FinCEN AML rule for dealers in precious metals, stones and jewels
Applies to Jewellers, bullion and gemstone dealers above the $50,000 thresholds · Retailers buying over $50,000 from the public or foreign suppliers · Any business taking more than $10,000 in cash (Form 8300)
Industries Precious metals and stones
- Read the requirements →United States
FinCEN AML/CFT program rules: investment advisers and program reform
Applies to SEC-registered investment advisers · Exempt reporting advisers · Banks, broker-dealers, MSBs and other BSA financial institutions
Industries Platforms and other sectors, not these industries directly
Next 1 Jan 2028: FinCEN investment adviser AML rule
- Read the requirements →United States
FinCEN residential real estate reporting rule
Applies to Settlement and closing agents · Title companies and underwriters · Real estate attorneys · Firms advising entity or trust buyers
Industries Real estate, Conveyancing, Legal
- Read the requirements →United Kingdom
HMRC AML supervision
Applies to Accountancy service providers without a professional body · Trust and company service providers · Estate and letting agents · Art market participants and high value dealers
Industries Accounting, Trust and company services, Real estate, Precious metals and stones
- Read the requirements →United Kingdom
Money Laundering Regulations 2017
Applies to Accountants and tax advisers · Lawyers and conveyancers · Estate and letting agents · Trust and company service providers · Financial firms
Industries All industries
- Read the requirements →Canada
PCMLTFA and FINTRAC
Applies to Accountants and accounting firms · Real estate brokers, sales representatives and developers · BC notaries · Title insurers and financial reporting entities
Industries Accounting, Real estate, Precious metals and stones, Trust and company services, Conveyancing
- Read the requirements →Australia
Scams Prevention Framework
Applies to Banks · Telecommunications providers · Digital platforms · Not accountants, lawyers or real estate firms
Industries Platforms and other sectors, not these industries directly
Next 31 Mar 2027: Scams Prevention Framework
Rules prescribing how a person’s identity must be established for a particular purpose, separately from any anti-money-laundering duty.
- Read the requirements →United Kingdom
Companies House identity verification
Applies to Company directors and PSCs · Accountants and lawyers acting as ACSPs · Company formation agents
Industries All industries
Next End 2026 at earliest: Companies House identity verification
- Read the requirements →United Kingdom
Data (Use and Access) Act 2025
Applies to Digital identity providers seeking registration · Firms that rely on digital identity for KYC or right to work checks · All UK controllers, for the data protection changes
Industries All industries
- Read the requirements →Australia
Digital ID Act 2024
Applies to Digital ID providers seeking accreditation · Businesses that want to accept myID or other Digital IDs · AML/CTF reporting entities choosing how to verify customers
Industries All industries
Next 1 Dec 2026: Digital ID Act 2024
- Read the requirements →European Union
eIDAS 2 and the EU Digital Identity Wallet
Applies to EU member states · Banks, payment firms and other private relying parties required to use strong user authentication · Very large online platforms · Any firm that chooses to accept the wallet
Industries All industries
Next End 2026: eIDAS 2: EU Digital Identity Wallets
- Read the requirements →European Union
EU AI Act and biometric identity checks
Applies to Providers of identity verification and biometric AI systems · Firms that deploy those systems in the EU · Non-EU providers and deployers whose system output is used in the EU
Industries All industries
Next 2 Dec 2027: EU AI Act: biometric systems
- Read the requirements →Japan
Japan eKYC: IC chip reading replaces photo-of-ID checks
Applies to Banks and other financial institutions · Real estate brokers · Judicial scriveners, administrative scriveners, certified public accountants and tax accountants · Lawyers, through equivalent bar association rules
Industries All industries
Next 1 Apr 2027: Japan eKYC IC-chip mandate
- Read the requirements →United Kingdom
Online Safety Act age assurance
Applies to User-to-user and search services likely to be accessed by children · Sites that publish or allow pornography · Not professional firms doing KYC
Industries Platforms and other sectors, not these industries directly
- Read the requirements →Australia
Online safety age assurance
Applies to Age-restricted social media platforms · Search engines, hosting, app stores and other online services under the industry codes · Not professional firms
Industries Platforms and other sectors, not these industries directly
- Read the requirements →United Kingdom
UK digital ID scheme
Applies to UK citizens and legal residents who choose to get one · Employers doing right to work checks · Businesses and regulated firms that may accept it in future
Industries All industries
- Read the requirements →United States
US state app store and device age assurance laws
Applies to App stores · Operating system providers (California) · App developers
Industries Platforms and other sectors, not these industries directly
Next 1 Jan 2027: State app store age assurance laws
- Read the requirements →Australia
Verification of Identity Standard (ARNECC)
Applies to Conveyancers and lawyers who are e-conveyancing Subscribers · Mortgagees and lenders · Identity Agents acting for them
Industries Conveyancing, Legal
What you may collect, where it may be held, how long you may keep it, and who may see it. These pull against the AML retention duties, and reconciling the two is the part firms find hardest.
- Read the requirements →Australia
Children's Online Privacy Code
Applies to Social media services, relevant electronic services and designated internet services likely to be accessed by children · Services primarily concerned with children's activities · Indirect for professional firms
Industries Platforms and other sectors, not these industries directly
Next 10 Dec 2026: Children’s Online Privacy Code
- Read the requirements →European Union
GDPR for KYC on EU residents
Applies to Firms in the EU doing customer due diligence · Firms outside the EU offering services to people in the EU · Identity verification and screening vendors acting as processors
Industries All industries
- Read the requirements →Canada
PIPEDA and Bill C-36 (Protecting Privacy and Consumer Data Act)
Applies to Private-sector organisations handling personal information in commercial activity · Accountants, lawyers, real estate and financial firms running KYC · Service providers that process identity data
Industries All industries
- Read the requirements →Australia
Privacy Act 1988 and the APPs
Applies to APP entities with turnover above $3 million · Small accountants, lawyers, conveyancers, real estate agents and TCSPs that are AML/CTF reporting entities · Their authorised agents
Industries All industries
- Read the requirements →New Zealand
Privacy Act 2020 (New Zealand)
Applies to Every NZ agency, public or private, of any size · Accountants, lawyers, conveyancers, real estate agents and TCSPs doing AML/CFT CDD · Anyone using face matching or liveness
Industries All industries
- Read the requirements →Australia
Privacy Act reforms
Applies to APP entities · Small accountants, lawyers, conveyancers and real estate agents for their AML/CTF handling since 1 Jul 2026 · Any business, for the statutory tort
Industries All industries
Next 10 Dec 2026: Privacy Act: automated decisions
- Read the requirements →United Kingdom
UK GDPR and KYC
Applies to Accountants, lawyers, conveyancers, estate agents and TCSPs doing AML checks · Any UK controller handling identity and screening data
Industries All industries
Ready to make onboarding minutes, not hours?
Start free and run your first check today, or book a demo and we will walk you through it.